Your information

Privacy policy

Last updated: 13 October 2026

Who runs the app

Ctrl Alt Del Limited offers Catwalk Wholesale Connect directly to merchants. We are responsible for the personal information described in this policy, known as the data controller. The app creates product listings from your Catwalk orders and helps you add stock to Shopify.

For app support or a privacy request, email contact@ctrlaltdel.co. Catwalk Wholesale Limited separately manages your Catwalk shopping account and orders under its website privacy policy.

Information we use

Your Shopify connection. We receive your shop identity, relevant store settings, app permissions and sign-in information. Shopify may also provide an authorized staff member's identifier, name, email, language and account-status details. Stored Shopify access credentials are encrypted.

Your Catwalk connection and orders. When you connect, we receive your Catwalk customer identifier and a connection reference. You sign in on Catwalk's website; the app does not receive or store your Catwalk password. We read order references, payment and refund status, currency, product details, quantities, historical costs and available dispatch details. We save the order information needed for your listings and stock checks, not the full WooCommerce response or billing and delivery addresses as app order records.

Your listings and stock. We store product drafts, uploaded photos, saved settings, chosen stock locations, links to Shopify products, progress and stock-change records. The product information and photos you choose to add are sent to your Shopify store.

Support and technical information. We receive what you send to support. Hosting providers also produce technical logs that may include request details, IP addresses, browser information and errors. Please avoid sending passwords, access keys or your own customers' personal information to support.

The app does not request your Shopify customer list, consumer orders, checkout or payment details. It does not process card payments. Purchases of clothing are made separately through Catwalk. The app has no advertising network or merchant-behavior analytics integration.

Why we use this information

We use it to keep your connection working, show your Catwalk orders, create the listings you choose, apply your stock instructions and account for refunds. We also use it to preserve your product changes, resolve failed updates, prevent stock being added twice and answer support or privacy requests.

Where you enter into a contract with us as an individual, we use the information needed to provide that service under the contract. For business-account administration, support and security, we rely on our legitimate interests in operating the service, helping merchants and protecting accounts. We retain minimal order and update references for our legitimate interest in preventing duplicate or unauthorized stock changes. This use must remain necessary and proportionate. If the law requires us to retain or disclose information, we use it to meet that legal obligation.

Services and locations

The app connects with Shopify and Catwalk's WooCommerce service. Vercel hosts the application. Supabase hosts the database and private temporary photo storage. The application and database are configured in London. Some provider operations, logs, support or backups may involve processing outside the UK.

The providers' data processing terms describe their safeguards for international transfers, including standard contractual clauses and UK provisions. You can read the Vercel terms and Supabase terms, or contact us for information about applicable safeguards. Information added to Shopify is also subject to your Shopify account's terms.

How long information is kept

While you use the app, we keep the order, listing, product-link and stock records needed to provide it and prevent duplicate stock changes. Disconnecting Catwalk stops further authorized work but keeps your app history for reconnection. Uninstalling removes stored Shopify sessions, revokes the local connection and pauses unfinished work. It does not immediately erase every app record.

When Shopify sends a valid shop-deletion request for an uninstalled app, we remove that shop's identifiable connection, draft, settings, product-link and stock-activity records. Shared source order records still needed by another linked shop are kept for that shop. Requests that cannot safely be matched to the correct installation are held for review.

Uploaded photos expire 30 days after acceptance, or are scheduled for earlier deletion when the shop's app records are deleted. Expired photos cannot be read through the app. Storage deletion is queued and retried, so physical removal can take longer. Products, photos and stock already added to Shopify stay there until you manage them in Shopify. Your original Catwalk orders also remain with Catwalk.

After identifiable shop records are deleted, we keep coded references to order lines and quantities already used, plus minimal event receipts. These help prevent the same historical order or event from adding stock twice. They are not anonymous and currently have no automatic expiry. You can ask us to review retained information or request its deletion. We do not retain raw privacy-event messages.

We keep app-support correspondence only while needed to resolve your enquiry, manage necessary follow-up or handle a related dispute or legal requirement. We review that need rather than applying a fixed deadline to every enquiry. Provider logs and backups follow the relevant service settings and retention processes; deleting a live record does not promise immediate erasure of every backup copy.

Your choices and rights

You can disconnect Catwalk from the app or from your Catwalk account connections page, and uninstall the app in Shopify. Depending on the circumstances and applicable law, you can ask to access, correct, delete or restrict the use of your personal information, or request a portable copy. Where we rely on consent for a particular use, you can withdraw it without affecting earlier lawful processing.

Your right to object: you can object to processing based on legitimate interests. Email contact@ctrlaltdel.co and explain which use you object to so we can review it. We may need to check that you are authorized to act for the account before responding to a request.

You can raise a privacy concern with us at the same address. You can also complain to the Information Commissioner's Office, the UK's data protection authority. Your legal rights do not depend on contacting us first.

Changes to this policy

We may update this policy as the app, its providers or legal requirements change. The current version and its update date will appear on this page.