Privacy Policy

Last updated: 12 October 2026

Cool& - Post Purchase Survey (“the App”) is a Shopify app operated by Peter Coolen Creative Developer (“we”, “us”). It lets Shopify merchants show a survey on their store’s Thank You page. This policy explains what data the App handles when a merchant installs it and when their customers answer a survey.

Our role

For survey responses, the merchant decides what to ask and what to do with the answers, so the merchant is the data controller and we process the data on their behalf, under our Data Processing Terms. For merchant account data, we are the controller.

Data about merchants

Your shop’s myshopify.com domain.
An access token issued by Shopify, so the App can work with your store. The App can only read, not change, your store’s languages, markets, products, customers and orders. It uses products and customers only to decide which survey a customer sees, and orders only to pass the right order to Shopify Flow.
The surveys, questions and settings you create in the App.
If you connect Klaviyo, your Klaviyo API keys. The private key is stored encrypted.

Data about your customers

When a customer views or answers a survey, the App stores:

The answers they give.
The ID of the order the survey was shown for.
The order total and currency, whether it was their first order, and their Shopify customer ID, to show the merchant the revenue behind each answer.
Their email address, when Shopify makes it available on the Thank You page.
Their country, language, market and timezone, as reported by the Shopify checkout.
When the survey was shown and whether it was completed, to calculate the completion rate.

To decide which survey a customer sees, the App also uses the products, collections and discount codes of their order and their customer tags. These are used only at that moment and are not stored.

We don’t use cookies or tracking scripts in the survey, and we don’t collect payment details, addresses or phone numbers.

Cookies on this website

This website (www.post-purchase-survey.com) uses Google Analytics to count visits and see which pages are useful, but only if you accept cookies in the banner. Google Analytics then sets the _ga cookies, which last up to two years, and Google processes your IP address, browser and pages viewed on our behalf. If you decline, no analytics cookies are set. We remember your choice for a year in a cookie_consent cookie, which is needed for the site to work and only says whether you accepted. You can change it at any time with Cookie settings at the bottom of every page.

Early-access requests

If you ask for early access on this website, we receive your name, email address, store URL and message by email. We only use them to send you an install link and answer your questions, and delete them once you’re set up or tell us you’re no longer interested.

How we use the data

To show surveys and record responses.
To show the merchant their results and let them export responses.
If the merchant turns on the Klaviyo integration, to add the customer’s answers to their profile in the merchant’s Klaviyo account.
If the merchant uses the Shopify Flow trigger, to send the answers with the customer and order to Shopify Flow, inside the merchant’s Shopify account.
To provide support and keep the App secure and working.

We never sell data or use it for advertising.

Who we share it with

Hosting: the App runs on Vercel and stores its data in a Prisma Postgres database in the United States (AWS us-east-1).
Klaviyo: only when the merchant connects their own Klaviyo account.
Resend: to email the store owner about their data, for example before and after it is deleted, and to deliver early-access requests from this website to us.
Shopify: as the platform the App runs on.
Google: Google Analytics on this website, only if you accept cookies.

We may also disclose data where the law requires it.

How long we keep it

We keep survey data while the App is installed so merchants can see their results. When a merchant uninstalls the App, we delete all of their store’s data 48 hours later, unless they install it again in the meantime. When a customer asks the store to delete their data, we delete their survey responses. Merchants can also ask us to delete their store’s data at any time by emailing us.

Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, and to object to how it’s used. If you answered a survey in a store, the easiest way is to contact that store, since they control their survey data. You can also email us at support@post-purchase-survey.com and we’ll help. If you are in the EU or UK, you can also complain to your local data protection authority.

Security

Data is sent over encrypted connections, access is limited to what’s needed to run the App, and sensitive keys are encrypted at rest.

Changes

If we change this policy, we’ll update the date at the top. For significant changes we’ll let merchants know in the App or by email.

Contact

Questions about privacy? Email support@post-purchase-survey.com.