Last updated: 16 September 2026
Returnhub is operated by Suksessklubb AS (org. nr. 932 684 306), Tangen 24, Kristiansand S, Norway ("we", "us"). Returnhub is a returns-management app for Shopify stores, and returnhub.io is its website. This policy explains what personal data we process, why, on what legal basis, who receives it, where it is stored, and what rights you have.
Norway is part of the EEA, so the General Data Protection Regulation (GDPR) applies through the Norwegian Personal Data Act (personopplysningsloven). Cookies on returnhub.io follow the Norwegian Electronic Communications Act (ekomloven § 3-15).
We play two different roles, depending on whose data it is.
Contact for anything in this policy: hello@returnhub.io
| Data | Purpose | Legal basis |
|---|---|---|
| Store domain, Shopify access token, app settings (return rules, return address and phone, portal branding, email preferences) | To run the app for your store | Contract — GDPR Art. 6(1)(b) |
| Name and email of the staff member who logs in, where Shopify provides it | To authenticate access to the app | Contract — Art. 6(1)(b) |
| Subscription status and install date | To check billing and time in-app messages | Contract — Art. 6(1)(b) |
| Credentials for carriers and integrations you connect (Bring, Helthjem, PostNord, Shipmondo, Slack, Klaviyo) | To act on those accounts on your instruction | Contract — Art. 6(1)(b) |
| Email address for billing reminders | To tell you when a subscription needs attention | Contract — Art. 6(1)(b) |
When a customer starts a return or withdrawal through a store using Returnhub, we process the following on the merchant's behalf. The merchant decides the legal basis for it.
| Data | Why it is needed |
|---|---|
| Email address | To confirm the order belongs to the person asking, and to send status emails |
| Order number and Shopify order ID | To link the return to the right order |
| Name, full shipping address and phone number, read from the Shopify order | To book a return shipment with the store's carrier and find nearby drop-off points |
| Items returned, quantities, reasons, free-text comments and chosen resolution (refund, exchange or store credit) | So the merchant can review and decide |
| Photos of the returned items, where the store asks for them | To show the condition of the goods |
| Status, refund or credit amount, currency, rejection reason, tracking number and return code | To track the return to its outcome |
| For EU withdrawals: name, email, order number and outcome | To handle the statutory right of withdrawal and send a receipt |
| Language preference | To write to the customer in their language |
We never receive payment card details or passwords. Refunds, store credit and gift cards are issued by Shopify. Return photos are uploaded to the merchant's own Shopify Files; we store links to them.
| Data | Purpose | Legal basis |
|---|---|---|
| Demo request form: name, email, phone, store URL, monthly revenue | To arrange the demo you asked for, and to follow up about Returnhub afterwards | Steps you asked for before a contract — Art. 6(1)(b); follow-up on our legitimate interest in contacting businesses that asked about Returnhub — Art. 6(1)(f) |
| Savings calculator: platform, returns per month, average order value, current returns solution, name, email, phone, store URL | To send you your estimate and follow up about it | As above — Art. 6(1)(b) and 6(1)(f) |
| Booking a demo in the calendar: the details you give Calendly | To schedule the call | Your consent to Calendly's cookies — Art. 6(1)(a); the booking itself — Art. 6(1)(b) |
| Technical logs: IP address, browser, pages and time of request | To keep the site and app secure and fix faults | Legitimate interest in security and reliability — Art. 6(1)(f) |
The form fields are needed to answer you; if you leave them out we cannot book a demo. You can object to follow-up contact at any time, and we will stop.
returnhub.io uses no analytics or advertising cookies. Fonts are served from our own site, not from Google.
| What | Set by | Why | Consent |
|---|---|---|---|
returnhub-cookie-consent-v1 (browser storage) |
returnhub.io | Remembers whether you accepted or declined, so we do not ask on every page | Not required — strictly necessary |
| Calendly cookies | Calendly | Run the embedded booking calendar | Only after you accept. Nothing from Calendly loads before that. |
You can book a demo without accepting: open the calendar on calendly.com instead, or use the demo form. To change your choice, use Cookie settings at the bottom of any page. Withdrawing stops Calendly from loading; cookies it already set can be removed in your browser settings.
The Returnhub app inside Shopify admin sets no cookies of its own. Shopify may set strictly necessary cookies when you log in or install apps, under Shopify's own policy. The return portal runs on the merchant's store, where the merchant's cookie notice applies.
| Provider | Purpose | Location |
|---|---|---|
| Railway (Railway Corporation) | Hosting for the app, its database and returnhub.io | United States (San Francisco) |
| Resend | Sending return and billing emails | Sent from its EU region (Ireland) |
| Zapier | Delivering demo and calculator form submissions to us | United States |
| Calendly | Demo booking calendar — only if you accept its cookies or book on calendly.com | United States |
These receive customer data only when a merchant connects them, and only to do what the merchant set up:
| Service | What it receives | Location |
|---|---|---|
| Shopify | Everything in section 3 originates from, and refunds are issued through, the merchant's Shopify store | Shopify's own infrastructure |
| Carriers — Bring, Helthjem, PostNord, Shipmondo | Customer name, address, phone, email and order reference, to book and track the return shipment | Norway, Sweden, Denmark (EEA) |
| Slack | Order number, customer email, items, reasons, resolution and value, posted to the merchant's channel | United States |
| Klaviyo | Customer email, order number, return code, status link and value, as events in the merchant's account | United States |
| Shopify Flow | Customer email and order number, to trigger the merchant's own workflows | Within the merchant's Shopify store |
We do not sell personal data, and we do not use it for advertising or profiling. There is no automated decision-making: every return is decided by the merchant.
Returnhub's app, database and website are hosted in the United States, in Railway's San Francisco region. All data in sections 2, 3 and 4 is therefore stored in the US, as is data passed to Zapier, Calendly, and — if the merchant connects them — Slack and Klaviyo.
Railway's data processing terms make these transfers under the EU–US Data Privacy Framework where the recipient is certified, and otherwise under the European Commission's Standard Contractual Clauses. We rely on the same safeguards for our other US providers. For a copy of the safeguards that apply, contact hello@returnhub.io.
You have the right to:
Write to hello@returnhub.io. We answer within one month. If your request is about a return you made to a store, we pass it to that store, since they control that data.
Right to complain. If you think we handle personal data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet — datatilsynet.no. If you live elsewhere in the EEA, you can also complain to the authority in your own country. We would appreciate the chance to put things right first, but you do not need to contact us before complaining.
All traffic is encrypted in transit over HTTPS. Requests to the return portal are verified with Shopify's signed proxy signatures, so they cannot be forged. Credentials for carriers and connected services are encrypted at rest with AES-256-GCM. Shopify access tokens are kept on our servers and never sent to browsers.
We update this policy when what we do with data changes. The date at the top shows the latest version.
Suksessklubb AS, Tangen 24, Kristiansand S, Norway · hello@returnhub.io