Privacy Policy

Privacy Policy

Last Updated: 2/11/2026

This Privacy Policy describes how CareCheckout (“Company,” “we,” “us,” or “our”) collects, uses, and discloses information in connection with the Order Protection & Tipping application (the “App”) available through the BigCommerce App Marketplace.

This Privacy Policy applies to merchants (“Merchant,” “you”) who install the App and to data processed through the App.

1. Information We Collect

1.1 Merchant Information

When you install or use the App, we may collect:

• Store name
• Store URL
• Contact name
• Email address
• Billing information (processed via BigCommerce or third-party billing providers)
• App configuration settings

1.2 Store & Order Data

To provide functionality, the App may access:

• Cart information
• Order information
• Order totals
• Shipping information
• Product information
• Checkout metadata

We access only the data necessary to provide App functionality.

1.3 Customer Information

Depending on App configuration, we may process limited customer data, such as:

• Order ID
• Order value
• Shipping status
• Protection or tip selection

We do not collect or store full payment card details.

1.4 Automatically Collected Data

We may automatically collect:

• IP address
• Device/browser type
• Usage logs
• Interaction data related to App functionality

This information helps us maintain performance and security.

2. How We Use Information

We use collected information to:

• Provide and operate the App
• Enable order protection and tipping features
• Calculate applicable fees
• Generate reporting and analytics
• Improve performance and reliability
• Detect fraud or misuse
• Provide customer support

We do not use merchant or customer data for advertising.

3. Data Sharing & Disclosure

We do not sell personal information.

We may share information:

• With service providers who assist in hosting, infrastructure, or support
• As required by law
• To protect our legal rights
• In connection with a merger, acquisition, or sale of assets

All service providers are required to protect data consistent with this Privacy Policy.

4. Data Retention

We retain information:

• For as long as your store uses the App
• As required for billing and accounting purposes
• As necessary to comply with legal obligations

Upon uninstallation of the App, data access is revoked, and stored data is deleted within a commercially reasonable timeframe unless legally required to retain it.

5. Data Security

We implement reasonable administrative, technical, and physical safeguards to protect information from unauthorized access, disclosure, or destruction.

However, no system can guarantee absolute security.

Checkout Data Handling

The App interacts with cart and checkout data solely for the purpose of enabling optional Order Protection and Tipping functionality.

We do not process or store full payment card numbers, CVV codes, or sensitive financial account information.

All payment processing remains handled by BigCommerce and its authorized payment providers. 

Protection fees are calculated dynamically based on cart value and displayed to customers prior to order completion.

6. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have the right to:

• Request access to personal information we hold about you
• Request deletion of your personal information
• Request correction of inaccurate information
• Opt out of the sale of personal information (we do not sell personal information)
• Not be discriminated against for exercising privacy rights

To exercise your rights, contact us at:
[support@carecheckout.com]

We may verify your identity before fulfilling requests.

7. International Data Transfers

If you access the App from outside the United States, your information may be transferred to and processed in the United States.

By using the App, you consent to this transfer.

8. Children’s Privacy

The App is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

9. Third-Party Services

The App integrates with:

• BigCommerce
• Hosting providers
• Analytics services

Your use of BigCommerce is governed by their privacy policies and terms.

10. Changes to This Policy

We may update this Privacy Policy periodically. Updates will be posted with a revised “Last Updated” date.

Continued use of the App after changes constitutes acceptance of the updated policy.

11. Contact Information

If you have questions about this Privacy Policy, contact:

CareCheckout
Email: support@carecheckout.com
 

12. GDPR Compliance (European Economic Area & United Kingdom)

If you are located in the European Economic Area (“EEA”), United Kingdom, or Switzerland, you may have certain rights under the General Data Protection Regulation (“GDPR”).

12.1 Lawful Basis for Processing

We process personal data under the following legal bases:

• Performance of a contract (to provide the App and its features)
• Legitimate interests (to improve functionality, security, and reliability)
• Compliance with legal obligations

12.2 Your GDPR Rights

Subject to applicable law, you may have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of personal data
• Restrict or object to processing
• Request data portability
• Withdraw consent where processing is based on consent

To exercise these rights, contact: privacy@yourdomain.com

We may verify identity before fulfilling requests.

12.3 Data Processing Roles

In most cases:

• The Merchant is the Data Controller
• CareCheckout acts as a Data Processor

We process customer data only on behalf of the Merchant and according to their instructions via the App configuration.

12.4 International Transfers

Where required, we rely on appropriate safeguards for international transfers, including:

• Standard Contractual Clauses (SCCs)
• Other lawful transfer mechanisms

13. Storefront Scripts & Checkout Modifications

The App uses BigCommerce’s Scripts API and related storefront technologies to inject and display optional Order Protection and Tipping widgets within the cart and/or checkout experience.

These scripts:

• Display optional features selected by the Merchant
• Detect cart value or checkout state
• Enable calculation of protection fees based on order totals
• Communicate with our secure servers via API to process functionality

The scripts do not:

• Access or store full payment card information
• Modify product pricing beyond Merchant configuration
• Interfere with core checkout payment processing

Scripts operate solely to provide the features enabled by the Merchant.