Privacy policy

Last updated October 19, 2026. This policy covers the SMC Fashion Dropship app for Shopify ("the app"), operated by SMC Fashion (Vers Trading LLC). The privacy policy for shopping on smcfashion.com is published separately.

What the app does

The app lets a Shopify merchant add SMC Fashion products to their store, keeps the stock levels of those products in sync with our warehouse, and receives the merchant's orders for those products so that we can ship them to the merchant's customer.

Personal data we process, and why

Data	Whose	Purpose
Store domain, store contact email, Shopify access token	Merchant	Operating the connection to the merchant's store and billing through Shopify
Order number, line items (products, sizes, colors, quantities)	Merchant's customer (order)	Picking, packing and shipping the order
Customer name, email address, shipping address, phone number	Merchant's customer	Shipping the order to the customer and contacting them only about delivery of that order

We process the minimum data needed to ship an order. We do not use customer data for marketing, analytics, profiling or automated decision-making, and we never sell or share it for advertising.

How we protect it

• All traffic between Shopify, the merchant's browser and the app is encrypted (HTTPS).
• Access tokens and customer name, email and address are encrypted at rest (AES-256-GCM) before they are stored. Database backups are encrypted.
• Only SMC Fashion operations staff who ship orders can view order data, through an authenticated screen. Each access is logged.
• Servers are hosted by DigitalOcean in the United States. Shopify processes payments; we never see card details.

How long we keep it

• Order data is deleted 365 days after the order is received.
• When a merchant uninstalls the app, the store's access token is destroyed immediately, and all remaining data for that store is deleted when Shopify sends the shop data erasure request (48 hours after uninstall).
• Customer erasure requests received from Shopify (customers/redact) remove the customer's name, email and address from stored orders.

Subprocessors

DigitalOcean, LLC (hosting, USA) · Shopify Inc. (platform and billing) · Stripe, Inc. (only for merchants who subscribe outside Shopify Billing; no customer data is shared with Stripe).

Your rights and contact

Merchants can request access to, correction of, or deletion of data by emailing info@smcfashion.com. Customers of a merchant should contact that merchant, who can trigger the Shopify data request or erasure flows that we honor automatically. Security incidents affecting personal data are handled under our incident response policy.

SMC Fashion (Vers Trading LLC), 1220 Maple Ave Ste 211, Los Angeles, CA 90015, USA · info@smcfashion.com · +1 213-245-0969