Privacy Policy — BC Countdown Timer Banner
Last updated: 8 November 2026
This policy explains how Brand Current OÜ handles personal data in connection with the Shopify app BC Countdown Timer Banner (the “App”). The App shows countdown timers on a store: on product pages, in an announcement bar, in page sections and in the cart.
In short
- We never ask Shopify for your customers’ names, emails, phone numbers, addresses or orders.
- Your timers and settings are saved in your own Shopify store, not on our servers.
- On our server we keep only your store’s domain, the access token Shopify gives the App, and which templates you liked. We delete them when you uninstall.
- The timer on your store runs in the shopper’s browser and sends nothing to us.
- The App sets no cookies on your store and doesn’t track shoppers across websites.
- We don’t sell or share data, and we don’t send marketing emails.
1. Who we are
Brand Current OÜ (“Brand Current”, “we”, “us”)
Registry code 17536526
Mooni 18, 10613 Tallinn, Estonia
Privacy contact: [email protected] (subject line: “Privacy”)
We have not appointed a data protection officer. Questions about this policy go to the address above.
2. Our two roles
| You are… | Our role | What applies |
|---|---|---|
| A merchant, or staff of a merchant, who installs or uses the App | Controller of the data about your store and your support conversations with us | This policy (sections 3–11) |
| A shopper or customer of a store that uses the App | Processor for the merchant, who is the controller | The store’s privacy policy. Section 12 explains what the App does on stores |
3. Data about merchants
| Data | Source | Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|---|---|
| Store domain (yourstore.myshopify.com) and the access token and permissions Shopify gives the App | Shopify, when you install the App | Let the App work for your store with the permissions you approved | Contract (Art. 6(1)(b)) |
| Your App settings: timers, their words and translations, dates, designs, where they show and who sees them, the products, collections and discount code you choose, and setup progress | You | Provide the App. These are saved in your own Shopify store as app data, not on our servers | Contract |
| Product and collection names and images, the images in your Shopify Files, and your discount codes (name, code, status and what they give) | Shopify, when you open a picker in the App | Let you pick products, collections, a background image or a discount code. Only what you pick is saved, in your store | Contract |
| Images you upload as timer backgrounds | You | Show them on your timers. They’re saved in your store’s Shopify Files, not on our servers | Contract |
| Template likes: your store domain and the templates you liked | You, when you tap the heart on a template | Remember your likes and sort the template library by what stores like most | Legitimate interests in improving the App (Art. 6(1)(f)) |
| Live chat: your store domain, your email address if you give it, the messages and files you send, your browser and device details and IP address | You, through the chat in the App | Answer your questions and help you set up the App | Contract; legitimate interests |
| Support emails: your email address, name and what you write | You | Answer you | Contract; legitimate interests |
| Technical logs: IP address, request times, the pages and webhooks requested | Your browser and Shopify, via our server and network provider | Keep the App secure and fix problems | Legitimate interests in security |
We don’t use your data for automated decisions that have legal or similarly significant effects on you. We don’t read your store’s orders, customers, staff or contact details.
The store domain, access token and settings are needed to provide the App: without them it can’t work for your store. Template likes, live chat and support emails are optional; the App works without them.
Cookies and browser storage in the App
The App’s pages in your Shopify admin set no cookies of their own. The live chat (Crisp) loads on the App’s pages and uses its own cookies and local storage to keep your conversation going between visits. We don’t use advertising or analytics cookies.
4. How long we keep data
| Data | Retention |
|---|---|
| Store domain and access token | Until you uninstall the App: we delete them as soon as Shopify tells us, and again when Shopify sends its shop deletion request about 48 hours later |
| Template likes | Until Shopify sends its shop deletion request, about 48 hours after you uninstall |
| Your App settings (saved in your Shopify store) | As long as the App is installed. Shopify removes them when you uninstall |
| Images in your Shopify Files | They stay in your store until you delete them (they’re your files, not ours) |
| Live chat and support emails | As long as we need them to help you, including if you reinstall later. We delete them on request (section 8) unless we need them for a legal claim |
| Technical logs | A short period for troubleshooting and security, then deleted |
5. Who we share data with
Shopify, which provides the platform the App runs on and stores your App settings and images. Shopify’s own privacy policy applies to Shopify.
