Privacy Policy

Last updated: July 20, 2026

Path Catalog Health (“the app”, “we”, “us”) is operated by Outsource Experts Ltd, trading as Path, with a registered address at Enterprise Centre, 6 David Lane, Nottingham, NG6 0JU. This policy explains what information we collect from Shopify merchants who install the app and from their storefront visitors, how we use it, the legal bases we rely on, and the rights available to you.

This policy applies to merchants who install and use the app, and to the limited storefront analytics we collect on a merchant’s behalf. It does not cover Shopify’s own privacy practices or the wider privacy notices you provide to your own customers, which remain your responsibility.

Who is responsible for your data

Outsource Experts Ltd is the data controller for the merchant account data described in this policy. For data we process on your behalf to deliver the app’s features — product content drawn from your store, and storefront-analytics events collected from your shoppers — we act as your processor and handle that data only as needed to provide the service. As the merchant, you remain the controller for your storefront visitors’ data and are responsible for the privacy notices and any consent your storefront requires.

Information we collect

When you install the app, we access data from your Shopify store through Shopify’s APIs, limited to what the app needs to function:

Store profile: store name, domain, contact email, currency, timezone, country, and plan details
Account information for the staff who use the app, such as name and email address
Product content, including titles, descriptions, images, variants, and image metadata
Order and inventory signals used to rank products and generate catalog performance insights
Billing and subscription metadata associated with your plan and any professional editing orders
Records of your support requests and correspondence with our team

To measure how your product imagery performs, the app also installs a Shopify web pixel, which is enabled automatically when the app is first set up after installation. Together with our theme extension, it records anonymous storefront interactions for the products you monitor with the app:

An anonymous visitor identifier provided by Shopify’s web pixel — not a name, email, or account, and not used to identify individuals
Product, variant, and image interactions: product views, variant selections, image thumbnail clicks, gallery image views, add-to-cart, and checkout started and completed events
Context for each event: the page path, the referring site (host only), the image’s position in the gallery, and the cart or checkout value and currency

We deliberately strip query strings from page paths and keep only the host of referrers so this data cannot capture coupon codes, affiliate tags, or other identifiers. Depending on your plan, storefront analytics may not be collected, and events are only recorded for the products you actively monitor.

How we use your information

To audit product images and compute catalog health scores
To generate recommendations and apply the fixes you approve
To fulfil professional editing orders you place with Path Edits
To measure how your images and the changes you make affect storefront engagement and conversion
To process billing and manage your subscription through Shopify
To provide support and send service-related notifications
To maintain the security, integrity, and performance of the app and to meet our legal obligations

Legal bases for processing

Under UK data protection law, we rely on the following legal bases:

Performance of a contract — to deliver the features you install the app for and to fulfil orders you place.
Legitimate interests — to operate, secure, and improve the app, and to produce the anonymous storefront analytics that show how your imagery performs, where this is not overridden by the rights of the individuals concerned.
Legal obligation — to keep records required for tax, accounting, and compliance purposes.

How we share your information

We do not sell your data. We share it only with service providers that help us deliver the app, and only to the extent needed for them to perform their function. These providers fall into the following categories:

AI image-analysis providers — to analyse product images and generate audit findings, recommendations, and alt text
Cloud hosting and storage providers — to host the app and store your data securely
Background-processing providers — to run audits, fixes, and editing workflows asynchronously
Transactional email providers — to send service and order notifications
The Shopify platform — through which the app is installed, authenticated, billed, and through which storefront pixel events are delivered

We may also disclose information where required by law, or to protect our rights, users, or the security of the service.

International transfers

Some of our service providers process data outside the United Kingdom and the European Economic Area. Where that happens, we rely on appropriate safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or Standard Contractual Clauses, to protect your information.

Data retention and deletion

We retain your information for as long as the app is installed and for a reasonable period afterwards to meet legal, accounting, and billing requirements. Storefront-analytics events are kept only for a limited period and then purged automatically. When you uninstall the app, we honour Shopify’s data redaction webhooks and anonymise or delete store-identifying data — including stored storefront events — within the timeframes Shopify mandates. Working copies of images uploaded to our AI-analysis providers are held only transiently and expire automatically.

How we protect your data

We use appropriate technical and organisational measures to protect your information, including encryption in transit, access controls, and tenant isolation so that each merchant’s data is kept separate. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.

Your rights

Subject to applicable law, you have the right to access, correct, or erase your personal data, to restrict or object to certain processing, and to request a copy of your data in a portable format. To exercise any of these rights, contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe we have not handled your data properly.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the “last updated” date above and, where appropriate, notify you through the app or by email.

Contact us

Questions about this policy or your data? Email us at cataloghealth@pathedits.com or write to Outsource Experts Ltd, Enterprise Centre, 6 David Lane, Nottingham, NG6 0JU.