Privacy policy
Last updated 16 October 2026
SampleX is a Shopify app made by Making Pixels Ltd, a company registered in England and Wales (company number 17422460) at 66 Paul Street, London, EC2A 4NA, United Kingdom. It lets merchants offer product samples in their Shopify store. This policy explains what data SampleX handles, why, and what happens to it. Questions go to sam@makingpixels.com.
Who is responsible
For data about a store’s customers, the merchant is the controller and SampleX processes it on their behalf, only to provide the app. For data about merchants themselves, Making Pixels Ltd is the controller.
Data about merchants
- The store’s Shopify domain and the access token Shopify issues when the app is installed.
- The settings and sample offers the merchant configures in SampleX.
- The merchant’s plan. Billing itself is handled by Shopify; we never see payment details.
Data about a store’s customers
When a customer places an order in a store that uses SampleX, we keep:
- Shopify order and customer IDs, order numbers, which sample products were ordered, quantities and sample prices.
- A one-way, keyed hash of the order’s email address and shipping address. We use it to apply the merchant’s per-customer sample limits and to tell when someone who ordered samples later buys the full-size product. The hash can’t be turned back into an email or address.
We never store customers’ names, email addresses, phone numbers or postal addresses in readable form. Some data is kept in the merchant’s own Shopify store rather than by us: a sample-usage count on the customer record, and any one-time credit codes the merchant chooses to issue.
If the merchant turns on follow-ups, SampleX tells Shopify Flow in their store that a follow-up is due, with the customer and order reference. Any email is sent by the merchant’s own email tools, not by SampleX.
What we use it for
Only to run the app: showing sample buttons, enforcing sample limits at checkout, preventing abuse, issuing credit codes, triggering follow-ups and showing the merchant how samples turn into sales. We don’t sell data, use it for advertising, or combine data across stores.
Service providers
- Shopify, the platform the app runs on.
- Fly.io, which hosts the app and its database in London, UK.
- Tigris Data, via Fly.io, which stores encrypted database backups.
- Sentry, which receives technical error reports, stored in the EU. Error reports don’t include customer personal data.
How long we keep it
For as long as the app is installed. When a merchant uninstalls SampleX, Shopify asks us to erase the store’s data, and we delete everything we hold for that store. When Shopify passes on a customer’s erasure request, we delete that customer’s sample orders and related records. Deleted data can stay in backups for up to 30 days before the backups expire.
Security
Data is encrypted in transit, access is limited to the people who run the service, and customer contact details are only ever stored as one-way hashes.
Your rights
Customers should contact the store they ordered from; the merchant can act on requests through Shopify, which passes them to us. Merchants can contact us at sam@makingpixels.com to access, correct or delete their data. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or your local data protection authority.
Changes
We’ll update this page if the way SampleX handles data changes, and change the date at the top.