TEASE dancewear
Netherlands
Reviews (6)
Horrible customer service. Please note that no EU company can legally use BixGrow under GDPR, as they don't offer signed DPAs or SCCs for data stored outside the EU.
Great concept, but not GDPR compliant. As an EU merchant I discovered there was no Data Processing Agreement or sub-processor list in place, and hasn't been for 4 years. Until proper GDPR compliance is implemented, this app is risky for EU merchants handling customer data.
Developer reply ·
Hi there, thank you for the feedback. We do have robust data handling policies in place but as part of your feedback, we have implemented the following changes We have updated our terms and conditions as well as privacy policy to better document our GDPR responsibilities. We have also now documented and created a standardized data processing agreement. We also: - Subscribe to and properly process Shopify’s GDPR webhooks (such as customer data access and erasure requests) - Do not share or sell customer data with any third party - Store data securely on Google Cloud infrastructure Beyond documentation and tech improvements, internally, we have begun training for all our staff on GDPR and its benefits to our customers. Thank you so much again for helping us improve as a company.
Excellent service
Developer reply ·
Hi TEASE dancewear Store Owner, Thank you for your important feedback regarding GDPR compliance and the Data Processing Agreement (DPA). We understand the critical nature of this requirement for EU merchants. While we were previously working to finalize a downloadable and signable DPA, we have now published a dedicated DPA page that clearly outlines our data handling practices and compliance measures: https://joy.so/data-processing-addendum-dpa/ We currently: - Listen to and properly process Shopify’s GDPR webhooks (such as customer data access and erasure requests) - Do not share or sell customer data with any third party - Store data securely on Google Cloud infrastructure, which follows industry-standard compliance protocols Following that, our team is currently taking the following actions to strengthen our overall privacy and compliance approach: - We’re implementing internal support for Data Subject Access Requests (DSAR), with tooling to process these requests efficiently. - A trust center is in planning, though this will take more time due to overlap with broader certifications like SOC 2, we are working with Sprinto - We're also looking to consult with a privacy lawyer or DPO for third-party review. - GDPR training for our internal team is being scheduled as part of this effort. Thanks again for your honest feedback. Your input helps us continue building a better, more transparent product. Best regards, Joy Loyalty Team
Outstanding service! Extremely helpful, responsive, and went above and beyond my expectations.
EU merchants be beware: this app does not offer a downloadable or signable Data Processing Agreement (DPA). Under GDPR, a signed DPA is legally required when personal data is processed on your behalf. Without it, you’re not compliant. Until this is fixed, this app is not safe to use for EU businesses.
