Skip to main content

Privacy Policy

Last updated: 4 July 2026

This Privacy Policy explains how SIA JB Holdings ("Bizmate", "we", "us") collects, uses, discloses, and protects personal data when you install or use the Bizmate: B2B Suite application (the "App") on Shopify, and when you visit bizmatehq.com (the "Site").

Bizmate is a Shopify application that helps merchants capture wholesale/B2B customer applications and review, approve, or reject them before granting wholesale access. We act as a data processor on behalf of merchants for the store and applicant data we handle through the App, and as a data controller for our own account, billing, and Site analytics data.

1. Who we are​

  • Company: SIA JB Holdings
  • Registered: Latvia (European Union)
  • Contact: [email protected]

For data-protection questions, email us using the address above.

2. Data we collect​

2.1 Merchant store data (via Shopify)​

When a merchant installs the App, we request the following Shopify access scopes and process the related data to provide the service:

  • read_customers, write_customers — customer records used to create and tag approved wholesale buyers.
  • write_companies — B2B company records created on approval.
  • read_orders — order data used for spend tracking and B2B controls.

This may include customer names, email addresses, company names, and order information stored in the merchant's Shopify store.

2.2 Wholesale applicant data​

When a buyer submits a wholesale application through a merchant's form, we collect the information the merchant configures the form to request. This typically includes name, email address, company name, and any additional form responses provided by the applicant.

2.3 Account and billing data​

  • Merchant account details (name, email) associated with the store.
  • Subscription and plan information. Payments are handled by Shopify Billing; we do not store card or payment-card details.

2.4 Technical and usage data​

  • Product analytics collected to understand feature usage and improve the App.
  • Application logs and error diagnostics used for reliability and debugging.
  • Standard Site analytics (pages viewed, approximate location, device/browser) when you visit bizmatehq.com.

3. How we use data​

We use personal data to:

  • Provide, operate, and maintain the App and its onboarding/approval workflow.
  • Create and manage wholesale customer and company records in the merchant's store.
  • Track B2B spend and enforce merchant-configured purchasing controls.
  • Send transactional and service communications related to your account.
  • Monitor, secure, debug, and improve the App and Site.
  • Comply with legal obligations.

Where the GDPR applies, we rely on the following legal bases:

  • Performance of a contract — to provide the App to merchants.
  • Legitimate interests — to secure, maintain, and improve our service, and to run product/Site analytics, balanced against your rights.
  • Legal obligation — to meet accounting, tax, and regulatory requirements.
  • Consent — where required, e.g. certain analytics or marketing.

5. Sharing and sub-processors​

We do not sell personal data. We share data only with service providers who process it on our behalf under appropriate agreements:

  • Shopify — platform hosting, authentication, billing, and store data access.
  • Cloud hosting and database providers — to run the App and store data.
  • Product analytics provider — usage analytics.
  • Logging provider — application logs and error monitoring.

We may also disclose data where required by law or to protect our rights.

6. International transfers​

Data may be processed outside your country, including outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

7. Data retention​

We retain personal data for as long as needed to provide the App and for legitimate business or legal purposes. When a merchant uninstalls the App, we delete or anonymize the associated store and applicant data within a reasonable period, unless retention is required by law.

8. Your rights​

Depending on your location, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. To exercise these rights, contact [email protected].

If a merchant collected your data through the App as an applicant or customer, please contact that merchant directly; we will assist them as their processor.

9. Shopify mandatory data requests​

We honour Shopify's mandatory GDPR/CCPA webhooks:

  • customers/data_request — we provide the stored data for a given customer.
  • customers/redact — we delete the customer's data on request.
  • shop/redact — we delete a shop's data 48 hours after app uninstall.

10. Security​

We use technical and organizational measures to protect personal data, including encryption in transit, access controls, and restricted internal access. No method of transmission or storage is fully secure, so we cannot guarantee absolute security.

11. Children's privacy​

The App and Site are intended for businesses and are not directed to children under 16. We do not knowingly collect data from children.

12. Changes to this policy​

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.

13. Contact​

Questions about this policy or your data? Email [email protected].