Legal
Privacy Policy
Last updated: 28 October 2026
Pendora Digital Downloads ("Pendora", "the App") is a Shopify app published by Henqq ecommerce LLC, a Delaware limited liability company, 3 Germay Drive Unit 4, Wilmington, DE 19804, United States ("Henqq", "we", "us").
This policy explains what personal data Pendora handles, why, who else sees it, and the choices you have. It covers merchants (store owners and staff who install Pendora) and buyers (the customers of a merchant who purchase a digital product and receive a download).
1Our role
- For merchant data (account and usage information), Henqq is the controller.
- For buyer data, the merchant is the controller and Henqq is the processor. We handle buyer data only to deliver the digital products the merchant sold, on the merchant's instructions. Our Data Processing Addendum governs this.
If you are a buyer and want to access, correct or delete your data, please contact the store you bought from. We will help the merchant with your request.
2What data we handle
From merchants, through Shopify and the App
| Data | Why |
|---|---|
| Store name, myshopify domain, store email, shop owner name, phone, country, currency, language, time zone, Shopify plan | Create and run the account, support, billing and quota limits |
| Shopify access token and session data | Authenticated calls to Shopify on your behalf |
| Files, license keys and settings you upload or configure (email templates, download page, branding, watermark and password options) | Deliver your digital products as configured |
| Product titles, variant names and prices linked to digital products | Match orders to files and keys |
| In-app usage events (pages visited, features used, onboarding progress) | Improve the App and provide support |
| Support chat messages and attachments | Answer support requests |
From buyers, through the merchant's Shopify orders
| Data | Why |
|---|---|
| Email address and name | Send the download email, show the buyer their orders, record delivery status |
| Order ID, order date, order total and currency, items bought | Link the purchase to the right files and keys |
| Download counts and email delivery status (sent, failed, bounced, complained) | Show the merchant fulfilment status and enforce download limits |
| License keys issued with the order | Deliver keys to the buyer |
| Email address on a PDF watermark, only if the merchant turns watermarking on | Discourage sharing of the file |
We do not collect payment card details. Payments are handled by Shopify and the merchant's payment providers. We do not use buyer data for advertising and we do not sell it.
Shopify permissions
The App requests these Shopify scopes: read inventory, read and write orders, write products, and write fulfillment orders. We use them only to read orders and products and to mark digital orders fulfilled.
3How we use data
- To provide the service: store files, create download links, send delivery emails, issue license keys, show analytics to the merchant.
- To run and secure the App: prevent abuse, rate limit, diagnose errors, keep backups.
- To support merchants and buyers who contact us.
- To improve the App through usage analytics.
- To meet legal obligations.
Under the EU and UK GDPR, we process merchant data to perform our contract, for our legitimate interest in running and securing the service, and to meet legal obligations. We process buyer data on the merchant's instructions.
5International transfers
Henqq is based in the United States and our infrastructure is mainly in the United States. If you are in the EEA, the UK or Switzerland, your data is transferred to the United States. We rely on the Standard Contractual Clauses and, where they apply, our providers' certifications under the EU-US Data Privacy Framework. Our Data Processing Addendum includes the Standard Contractual Clauses.
6How long we keep data
- While the App is installed, we keep the data needed to run it.
- When a merchant uninstalls, their session is removed at once. Products, files, license keys, orders and settings are deleted automatically 30 days later, and uploaded files are removed from storage in the same clean-up.
- When Shopify sends a shop redaction request, we delete the shop's products, files, license keys, orders and settings straight away.
- Raw order event backups are deleted automatically after 7 days.
- Email delivery history is kept while the merchant's account exists, so the merchant can see past deliveries. A merchant can ask us to delete it at any time.
- Database backups are kept by our database provider on a rolling basis and overwritten automatically.
7Your rights
Depending on where you live (for example under the GDPR, the UK GDPR or the CCPA), you may have the right to access, correct, delete or export your data, to object to or restrict processing, and to withdraw consent.
- Merchants: email [email protected] or use the chat in the Pendora admin.
- Buyers: contact the store you bought from. If you contact us directly, we will pass your request to the merchant and help them answer it.
We answer within 30 days. You can also complain to your local data protection authority. We do not sell personal information and do not share it for cross-context behavioural advertising.
8Security
Files are kept in private cloud storage and delivered through signed links that expire. Data is encrypted in transit. Only authorised staff can reach production systems. Merchants can add PDF passwords, watermarks, download limits and link expiry. No system is perfectly secure, and we will tell affected merchants about a personal data breach without undue delay.
10Children
Pendora is a business tool and is not aimed at children under 16.
11Changes
We will post changes on this page with a new date and tell merchants about material changes.