Privacy Policy — AccessRadar

Last updated: 15 July 2026 · Data controller: Prometheus Agency, Kemp House, 152-160 City Road, London, EC1V 2NX, United Kingdom · Contact: info@prometheus-agency.com

1. Who we are

AccessRadar ("the App", "we") is a Shopify application that audits a merchant's online store for web accessibility (WCAG) issues and produces a prioritized fix list and accessibility statement.

2. What data we process

When a merchant installs the App we process: the store's myshopify.com domain and an offline access token; the store's public storefront URL; and the results of accessibility scans we run against that public storefront (the accessibility issues found, their severity, the affected page elements and CSS selectors).

We do not collect protected customer fields — no buyer name, email, phone or address, and no order data. The App only audits the merchant's own public website.

3. Why we process it

To provide the App's core functionality: scanning the merchant's storefront for accessibility issues, showing the results, and (on the paid plan) monitoring for new issues and generating an accessibility statement. We limit our use of this data strictly to these purposes.

4. Where data is stored & sub-processors

Data is stored in our application database hosted on Render. Sub-processors: Shopify (platform) and Render (hosting & database). All data is transmitted over HTTPS and stored encrypted at rest.

5. Retention & deletion

We retain a store's data only while the App is installed. On uninstall, Shopify sends a shop/redact request (~48 hours later) and we delete all of that store's data — scan records, the issues found and the session token. We also honour customers/data_request and customers/redact; as we store no individual customer personal data, there is none to return or erase.

6. Your rights

Merchants and their customers may exercise GDPR / UK-GDPR rights (access, rectification, erasure, restriction, objection, portability) by contacting info@prometheus-agency.com.

7. International transfers

Where data is transferred outside the UK/EEA, we rely on appropriate safeguards (e.g. Standard Contractual Clauses) with our sub-processors.

8. Changes

We may update this policy; the "Last updated" date reflects the latest version.

9. Contact

Prometheus Agency — info@prometheus-agency.com — Kemp House, 152-160 City Road, London, EC1V 2NX, UK.