Privacy policy

Who we are

MediAsk is a Shopify application provided by Northern Web. For privacy questions or requests, contact [email protected].

Information we collect

From merchants

• Shopify shop domain and related installation identifiers needed to authenticate the app.
• Offline access tokens and session data required to keep the app connected to the merchant’s Shopify store.
• Questionnaire configuration created in the app, including questions, scoring rules, themes, and related settings.
• Billing and subscription status for MediAsk Premium when a merchant upgrades through Shopify Billing.
• Optional external API settings that a Premium merchant configures for submission forwarding.

From shoppers

• Answers submitted through MediAsk questionnaires on the merchant’s storefront. Depending on the questionnaire, this may include health-related or intake information such as BMI inputs, symptom responses, contact details, and consent acknowledgements.
• Calculated score results and matched result-range information generated from those answers.

MediAsk also uses Shopify APIs with the scopes granted at install time, currently including access needed to read products and files for questionnaire media and branding features.

How we use information

• To operate, authenticate, and maintain the MediAsk app.
• To display questionnaires on the merchant’s storefront and store submissions for the merchant to review and export.
• To calculate scores and show or redirect shoppers according to the merchant’s configured result ranges.
• To provide Premium features such as brand logos, image questions, hiding MediAsk branding, and forwarding submissions to a merchant- configured external endpoint.
• To provide customer support when merchants contact us.
• To protect the security and integrity of the service.

We do not sell personal information. We do not use shopper questionnaire answers for advertising.

Storage, security, and hosting

App data is stored in infrastructure used to run MediAsk, including a hosted database. Sensitive submission fields may be encrypted at rest before storage.

No method of transmission or storage is completely secure. We take reasonable technical and organisational measures to protect information, but we cannot guarantee absolute security.

Sharing of information

We may share information only in these situations:

• With Shopify, as required to operate an embedded Shopify app and process billing.
• With service providers that host or operate the app infrastructure on our behalf.
• With a merchant’s chosen external system when the merchant enables Premium submission forwarding and provides an endpoint.
• When required by law, regulation, or a valid legal request.
• To protect the rights, safety, or security of MediAsk, merchants, shoppers, or others.

Merchants are responsible for their own privacy notices to shoppers, including explaining what questionnaire data they collect and how they use it.

Data retention and deletion

We retain app and submission data for as long as needed to provide the service to the merchant and for legitimate operational, legal, or security purposes.

When a merchant uninstalls MediAsk, we process uninstall webhooks and remove or discontinue active access associated with that installation according to our normal uninstall handling. Merchants may also contact us to request deletion of remaining app data where applicable.

International transfers

MediAsk may process and store information on servers located outside your country of residence. By using the app, merchants acknowledge that information may be transferred to and processed in those locations.

Children

MediAsk is intended for use by Shopify merchants in connection with their stores. It is not directed at children under 16, and we do not knowingly collect personal information from children under 16.

Your rights and choices

Depending on your location, you may have rights to request access, correction, or deletion of personal information we hold, or to object to certain processing. Merchants and individuals can contact [email protected] to make a request. We may need to verify the request before acting on it.

Shoppers who want to exercise privacy rights related to answers collected by a merchant should contact that merchant first, because the merchant controls the questionnaire and related customer relationship.

Changes to this policy

We may update this privacy policy from time to time. When we do, we will revise the effective date above and post the updated policy on this page.

Contact

Northern Web
Email: [email protected]
App site: mediask-qkqc8.ondigitalocean.app