GDPR Compliance Statement -- Ready Your Store

Section 1

Our Commitment

Third Cache Pty Ltd ("we", "us", "our") operates Ready Your Store (RYS), a Shopify app for Generative Engine Optimisation (GEO). We are committed to respecting the privacy of every merchant who uses our service.

We comply with the General Data Protection Regulation (GDPR) and the Australian Privacy Act 1988. Where there is any conflict between these frameworks, we apply the higher standard of protection.

Section 2

Data We Process

RYS processes the following categories of data:

Store metadata -- shop name, domain, Shopify plan, locale settings
Product data -- product titles, descriptions, tags, images, metafields, and other catalogue information
Scan results -- GEO audit findings, technique scores, and historical fix records

RYS does not process end-customer personally identifiable information (PII). We do not access customer names, email addresses, order history, or payment details.

Section 3

Legal Basis for Processing

We process merchant data on the following legal bases:

Contract performance -- processing is necessary to deliver the RYS service to you as a merchant (Article 6(1)(b) GDPR)
Legitimate interest -- we process aggregated, non-identifying data to improve the service, develop new scanning techniques, and monitor system performance (Article 6(1)(f) GDPR)

Section 4

Your Rights

Under the GDPR, you have the right to:

Access -- request a copy of the personal data we hold about you
Rectification -- ask us to correct inaccurate data
Erasure -- ask us to delete your data ("right to be forgotten")
Portability -- receive your data in a structured, commonly used format
Objection -- object to processing based on legitimate interest
Restriction -- request that we limit how we process your data
Complaint -- lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at support@readyyourstore.com. We will respond within 30 days.

Section 5

Data Protection Measures

We take the security of your data seriously. Our measures include:

Encryption at rest and in transit -- all data is encrypted using industry-standard protocols (TLS 1.2+ in transit, AES-256 at rest)
Row-Level Security (RLS) -- database policies ensure merchants can only access their own data
Access controls -- internal access is limited to personnel who require it for service operation
Audit trails -- we maintain logs of data access and system changes

Section 6

Sub-Processors

We use a limited number of third-party sub-processors to deliver the RYS service. Each sub-processor is bound by data processing agreements that meet GDPR requirements.

A full list of our current sub-processors is available in our Sub-Processor List.

Section 7

International Data Transfers

Third Cache Pty Ltd is an Australian company. Some of our sub-processors process data in jurisdictions outside Australia and the European Economic Area (EEA), including the United States and Canada.

Where data is transferred outside the EEA, we rely on:

Adequacy decisions -- where the European Commission has recognised a country as providing adequate data protection
Standard Contractual Clauses (SCCs) -- where no adequacy decision exists, we use EU-approved standard contractual clauses with our sub-processors

Section 8

Contact

If you have questions about this GDPR Compliance Statement or our data practices, contact us:

Email: support@readyyourstore.com
Company: Third Cache Pty Ltd, ABN 69 138 584 228, Melbourne, Australia

At our current scale, we are not required to appoint a formal Data Protection Officer (DPO). Ed, founder of Third Cache, acts as data protection lead and is your point of contact for all privacy matters.