Privacy policy

Draft updated 31 October 2026. Lookboards is operated by Patrick Campbell, based in Australia. Contact pat@ptcampbell.me about this policy or your information.

This policy describes the current app. Retention periods for provider logs, traces, backups and support correspondence are still being verified; no fixed deletion period for them is promised here.

Information we collect and why

From Shopify, we receive your store domain, installation status and the authorization and session information needed to connect the app to your store. Authentication may include staff identifiers, name, email, account role and locale. We use this information to authenticate access, maintain the store connection and protect your content.

From you, we collect uploaded images and their references, titles, descriptions, alt text, hotspots, product and variant references, links, price labels, board settings and publication choices. We use these to provide the galleries you create. Product search reads your Shopify catalog so you can choose products and variants. Lookboards does not request customer or order access.

If you contact support, we use your email address, correspondence and any information you provide to respond and troubleshoot. Please do not send passwords, access tokens or confidential customer information.

Images and public galleries

New authenticated uploads, including their source images, are public merchant-owned Shopify Files, even when a board is a draft. Only upload images you have permission to publish. Do not upload confidential information. Publishing a board makes its gallery content available to storefront visitors.

Deleting a look, uninstalling Lookboards or erasing its app data does not delete your Shopify Files. Manage those files in Shopify → Content → Files. Unpublishing hides the gallery; it does not make image URLs private. Copies in provider caches may remain accessible until those caches expire.

Providers and international processing

Shopify provides authentication, store APIs, theme integration and public image hosting. Cloudflare hosts the app and its database and stores older app-managed media. These providers process network requests, which can include IP addresses, device information and request metadata, to deliver and protect their services.

Patrick Campbell operates from Australia. Shopify and Cloudflare operate internationally, so information may be processed outside Australia and outside your country. Provider processing is also described in Shopify’s privacy policy and Cloudflare’s privacy policy. No other app analytics or support processing service has been identified in this app’s data inventory.

Cookies, storage and diagnostics

The public Lookboards site does not add advertising trackers or behavioral analytics. The embedded app relies on Shopify’s authentication and necessary browser/session behavior. The storefront gallery does not add analytics cookies or behavioral tracking; Shopify and your store’s own theme and apps may process visitor information separately.

Operational error logs and sampled performance traces help diagnose failures and secure the app. Application logging is configured to omit query strings and avoid logging access tokens or upload credentials. Lookboards does not sell personal information or use gallery content for advertising profiles.

Retention and removal

Gallery records remain available while you use the app. You can edit or delete boards and looks. Uninstalling deactivates gallery delivery and removes stored sessions; it does not by itself erase all gallery records. When Shopify delivers a shop-erasure request, Lookboards deletes the store’s app database records and queues deletion of older app-owned media.

App-owned media awaiting deletion stays in a cleanup queue until deletion succeeds. Minimal hashed webhook event identifiers and processing timestamps are retained to prevent duplicate processing. These receipts have no automatic expiry in the current app, and should not be assumed to be anonymous merely because they are hashed.

Shopify Files remain in your control as described above. The app does not set a verified fixed expiry for provider logs, traces, backups or support correspondence. Contact us for the current retention details or to request removal of support-held information; app erasure does not automatically erase email correspondence.

Your privacy requests

You can request access, correction or deletion by emailing pat@ptcampbell.me with your store domain and the information involved. We may ask for information needed to verify your identity and authority for the store. Requests can include support correspondence as well as app records.

Depending on applicable law, you may also have rights to a copy of your information, to object to or restrict processing, or to complain to a privacy regulator. Tell us which request you wish to make. We also handle Shopify’s required data-request and erasure webhooks. The app’s lack of customer/order access does not prevent you from making a request about information you supplied directly.

Changes

Updates to this policy will appear here with an updated date. Contact Patrick Campbell at the address above with questions.