Privacy policy

Nordica Loyalty by Variegata Nordica · Updated 28 October 2026

Who we are

Nordica Loyalty is a Shopify app made by Variegata Nordica (Mallory Berthomé). Questions about this policy or your data: mallory.berthome@gmail.com.

What the app stores

• Your store’s address and Shopify access, so the app can open in your Shopify admin.
• Your rewards program: earning rules, rewards, VIP tiers, referral settings and your plan.
• For each member: their Shopify customer id, points balance and history (order ids, points, dates), amount spent and number of orders, VIP tier, referral code, the birthday they chose to give (month and day, no year), a one-way hash of their last shipping address (to stop self-referrals; the address itself is never stored) and the rewards they claimed (with the discount code). No names, emails, phone numbers or addresses.
• Messages you send with “Contact support” or “Suggest an improvement”, and the email address if you add one.
• Technical error reports: your store’s address, the page and the error, so problems can be fixed.

What Shopify sends the app

For paid, cancelled and refunded orders: the order and customer ids, the customer’s tags, line amounts and discounts, discount codes, cart attributes, and the shipping street line, postcode and country (used for the address hash, then dropped). For new customers: their id, tags and email consent state. Emails are only looked up in Shopify when you search for a member or import a CSV, and are shown, not stored.

What the app changes in your store

It saves each member’s balance and tier in a customer metafield your theme and email tools can read, adds and removes the VIP tags you choose, gives store credit and creates discount codes when customers claim rewards or share a referral link, and sends Shopify Flow events. It sends no emails.

Who processes the data

Cloudflare hosts the app and the databases. Shopify provides the store data and handles billing. Nothing is sold or shared for advertising.

How long it is kept

Member data is kept while the app is installed, and deleted at once when Shopify asks for a customer’s data to be erased. When you uninstall the app, your sign-in data is deleted at once; the program and members are kept until Shopify asks for them to be erased, 48 hours after uninstalling, so a quick reinstall gets them back.

Your rights

Email mallory.berthome@gmail.com to see, correct or delete the data held about your store or one of your customers.