1. Who we are
This Privacy Policy is issued by 2boys ("2boys", "we", "us", "our"), the publisher of Wholesale B2B Suite, a Shopify application that helps merchants run B2B wholesale on their Shopify store.
For any privacy-related question, contact us at [email protected].
2. Scope of this policy
This policy applies to:
- The website at 2boys.app and its subpages.
- The Wholesale B2B Suite Shopify application installed on a merchant's Shopify store.
- Communications with us by email, contact form, or other support channels.
It does not apply to third-party websites or services that we link to but do not operate.
3. Information we collect
3.1 Information from website visitors
When you visit 2boys.app:
- Contact form submissions. If you fill in our contact form we collect your name, email address, optional company/store, topic, and message.
- Technical request data. Our hosting provider (Cloudflare) automatically receives standard request logs such as IP address, user-agent, referrer, and timestamp. These are used for security and abuse prevention.
3.2 Information from Shopify merchants
When a merchant installs Wholesale B2B Suite on their Shopify store, the app processes information made available by Shopify under the permissions granted at install:
- Store data: store domain, plan, owner email, locale, currency.
- Product data: products, variants, prices, collections, inventory.
- Customer data: customer profiles, tags, addresses, order history, used to apply tier-based pricing, MOQ rules, and net terms.
- Order data: draft orders and orders created or modified by the app to apply discounts, payment terms, or quote conversions.
- App configuration: rules and settings you create inside the app (tiers, MOQs, catalogs, terms).
3.3 Information from end-buyers using the storefront
If you are a customer of a merchant that uses Wholesale B2B Suite, the app may process your account tag, the contents of your cart, and your registration details (e.g. business name, tax ID, resale certificate) when you submit a B2B registration or quote request through the merchant's storefront. The merchant is the data controller for that information; 2boys acts as a processor on the merchant's behalf.
4. How we use information
We use the information described above to:
- Provide, operate, and improve Wholesale B2B Suite and 2boys.app.
- Apply pricing, tax, and order rules according to merchant configuration.
- Respond to support requests and contact form submissions.
- Detect, prevent, and respond to fraud, abuse, or security incidents.
- Comply with legal obligations.
We do not sell personal information, and we do not use your data for advertising or third-party marketing.
5. Legal bases (GDPR)
If you are in the European Economic Area or the United Kingdom, we process personal data on the following legal bases:
- Contract — to deliver Wholesale B2B Suite and respond to your enquiries.
- Legitimate interests — to operate, secure, and improve our services.
- Legal obligation — to comply with applicable law.
- Consent — where we ask for it explicitly (e.g. optional communications).
6. Sharing and disclosure
We share information only with:
- Sub-processors that help us run the service, including Shopify (platform), Cloudflare (hosting and email delivery), and our transactional email provider used to deliver contact form notifications. These providers are bound by data processing agreements.
- Authorities when required by law or to protect rights, safety, or property.
- Successors in a merger, acquisition, or asset sale, in which case continuity of this policy will be required.
7. International transfers
Our infrastructure and sub-processors may process data outside your country of residence, including in the United States and the European Union. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.
8. Data retention
- Contact form submissions are retained for up to 24 months, then deleted, unless an ongoing support relationship requires longer retention.
- App configuration and merchant data are retained while the app is installed. After uninstall, we honor Shopify's mandatory data deletion timelines (customer data is deleted within 30 days of a customer-redact request and within 90 days of a shop-redact request).
- Server logs are retained for up to 30 days for security and debugging.
9. Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to or restrict certain processing.
- Receive your data in a portable format.
- Withdraw consent where processing is based on consent.
- Lodge a complaint with your local supervisory authority.
To exercise any of these rights, email [email protected]. If you are an end-buyer of a merchant using Wholesale B2B Suite, please first contact the merchant — they are the controller of your data.
10. Security
We use industry-standard safeguards including HTTPS in transit, access controls, least-privilege credentials, and audited sub-processors. No system is perfectly secure, but we work hard to protect your data and notify affected users of incidents where required by law.
11. Cookies
2boys.app uses only strictly-necessary cookies (e.g. for security and core site functionality). We do not use advertising cookies or third-party analytics that track you across sites.
12. Children's privacy
Wholesale B2B Suite and 2boys.app are intended for businesses and are not directed to children under 16. We do not knowingly collect personal data from children.
13. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page indicates the latest revision. Material changes will be communicated where appropriate.
14. Contact
Questions, requests, or complaints? Reach us at:
- Organization: 2boys
- Email: [email protected]
- Website: https://2boys.app