Service providers that process data for us:
- Hostinger (the server that runs the App and keeps the store domains, access tokens and likes)
- Cloudflare (network security and delivery for the App’s address)
- Crisp (live chat)
- Microsoft Outlook.com (support email)
Authorities, courts and advisers, where required by law or to establish, exercise or defend legal claims. A buyer or successor of our business, if the App or our business is transferred; we will tell you first.
We do not sell personal data, and we do not share it for cross-context behavioural advertising.
6. International transfers
Some of our providers process data outside the European Economic Area, including in the United States (Shopify, Cloudflare, Microsoft, and the data center of our server). Crisp processes chat data in the EU. Where a country has no adequacy decision, we rely on the EU–US Data Privacy Framework (and its UK Extension) where the provider is certified, or on the European Commission’s Standard Contractual Clauses with the UK Addendum. You can ask us for a copy of the relevant safeguards.
7. Security
- Encryption in transit: every connection to the App, Shopify and our providers uses HTTPS.
- Data minimisation: we don’t request your customers’ or orders’ data.
- Every request from Shopify (webhooks and App pages) is verified with Shopify’s signatures.
- Access to our server and data is limited to authorised personnel.
No system is completely secure, but we work to protect your data and will notify you and the authorities of a breach as required by law.
8. Your rights
Depending on where you are, you have the right to:
- access your personal data;
- correct it;
- delete it;
- restrict processing;
- receive a portable copy;
- object to processing based on legitimate interests; and
- withdraw consent where we rely on consent.
To use these rights, email [email protected]. We reply within one month, which can be extended where the law allows. We may need to verify your identity.
Complaints: you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), to the supervisory authority where you live or work, or, in the UK, to the Information Commissioner’s Office (ico.org.uk).
9. Marketing
We don’t send marketing emails and don’t use your data for advertising. We may contact you about the App itself, for example about an important change or a problem with your store’s setup.
10. US state privacy disclosures
This section applies to residents of California and other US states with comprehensive privacy laws, for the merchant data we control.
- Categories collected in the last 12 months: identifiers (store domain, email address and IP address when you contact us) and internet or other network activity (technical logs).
- Sources: you, Shopify, and your use of the App.
- Purposes: as in section 3.
- Disclosed for business purposes to: the service providers in section 5.
- Sale or sharing: we have not sold or “shared” (for cross-context behavioural advertising) personal information, and have no actual knowledge of selling or sharing personal information of anyone under 16.
- Sensitive personal information: we keep account credentials (Shopify access tokens) only to provide the App, not to infer characteristics.
- Retention: section 4.
- Your rights: to know and access, delete, correct and opt out of sale or sharing (we do neither), and not to be discriminated against for using them. You may use an authorised agent. If we decline your request, reply to our decision to appeal; if your appeal is denied, you may contact your state Attorney General.
- How to exercise them: email [email protected].
11. Children
The App is for businesses and is not directed to children. We do not knowingly collect children’s personal data.
12. Information for shoppers on stores using the App
If you shop on a store that uses this App, the store is responsible for your data. Please read the store’s privacy policy and contact the store first. We act on the store’s instructions.
What the App does on a store:
- Shows countdown timers. The timer runs in your browser and counts in the store’s time zone. Nothing you do with it is sent to us.
- To decide whether to show a timer, it uses information the store’s own page already has: the page you’re on, the product or collection, your country and language, and, if you’re logged in to the store, the tags the store gave your customer account. This stays in your browser.
- For timers that only show to visitors from certain sources (for example a social network or an email campaign), it reads the tags in the link you arrived from (such as utm_source) and the website that sent you, and keeps them in your browser’s session storage for that visit, so the timer stays consistent as you browse. This is cleared when you close the browser tab.
- For “evergreen” timers, where every visitor gets their own countdown, it keeps the time your countdown started in your browser’s session storage or, if the store chose so, local storage, so the countdown doesn’t restart when you come back.
- If a timer shows a discount code and you click it, the code is copied to your clipboard. Nothing is sent to us.
The App does not set cookies, does not track you across websites, and does not receive your name, email, phone number, address, orders or payment details. The timer’s files are served by Shopify. If you contact us about a store’s data, we will forward your request to the store.
13. Changes
We will post updates here and change the “Last updated” date. If changes are significant, we will tell merchants in the App or by email.
14. Contact
Brand Current OÜ
Registry code 17536526
Mooni 18, 10613 Tallinn, Estonia
Email: [email protected]