Last updated: 22 May 2026
This Privacy Policy explains how Vibe VAT Relief (the "app", "we", "us") collects, uses and protects personal data when a Shopify merchant installs and uses the app, and when that merchant's customers use the VAT relief application form provided by the app.
Vibe VAT Relief is a public Shopify App Store app for VAT-registered UK merchants. It lets merchants offer selective UK disability VAT relief: customers who complete a VAT relief application receive 0% VAT on eligible products, while everyone else pays standard VAT.
This policy applies to two groups of people: the merchant who installs the app on their Shopify store, and the merchant's customers (storefront applicants) who complete the VAT relief application form on that store.
When a merchant installs the app through Shopify OAuth, and as the app runs through the Shopify Admin API, we collect and process:
When a customer completes the VAT relief application form on the merchant's storefront, the form collects:
The disability and medical condition information in the HMRC declaration is special-category personal data (health data) under the UK General Data Protection Regulation (UK GDPR). We treat this information with particular care. It is collected only to record the customer's VAT relief declaration as required for that relief to be applied, and for no other purpose.
Customer VAT relief declarations are stored as customer metafields on the merchant's own Shopify store. They are not held in a separate Vibe VAT Relief database. The declaration remains under the merchant's control within their own Shopify account.
The app's own database stores only per-shop install records: the shop domain, Shopify access tokens and the app's configuration settings for that store. It does not hold a separate copy of customer declarations.
We use the data described above solely to provide the app's VAT relief features: operating the storefront application flow, tagging eligible customers, applying selective zero-rating, producing the admin dashboard and generating the accounting export.
We do not sell personal data, and we do not use it for advertising or for any purpose unrelated to providing the app.
App install data is retained for as long as the app is installed on the merchant's store.
When the app is uninstalled, and on receipt of Shopify's shop-redact request, the app purges the shop's stored data from its database. The app also handles Shopify's mandatory GDPR webhooks, including the customer data-request webhook and the customer-redact webhook, in line with Shopify's requirements.
The merchant is the data controller for their customers' personal data. Vibe VAT Relief acts as a data processor on the merchant's behalf, processing that data only to provide the app's features and in line with this policy.
The app and its database are hosted on cloud infrastructure. Any sub-processor used to host or run the service processes data only in line with this policy and on instructions consistent with the merchant's role as data controller.
Customers and merchants have rights under UK GDPR, including the right of access to their personal data, the right to correction of inaccurate data, and the right to erasure.
Because the merchant is the data controller for customer data, customers should exercise these rights through the merchant whose store they applied on. The merchant can then use the app's tools and Shopify's own controls to action the request. Merchants can contact us for help with any request that relates to data the app processes.
For any questions about this Privacy Policy or about how the app processes personal data, contact us at hello@vibe3d.co.uk. This app is provided by Vibe3D.
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. Continued use of the app after a change takes effect means the updated policy applies.
