Discount Health Privacy Policy

Last updated: 17 October 2026

Discount Health is a Shopify app that shows merchants which discounts make money and which lose it. It is made by 89 Design Lab (trading as Lab89), 19, Jalan Eco Majestic 7/1A, Mellowood, Eco Majestic, MBX #182, 43500 Semenyih, Selangor, Malaysia (“Lab89”, “we”, “us”).

1. Who is responsible for the data

The merchant is the controller of its store and customer data. Lab89 processes it only to provide Discount Health to the merchant. For data about the merchant itself (account, billing and support details), Lab89 is the controller.

2. What we collect

From the store

• Store name, domain, contact email, plan and app settings (costs, payment fees, margin floor, alert preferences).
• A Shopify access token, stored encrypted.

Store data read from Shopify

• Orders: order ID, date, line items, prices, discounts applied, discount codes, refunds, totals, source app.
• Discounts: codes, automatic discounts and app offers, with their settings and dates.
• Products: titles, variants, prices, compare-at prices and unit costs.
• Customers: Shopify customer ID, tags, segment membership and email marketing consent status only.

Discount Health does not collect or store customers’ names, email addresses, phone numbers or postal addresses.

From integrations the merchant connects (paid plans)

• Klaviyo: campaign and flow names linked to discount codes; segment membership for lists the merchant chooses to push, matched by Shopify customer ID.
• Ad platforms (Meta, Google, TikTok): ad spend and campaign totals. No ad-audience or personal data.
• Slack: the channel where alerts are posted.

From merchants who contact support

• Name, email, store address and the content of the message or chat.

3. How we use it

• To calculate discount profit, health scores, segment grades, offer-group lifetime value and alerts.
• To show the merchant’s dashboards, exports and alerts.
• To push segments to Klaviyo when the merchant asks.
• To answer support requests and keep the app secure.

Segment grades and flags (for example “discount dependent”) are tools for the merchant’s own marketing decisions. Discount Health does not make decisions about individual customers by itself.

We do not sell personal data, use it for our own advertising, or combine it across different stores.

4. The in-app help assistant

Discount Health’s Help panel uses an AI assistant (provided by Anthropic) to answer merchant questions. It sees the merchant’s question and the store’s app setup (install status, plan, settings and integrations). It does not receive order-level or customer data. When the assistant can’t help, the chat is passed to a person at Lab89.

5. Who we share it with

Provider	What for
Shopify	App platform, data access, billing
Cloudflare	Hosting and database
Anthropic	In-app help assistant (merchant chats and store setup only)
Brevo	Alert and support emails
Klaviyo, Meta, Google, TikTok, Slack	Only when the merchant connects them

We may disclose information if the law requires it.

6. How long we keep it

• Synced store data: while the app is installed. Analysis covers the order history the merchant’s plan includes. Only sums are stored, never individual orders.
• After uninstall: all store data deleted when Shopify sends the store’s deletion request (48 hours after uninstall).
• Customer deletion requests: we delete the requested customer’s records when Shopify passes the request to us.
• Support messages: 12 months after closing.

7. Security

Data is encrypted in transit (HTTPS) and at rest. Access tokens and integration keys are stored encrypted. Only the people who build and support Discount Health can access live data, using accounts with strong passwords and two-factor sign-in. We tell affected merchants without undue delay if a security incident affects their data.

8. Rights of merchants and customers

• Merchants can view, export and delete their data in the app, and can ask us at support@lab-89.com for a copy or deletion of their account data.
• Customers of a store should contact that store first. The store can ask Shopify to send us an access or deletion request, and we act on it. Customers can also email us directly and we will work with the store.

Depending on where you live (for example under the GDPR, UK GDPR, California law or Malaysia’s Personal Data Protection Act), you may have the right to access, correct, delete or restrict the use of your data, and to complain to your local data protection authority.

9. International transfers

Our service providers may process data outside your country, including in the United States. Where the law requires it, we rely on safeguards such as standard contractual clauses provided by those providers.

10. Changes

If we change this policy we will update the date above. For important changes, we will tell merchants in the app or by email.

11. Contact

89 Design Lab (trading as Lab89)
19, Jalan Eco Majestic 7/1A, Mellowood, Eco Majestic, MBX #182, 43500 Semenyih, Selangor, Malaysia
Email: support@lab-89.com (subject “Data request” for access or deletion requests; we reply within 7 days). See Data requests.