Personal data protection

New Member
5 0 0
Hi, I am in the process of setting a shop up. Before that, and to comply with my country's regulation on personal data protection, I'd need to confirm a couple of things. If I understand it correctly, shopify is incorporated in Canada. As such, it is considered adequate [1] to store my customer's personal data. However, I would need to know whether the servers are actually in Canada or, perhaps, in the US. If they were in the US, the hosting company would need to comply with the Safe Harbor principles in regards to personal data protection. So, my question is, where are the servers located? Whois reports they might be in Texas, but just to be sure, I thought I would ask. Thanks in advance. Cheers, Victor [1] http://ec.europa.eu/justice_home/fsj/privacy/thridcountries/adequacy-faq_en.htm
0 Likes
Shopify Staff
Shopify Staff
2002 0 41

Fascinating read. Thank a lot for brining this up.

Servers are hosted with layered tech which is a provider out of dallas. This is also where the servers are physically located right now.

Shopify does not stores customer records beyond Orders. No credit cards which are submitted by customers ever touch the hard drive or the database.

Tobias Lütke - Shopify CEO // http://twitter.com/tobi
0 Likes
New Member
5 0 0

Oomph!

Unfortunately, something as silly as the customer’s name or email address is considered personal data, and is subject to protection. :( Even if you discarded all data after the order, the bare fact of transmitting it back and forth is covered under the law.

Layered Tech is not in the Safe Harbor list. I would like to know if you can influence them to adhere to the safe harbor principles, in order to be able to accept shops for European customers. Meanwhile, all the EU shops will be on dubious legal ground, so perhaps it is in your best interest to find a hosting partner that is able to provide this level of commitment to personal data safety.

Please let us know.

Cheers, Victor

0 Likes
New Member
5 0 0

Thanks Scott. I will continue setting up my shop meanwhile, and hope that by when the first customers arrive, it’s all ready.

Anyway, my shop is so unimportant that I’m sure it would not draw attention from the powers that be, so it doesn’t worry me too much, it’s just that I can’t help but nitpick

In the end, though, all your EU shops should be aware of this, so it’s best to be ready anyway

0 Likes