I set up a limited company and shopify shop recently, and received a letter from ICO (Information Commissioner's Office) in UK. It states that I every company that holds customers information on a computer must pay an annual fee for Data Protection purposes. My shop has yet to start functioning, does anyone else from UK are aware of this? are we liable to pay this fee if using shopify?
Whether you need to pay a fee will be based on whether or not you handle certain pieces of data about customers. The ICO has a self-assessment quiz to check if you are exempt: https://ico.org.uk/for-organisations/data-protection-fee/self-assessment/
Hello – I too sell through Shopify. The ICO asks if I'm processing personal information
‘Processing’ means doing any of the following with the information:
as per ICO website
‘Organisations that do not decide how personal data is processed are exempt. You therefore do not have to pay a fee to the ICO’
shopify is in charge of collecting/processing the data so i’d imagine you are exempt.
I received letter in Feb for payment but never paid and haven’t heard anything since.
hope this helps
UPDATE: Right – I finally got to speak to someone at the ICO and got completely contradictory advice from two different people! The first woman I spoke to said that as a Shopify user, I would be liable for the fee; she then passed me onto someone else who said I wouldn't. I also process wholesale orders so assume that this means I am, but if you only sell B2C via Shopify, then I'd say, call them up and check – you might be lucky and get the man who says you don't have to pay it! They don't record calls, though, so I wouldn't rely on it in court...
i just received the same email. and I was hesitant if i should pay or not.
i went to ico live chat, and i asked there if i should pay or not. i explained to her that i'm selling by using shopify and i just use the personal informations for send the product to my costumers and i didn't use it for anything else. and she tell me that Then there would be no requirement to register, as this is under the 'Accounts and Records' core business exemption. and she asked about my Companies House number.
finally she tell me that recorded that my company is exempt from paying the data protection fee, so there will be no further letters sent out about this company.
just contact them in live chat