Last updated: 25 July 2026

Privacy Policy

This Privacy Policy describes how BENSAID LLC (“we”, “us”, or “our”) collects, uses, stores, and shares information in connection with the Shopify application Widerova EU Withdrawal Form (“Widerova”, the “App”) and the related website at widerova.2mbsolutions.online.

Widerova helps Shopify merchants collect and manage European Union right-of-withdrawal requests. By installing or using the App, or by submitting a withdrawal form on a merchant’s storefront that uses Widerova, you acknowledge the practices described here.

1. Who we are

Controller / App provider: BENSAID LLC
Contact: contact@2mbsolutions.online
Service: Widerova EU Withdrawal Form (Shopify app)

When a customer submits a withdrawal request on a merchant’s store, the merchant is typically the data controller for that customer’s personal data. We process that data on the merchant’s behalf as a data processor to provide the App. For our own marketing site, merchant account records, and App operations, we act as an independent controller.

2. Information we collect

2.1 Merchant (Shopify shop) data

  • Shop domain and Shopify shop identifiers
  • OAuth access tokens and session data required to operate the App
  • Plan and billing status via Shopify Billing
  • App settings (form copy, email templates, widget appearance, automations, exemptions, locale)
  • Optional merchant notification email address configured in the App

2.2 Customer withdrawal request data

When a buyer uses a Widerova form on a merchant storefront, we may process:

  • Customer name and email address (encrypted at rest)
  • Order number / order identifiers and selected line items
  • Withdrawal type, status, locale, timestamps, and deadline
  • Authentication method used to verify the request
  • Decline reason and related case notes where applicable
  • Email delivery logs (recipient address, message type, provider message id, sent time)

2.3 Technical and operational data

  • Server logs (IP address, user agent, timestamps, request paths) for security and debugging
  • Webhook event metadata from Shopify (including mandatory GDPR compliance topics)

We do not intentionally collect payment card numbers through Widerova.

3. How we use information

  • Provide, operate, and improve the App for installed shops
  • Verify and store withdrawal requests and related compliance records
  • Send transactional emails (e.g. confirmation, status updates) as configured by the merchant
  • Generate audit exports and PDF reports for the merchant
  • Run merchant-configured automations (e.g. tags, cancel, refund) via Shopify APIs
  • Process billing through Shopify
  • Respond to Shopify GDPR webhooks and legal requests
  • Secure the service, prevent abuse, and troubleshoot incidents

Legal bases under GDPR (where applicable) include performance of a contract with the merchant, legitimate interests in operating a secure SaaS product, and compliance with legal obligations. Merchants are responsible for having a valid basis to collect customer withdrawal data on their stores.

4. Sharing of information

We share data only as needed to run the App:

  • Shopify — authentication, orders, returns, products, billing, and compliance webhooks
  • Email delivery provider — to send transactional messages configured by the merchant
  • Hosting / infrastructure providers — to store encrypted databases and run the application
  • The merchant — who can view, export, and act on withdrawal requests for their shop

We do not sell personal data. We may disclose information if required by law, or to protect the rights, safety, and integrity of BENSAID LLC, merchants, or users.

5. International transfers

Servers and subprocessors may be located outside your country (including outside the EEA/UK). Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms offered by our providers.

6. Retention

  • Active shops: withdrawal requests and settings are retained while the App is installed and as needed for the merchant’s compliance workflow.
  • Uninstall / shop redact: when Shopify sends a shop/redact webhook after uninstall, we delete shop records, settings, withdrawal requests, email logs, and related sessions associated with that shop.
  • Customer redact: on customers/redact, we anonymize matching customer personal data in withdrawal requests for that shop.
  • Logs: operational logs are kept for a limited period for security and diagnostics.

7. Security

We use industry-standard measures appropriate to the nature of the data, including HTTPS in transit and encryption of sensitive customer fields (such as name and email) at rest. No method of transmission or storage is 100% secure; merchants should also protect access to their Shopify admin.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port personal data, and to object to certain processing.

  • Store customers: contact the merchant first. Merchants can also receive data-export packages when Shopify sends a customers/data_request webhook for their shop.
  • Merchants / visitors: email contact@2mbsolutions.online with your request. We may need to verify your identity and the shop involved.

You may lodge a complaint with your local supervisory authority if you believe processing violates applicable privacy law.

9. Children’s data

Widerova is intended for merchants and adult consumers exercising withdrawal rights. We do not knowingly collect personal data from children for the purpose of offering the App to them.

10. Cookies and similar technologies

The public marketing pages use minimal technical cookies or local storage only as needed for basic site function. The merchant admin UI runs inside Shopify Admin and relies on Shopify’s session and authentication mechanisms. Storefront widgets operate in the merchant’s theme context.

11. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the App after an update constitutes acceptance of the revised policy where permitted by law.

12. Contact

Questions about privacy or this policy:
BENSAID LLC
Email: contact@2mbsolutions.online
App: Widerova EU Withdrawal Form