COMPANY PROFILE

Shopify

Headquarters: Ottawa, Canada · Founded: 2006 · Listed: NASDAQ: SHOP; TSX: SHOP

1 data breach

What it does and how it makes money

Shopify, based in Ottawa (Canada), gives merchants a platform to build online stores and sell on the web, on social media and in person, with payments, shipping and the Shop shopping app.

It charges merchants monthly subscriptions and fees on the payments and other services they process through it. ^[1]

What data it collects about you

According to its consumer privacy policy, it receives name, address, email, payment details, IP, device identifiers and cookie IDs, and activity on stores that use Shopify (products viewed, cart, purchases, searches); with the Shop app it can also read order emails from connected inboxes. ^[2]

Money

Fines and sanctions

We found no published fines or sanctions when we checked it on October 12, 2026.

Data breaches and hacks

• September 2020
  Two members of its support team accessed, without authorisation, customer transaction records of fewer than 200 merchants: names, emails, postal addresses and order details (not full card numbers). ^[5]

Ask it to delete your data

This is the page the company itself gives to ask it to delete your data or stop selling it: Open its page ^[6]

With GUARDIANA or GUARDIANA ZERO, you download from this same profile the letter asking it to delete your data, under your country’s law, ready to attach to an email.

Its website

https://www.shopify.com/

Sources

1. https://en.wikipedia.org/wiki/Shopify
2. https://www.shopify.com/legal/privacy/consumers
3. https://www.sec.gov/Archives/edgar/data/1594805/000159480526000006/exhibit991pressreleaseq420.htm
4. https://www.sec.gov/Archives/edgar/data/1594805/000159480526000007/shop-20251231.htm
5. https://sootoday.com/national-business/shopify-says-it-notified-privacy-commissioner-of-breach-involving-rogue-staff-2737481
6. https://privacy.shopify.com/en

What this profile does NOT say

• It does not say this company does anything illegal. The only thing it states about anyone’s legality is what a regulator or a court has already decided, with the date and the link to the source.
• It does not say what data of yours it holds: only the company knows, which is why you have the right to ask it.
• If you are this company and a fact is wrong, write to hola@guardianagroup.com and it will be corrected, with its date.

Public facts with their sources, checked on October 12, 2026. All profiles →