Privacy
Last updated: October 23, 2026.
What we collect
- Your email address from the first step, even if you do not complete account creation.
- Your optional survey answers and votes for upcoming integrations.
- The account and shop details you provide in the final step.
Why, and on what basis
To process your access request and let you resume an incomplete registration, at your request. Any marketing communication is based on your consent, which you can withdraw at any time.
Who receives it
Your data is sent to the RollingPOS back office and stored with your account data. It is never sold or shared.
Analytics
We use Plausible Analytics, a cookie-free European tool that collects no personal data. That is why there is no cookie banner.
Retention
Until you unsubscribe, and no longer than 3 years after our last exchange.
Your rights
Access, correction, deletion, objection, portability: write to mathieu.abeille@gmail.com. You may also contact your data protection authority.
Data controller
[Mathieu Abeille / company name], [address]. Contact: mathieu.abeille@gmail.com.
Our merchants’ customer data
When a record store uses RollingPOS, we process its customers’ data on its behalf, as a processor. The store remains the controller. The terms are set by our data processing agreement.
- Data processed, and only this data: for orders received from connected channels (Shopify, WooCommerce, Discogs), the buyer’s name, platform username, email, shipping address, country, and the order’s content and amount. At the till, the email of a customer who asks for an emailed receipt, and their newsletter choice. We collect no phone number, date of birth or card data.
- Purposes: managing and shipping orders, keeping stock in sync across channels, sending the customer order-related emails when the merchant decides to, keeping the merchant’s customer list. The merchant’s newsletter only goes to customers who accepted it; every email has a one-click unsubscribe link.
- What we do not do: we never sell or rent this data, share it between merchants, use it for our own commercial purposes or make automated decisions about anyone.
- Retention: the buyer’s identity (name, email, address) is erased from orders 3 years after the order; customers with no purchase or contact for 3 years are anonymized. Amounts and items remain for the merchant’s accounting. Erasure requests sent by Shopify or by merchants are applied.
- Security: encrypted connections (TLS), each merchant’s data isolated down to the database, access limited by each merchant employee’s role, logging of views and exports of personal data.
- Sub-processors: application and database hosting: [provider, country]; file storage: [provider, country]; email delivery: [provider, country].
A record store’s customer can exercise their rights with the store, or write to us at mathieu.abeille@gmail.com: we forward the request.