Fellhelm Collection Paths — Privacy Policy
Last updated: 9 March 2026
1. Overview
This Privacy Policy describes how the Shopify app Fellhelm Collection Paths ("the App") processes data when installed in a Shopify store.
Fellhelm Collection Paths is developed and operated by Fellhelm Ltd, a company registered in England and Wales.
Fellhelm is independent and not affiliated with, endorsed by, or sponsored by Shopify Inc.
Contact: contact@fellhelm.com
2. Data Read via Shopify
When you install Fellhelm Collection Paths, the App reads limited store data through Shopify's API solely to provide its functionality. The App does not read data outside the merchant's own store.
Collections
- Collection title, ID, handle, and image URL (for linking and display)
- Collection metafields: link JSON, heading title, description, and images-enabled toggle
Pages
- Page title, ID, and handle (for the page picker)
Shop
- Shop ID and metafields (configured collections tracking, billing status)
Templates (Pro plan)
- Metaobject definitions: checks if the template definition exists and has all required fields
- Metaobjects: reads saved templates including name, items, title, description, style, and applied collections
Billing
- App subscription status via Shopify's Billing API (to check Pro plan status)
This data is read only to enable the features of the App within your store.
3. Data Written via Shopify
The App writes data to Shopify's infrastructure when you save configuration or manage templates. All written data remains within Shopify.
Collection Metafields
- Link JSON, heading title, description, and images-enabled toggle (when saving paths or applying templates)
Shop Metafields
- Configured collections tracking list
Templates (Pro plan)
- Metaobject definitions: creates or migrates the template definition (one-time setup)
- Metaobjects: create, update, and delete templates; update applied collections tracking
Files
- Staged uploads for page and URL link images, stored using Shopify's file hosting system
Fellhelm Collection Paths does not store merchant configuration data on its own servers. All configuration is stored within Shopify's infrastructure using metafields and metaobjects.
4. Data Not Accessed
Fellhelm Collection Paths does not access, collect, process, or store:
- Customer personal data (names, email addresses, physical addresses)
- Order data
- Payment details
- Product data (the App works with collections only)
- Theme code (the storefront extension is a separate app block, not injected into theme files)
- Storefront visitor analytics
- Any data outside the merchant's own store
Fellhelm Collection Paths implements Shopify's required privacy compliance webhooks. Because the App does not store customer personal data, requests received through Shopify privacy compliance webhooks such as customers/data_request and customers/redact will normally return no stored customer information.
5. Data Stored by the App
A. Authentication and Session Data
To securely operate the App, limited authentication data is stored on the App's server, including:
- Shop domain
- OAuth access token
- Staff user name, email, and ID
- App permission scopes
- Account owner or collaborator status
This information is used only to authenticate and operate the App.
Authentication and session data is automatically removed when the App is uninstalled via Shopify's app uninstall webhook.
B. Merchant Configuration Data
All merchant configuration data is stored within Shopify's infrastructure using metafields and metaobjects. This includes:
- Configured collection IDs and tracking lists
- Link targets (collection, page, or URL identifiers)
- Link labels and image URLs
- Display style settings, headings, and descriptions
- Template definitions and saved templates (Pro plan)
Images uploaded through the App are stored using Shopify's file hosting system.
Fellhelm Collection Paths does not store merchant configuration data on its own servers.
6. Logging
The App may generate limited technical logs for reliability and security purposes.
Logs:
- Do not contain customer personal data
- Do not contain merchant configuration content
- Are not shared with third-party analytics providers
7. Third-Party Services
Fellhelm Collection Paths does not use:
- External analytics platforms
- Advertising or tracking services
- Third-party APIs outside of Shopify
All functionality operates within Shopify's platform environment.
8. Data Retention
Authentication and session data is deleted when the App is uninstalled.
Merchant configuration data remains stored within Shopify unless manually removed by the merchant.
Fellhelm Collection Paths does not retain independent copies of merchant configuration data.
9. Security
We take reasonable technical and organisational measures to protect data accessed through the App, including secure transmission and restricted access controls.
10. Legal Basis (UK GDPR / GDPR)
Where applicable, data processing is based on:
- Performance of a contract (to provide the App services you request)
- Legitimate interests (to maintain, secure, and improve the App)
11. International Transfers
Shopify may process store data according to its global infrastructure and policies.
Fellhelm Collection Paths relies on Shopify's data processing and security framework when operating within the Shopify platform.
12. Your Rights
If you are located in the UK or EEA, you may have rights under data protection law, including rights of access, correction, and deletion.
Requests can be sent to contact@fellhelm.com.
You may also lodge a complaint with the UK Information Commissioner's Office (ICO).
13. Changes to This Policy
We may update this Privacy Policy from time to time. Updates will be posted with a revised "Last updated" date.
Continued use of the App after updates take effect constitutes acceptance of the revised policy.