Privacy Policy

Last updated: July 20, 2026

Who we are

Second Chance Discount is a Shopify app built and operated by Haych Digital Ltd, trading as Built by Shadow ("we", "us", "our"). We are registered in England and Wales.

What this app does

Second Chance Discount detects when a shopper enters a discount code that doesn't work during Shopify checkout. When a failure is detected, the app can automatically present the shopper with a valid replacement offer. The app also provides store owners with analytics on failed discount code attempts and rescued orders.

What data we collect

When you install and use Second Chance Discount, we collect and process the following data:

Store data

• Shopify store URL, name, and plan information
• Store currency and locale settings
• Access tokens provided by Shopify during app installation

Checkout and order data

• Checkout token and session identifiers
• Cart total value and currency at checkout
• Whether a discount code was entered and whether it succeeded or failed
• The number of failed discount code attempts per checkout
• Whether a rescue offer was presented, accepted, or dismissed
• Order ID and completion status (to reconcile rescued orders)

Analytics and usage data

• Aggregated reporting metrics (rescue rates, revenue recovered, funnel data)
• App feature usage (pages visited within the admin dashboard)

We do not collect:

• Customer names, email addresses, or personal contact information
• Payment card details or billing addresses
• The specific discount codes shoppers enter (we detect failure events, not the code itself)

How we use your data

We use the data we collect solely to:

• Provide the core app functionality — detecting failed codes and presenting rescue offers
• Generate reporting and analytics for store owners
• Convert checkout currencies back to your store's base currency for accurate reporting
• Reconcile checkout events with completed orders via Shopify webhooks
• Manage billing and enforce plan limits
• Monitor app performance and fix bugs
• Comply with Shopify's platform requirements and legal obligations

How we collect data

Data is collected through:

• Shopify Checkout UI Extension — runs within the Shopify checkout to detect discount code failures and present rescue offers
• Shopify Web Pixel Extension — captures checkout events for analytics
• Shopify Webhooks — receives order creation and update events from Shopify to reconcile outcomes
• Shopify Admin API — retrieves store settings, creates discount codes, and verifies order data

Data storage and security

All data is stored in a secured PostgreSQL database. Data is transmitted over HTTPS. We follow industry-standard security practices and limit database access to authorised application processes only.

Third-party services

We may share data with the following categories of third-party services, strictly to operate the app:

• Shopify — as the host platform, Shopify processes checkout and order data as described in their own privacy policy
• Hosting provider — our infrastructure provider stores and processes app data on our behalf
• Currency exchange rate API — we send currency codes (not personal data) to retrieve exchange rates
• Tawk.to (live chat) — we use Tawk.to to provide in-app live chat support within the admin dashboard. Tawk.to may collect your name, email address, and message content when you initiate a chat. Tawk.to may also set cookies to manage chat sessions. Tawk.to's privacy policy is available at tawk.to/privacy-policy

We do not sell, rent, or trade your data to any third party.

Data retention

We retain your data for as long as the app remains installed on your store. When you uninstall Second Chance Discount:

• We will delete all store-specific data within 30 days of receiving the uninstall webhook
• Aggregated, anonymised statistics may be retained for internal analytics
• Data required for legal or billing purposes may be retained as required by law

GDPR and your rights

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under GDPR:

• Access — request a copy of the data we hold about your store
• Rectification — request corrections to inaccurate data
• Erasure — request deletion of your data
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing of your data in certain circumstances

We respond to GDPR data subject requests received via Shopify's mandatory webhooks (customers/data_request, customers/redact, shop/redact) and also directly via email.

To exercise any of these rights, email us at hello@builtbyshadow.com.

Cookies

The Second Chance Discount checkout extension does not set any cookies. It runs within Shopify's checkout environment and does not independently store cookies or tracking identifiers on shopper devices.

However, within the admin dashboard, we use Tawk.to for live chat support. Tawk.to may set cookies to manage chat sessions and remember returning visitors. These cookies are limited to the admin dashboard and are not placed on your customers' devices.

Children's privacy

Our app is designed for use by Shopify store owners (businesses). We do not knowingly collect data from anyone under the age of 16.

Changes to this policy

We may update this policy from time to time. Changes will be posted on this page with an updated "last updated" date. Material changes will be communicated via the app dashboard where appropriate.

Contact

If you have any questions about this policy or how we handle your data, contact us at hello@builtbyshadow.com.