Privacy Policy
Effective Date: August 18, 2026 | Last Updated: August 18, 2026
1. Overview & Introduction
Blockery ("the App", "we", "us", or "our"), developed by Sohel Digital, provides fraud prevention, country geofencing, IP blocking, customer blacklisting, content protection, and automated order risk filtration for merchants on the Shopify platform.
This Privacy Policy explains how we collect, use, store, and disclose information when merchants install or use Blockery, and when visitors access a store utilizing our security shield. We are committed to protecting merchant and customer privacy in strict compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Shopify's Partner Program requirements.
2. Information We Collect
To provide fraud detection and store defense services, Blockery processes the following categories of data:
A. Merchant Store Information
When you install Blockery, we access your Shopify store domain (e.g. store.myshopify.com), primary email address, store owner name, active theme status, and chosen subscription tier. We store merchant configuration rules (e.g., blocked countries, blocked IPs, custom blacklist rules, auto-cancel thresholds).
B. Storefront Visitor & Traffic Data
When visitors navigate your storefront, the Blockery shield verifies incoming requests to evaluate security rules. Data processed during verification includes: IP address, country code/location, browser user-agent header, and referring URL.
C. Order & Customer Blacklist Identifiers
When a merchant configures customer blacklists or automated order cancellation rules, we process order identifiers, customer email addresses, phone numbers, shipping addresses, and Shopify fraud risk recommendations to flag or auto-cancel fraudulent orders.
3. How We Use Your Information
- Enforcing Security & Geofencing Rules: Determining whether a visitor should be granted access, redirected, or presented with an Access Denied screen according to merchant settings.
- Fraud Detection & Auto-Cancellation: Analyzing incoming transactions and automatically tagging, holding, or cancelling high-risk orders to reduce merchant chargeback liability.
- Security Analytics & Threat Reporting: Providing merchants with aggregate analytics of blocked threats, geo-distribution, and rule trigger counts.
- App Functionality & Theme Integration: Ensuring seamless operation of theme app embeds without impacting store performance.
4. Data Retention & Security
We employ strict technical and organizational measures to safeguard merchant and customer information:
- Encryption: All data in transit is encrypted using modern TLS 1.3 cryptography. All database storage is encrypted at rest on enterprise cloud infrastructure.
- No Data Selling: We do not sell, rent, monetize, or trade merchant or customer data with third-party advertisers or data brokers.
- Automated 48-Hour Deletion: In accordance with Shopify requirements, when a merchant uninstalls Blockery, all stored sessions, rules, and configuration records are completely erased within 48 hours.
5. GDPR & CCPA Privacy Compliance Webhooks
Blockery strictly adheres to Shopify's Mandatory Privacy Webhooks with cryptographic HMAC signature verification:
Merchants can request any customer data associated with their store.
When a customer requests data erasure, their blacklist and log records are permanently deleted.
Upon receiving a shop redact webhook 48 hours after app uninstall, all database entries for the shop are permanently purged.
6. Merchant & Consumer Rights
Depending on your location (including the European Economic Area, UK, and California), you and your customers have the following rights regarding personal data:
- The right to access and receive a copy of your personal data.
- The right to request rectification of inaccurate information.
- The right to request deletion (erasure) of your personal data.
- The right to restrict or object to the processing of personal data.
7. Contact Us
If you have any questions, inquiries, or privacy requests concerning this Privacy Policy, please contact our Data Protection team: