PIING
Privacy Policy
How Piing collects, uses, and protects data
- Document
- Privacy Policy
- Clauses
- 10
- Updated
- 13 October 2026
On this page 10
- 01 Our Role
- 02 This Website
- 03 Data We Process
- 04 Purpose of Processing
- 05 Data Sources
- 06 Data Sharing
- 07 Sub-Processors
- 08 Data Storage & Security
- 09 Data Retention
- 10 Your Rights
On this page
Our Role
Piing Technologies Ltd (" Piing"), company no. 17036814, has its registered office at Radley House Ground Floor, Richardshaw Road, Leeds LS28 6LE. Piing Technologies Ltd is not registered for VAT. This document is issued by Conor Stenner Jones, Director. For a merchant's customer data, Piing acts as processor and the merchant remains the controller. For enquiries and analytics on piing.io, Piing is the controller. Piing does not sell personal data, and it does not share personal data for advertising.
This Website
Piing is the controller for enquiries you send through piing.io. We use the contact details and information you provide to respond and arrange the service you request.
Cookiebot manages cookie choices. Google Analytics measures website use and successful enquiries, and Microsoft Clarity helps us understand usability. These tools load only after statistics consent. Preview deployments are excluded. The enquiry analytics event contains the form category, not the sender's name, email address or message. The Cookie Policy lists these website tools. They are not sub-processors under the merchant Data Processing Addendum. You can change your choices using Cookie settings in the footer, and contact us at conor@piing.io about website data.
Data We Process
Depending on the Piing products you use, we may process the following categories of data:
- Piing: Check-in and visit events, store and device configuration, Wallet pass instances, integration routing and delivery records, plus the customer identity, loyalty, order, wishlist or merchant-selected context required for enabled features. Recognition can use a reader, tablet kiosk, printed scan-in point or Shopify POS. Payment card details and biometric profiles remain outside Piing.
- Piing: Intelligence: On Shopify, order, product and optional first-party browsing signals are processed to produce selected structured customer attributes. Outputs are written to app-owned Shopify metafields. Piing does not retain a separate copy of the customer's full order history as the persistent Intelligence output. Piing: Intelligence is a Shopify-only product.
- Piing: Alerts: Storefront notification-feed configuration, audience rules, and consent-gated engagement events (impressions, clicks, and attributed orders) collected through a first-party pixel. The storefront widget stores small first-party identifiers in the shopper's browser; no third-party cookies are used, and tracking only runs where consent permits.
- Studio: Card and asset design configurations, uploaded brand assets (logos, artwork, fonts), and order details needed to design and produce physical NFC cards and digital media. Design files are retained while your account is active so you can reorder and revise.
- Account & Billing: Merchant contact information and communication preferences needed to provide our services. Shopify app subscriptions are charged through Shopify's Billing API and appear on your Shopify invoice; separately scoped Retail ID services are billed under the relevant agreement. Piing does not handle payment card details. Piing Technologies Ltd is not registered for VAT. Hardware is a separate one-off purchase for which we hold the billing contact and address provided.
Purpose of Processing
We process data to provide the products and workflows a merchant enables: recognising customers in store; issuing and updating Apple Wallet and Google Wallet passes; reading configured loyalty, customer-field and wishlist context; delivering Wallet messages and optional browser or app push where configured; routing selected events to connected destinations; relating visits to later purchase or no-purchase outcomes; generating Shopify customer metafields through Piing: Intelligence; operating Piing: Alerts; and maintaining our platform infrastructure.
Data Sources
Customer data processed by Piing can originate from Shopify, an agreed Retail ID system of record, recognition events at the merchant's own stores, a loyalty or wishlist service the merchant connects, consent-gated first-party storefront events, and merchant-provided store, Wallet and integration configuration. Piing: Intelligence and Piing: Alerts use Shopify data and are Shopify-only. We do not acquire customer data from data brokers for these products.
Data Sharing
We share or transmit data only as necessary for configured services: with Shopify; with an agreed Retail ID system of record; with Apple and Google to issue, update and message Wallet passes; with a loyalty or wishlist service the merchant connects; with CRM, messaging and webhook destinations selected by the merchant; with infrastructure and processing providers; and as required by law. We do not sell personal data. Sub-processors are bound by data processing obligations.
Sub-Processors
Piing Technologies Ltd uses the following sub-processors to deliver its services. This is the same list as the Data Processing Addendum. Each is bound by a data processing agreement with obligations no less protective than those in that addendum.
- Anthropic PBC (United States) provides the AI model used for AI-inferred Piing: Intelligence fields. The prompt contains product titles, variants, types, vendors, prices and order dates. Names, email addresses, postal addresses, payment details and raw customer identifiers are not included. Anthropic does not train on API inputs or outputs, and retention is short.
- Supabase provides database and backend hosting.
- Vercel (United States) hosts the Piing website and portal.
- Fly.io hosts the Piing Shopify applications.
- Resend (United States) delivers transactional email, such as a pass claim link sent at the merchant's instruction.
- Apple and Google provide Wallet. Piing issues and signs Apple Wallet and Google Wallet passes with its own credentials by default, and with merchant-owned credentials where configured. Where Piing: Alerts browser push is enabled, the shopper's browser push service delivers it, including services operated by Apple and Google. That push is not a Wallet notification.
- Shopify is the commerce platform, the source of merchant and order data, the billing channel for Shopify app subscriptions, and the sender of the mandatory privacy webhooks.
- Dot Origin processes data transmitted through its NFC reader platform for the Piing Tap Box. The scope of that processing is to be confirmed.
Where the merchant connects its own tools, including a CRM, a loyalty vendor, a wishlist service, or the merchant's own OneSignal account, those providers act under the merchant's agreements. They are not Piing sub-processors. Piing: Alerts browser push does not use OneSignal.
Where personal data is transferred outside the UK, Piing uses a transfer mechanism required by UK GDPR: an adequacy regulation where one applies, or the International Data Transfer Addendum issued by the UK Information Commissioner to the European Commission's Standard Contractual Clauses. Where personal data is transferred outside the EEA, Piing uses an adequacy decision or the European Commission's Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914). A copy of the relevant transfer terms is available on request.
Data Storage & Security
Piing uses established cloud and platform providers to operate its services. Connections to Piing services use HTTPS, access to production systems is restricted to authorised personnel, and sensitive credentials and stored data are protected using the controls provided by those services. We maintain operational and audit records appropriate to the products we provide.
Piing: Intelligence reads order and customer data to perform an analysis run. On Shopify, the selected persistent outputs are customer metafields written to the merchant's own store. Piing does not retain a separate copy of the merchant's order history as an Intelligence output.
Data Retention
Uninstalling a Piing Shopify app stops access immediately. Piing marks the shop uninstalled, revokes the stored access token and removes the active session. For Piing: Intelligence, analysis run records are deleted at uninstall.
About 48 hours later, the shop redact request deletes shop-tied data: check-ins and events, device, reader and store configuration, Wallet pass instances and member links, settings, mappings and audit records, the shop registry entry, pixel browsing data and analysis data. Shopify removes app-owned metafields as part of uninstall.
Piing: Intelligence also schedules deletion of any remaining shop configuration for 30 days after uninstall, unless shop redact has already removed it. Raw Piing: Intelligence pixel events follow the merchant's configured retention window. The current default is 90 days.
On termination of the agreement, including Retail ID, Piing deletes or returns personal data within 30 days, unless the law requires a longer period. Hardware the merchant has bought remains the merchant's property. Integration history and delivery logs age out on their own short windows. There is no single retention period for every record.
Account and billing data is retained while needed to administer the merchant relationship and meet legal obligations. The same timetable is set out in the Data Processing Addendum.
Your Rights
As a merchant, you have the right to: access data we process on your behalf; request correction or deletion of your account data; export your configuration data; and withdraw consent for optional processing. End customers should direct data rights requests to the merchant (data controller). We will assist merchants in fulfilling such requests in accordance with our Data Processing Addendum.
To exercise any of these rights, contact us at conor@piing.io.
Privacy enquiries: conor@piing.io