Moments
Privacy — Moments (Byhubo)
Moments is a Shopify app from Byhubo. This page explains what we collect why and how to reach us.
Last updated 22 September 2026.
Who we are
The Moments app and the site at moments.byhubo.com are provided by Entaspire LTD trading as Byhubo (“Byhubo” “we” “us”).
Email: hello@byhubo.com
Support: moments.byhubo.com/support
Address: Available on request by emailing hello@byhubo.com
Our role
- For merchant account data contact details you send us and analytics of our own Moments sites we are the controller.
- For personal data about your storefront customers that we process only to run Moments for your shop (for example order-related signals used in Proof) we act as your processor and process that data on your instructions through Shopify and this notice.
What Moments does
Moments helps a Shopify merchant put this week's homepage offer on a schedule using a Theme Editor block (Moments - Homepage hero). When the window ends that block goes empty. Proof shows served → clicks → heuristic orders for that window.
Data we process
We process data needed to run the app for your shop including:
| Kind | Why |
|---|---|
| Shop identifiers (e.g. myshopify domain shop id) | Install auth billing support |
| Theme-related data (via Shopify themes scopes) | Show and schedule the Moments homepage block |
| Order-related data needed for Proof (via Shopify orders scope as configured) | Heuristic order signals for a campaign window — not sold as a data product |
| Account / contact details you give us (e.g. email when you write hello@) | Support and product messages you ask for |
| Technical logs (e.g. requests errors uptime) | Keep the service reliable and secure |
Storefront customers: We do not drop Moments marketing cookies on your buyers to build advertising profiles. Proof may use order-related fields Shopify exposes under the orders scope (as configured) linked to a campaign window. Your own Shopify theme and storefront privacy obligations still apply to how your shop presents itself to buyers.
We do not sell your customer lists. We do not run a separate advertising network on Moments data.
Lawful bases (UK GDPR)
Where UK GDPR applies:
- Providing Moments to your shop (account install service delivery): contract.
- Security reliability and improving our own app and marketing site: legitimate interests.
- Support emails you send: contract and/or legitimate interests.
- Processing customer/order data as your processor: on your documented instructions as merchant controller.
Shopify
Install and permissions go through Shopify. Shopify's own policies apply to the platform. We only request the access Moments needs (themes for the homepage block; orders for Proof as configured).
Billing
Moments is free to try today — we are not charging yet. We do not take card details on moments.byhubo.com. When a paid Starter plan begins it is intended to run through Shopify Billing; we will update the Terms and this page before any charge. See our Terms for plan language.
Cookies and similar
The marketing site and app may use cookies or local storage that are necessary for login sessions security and core functionality.
If we use non-essential analytics cookies or similar technologies on our own Moments pages we will only do so with consent where PECR requires it. We do not use Moments technologies to build third-party advertising profiles from your storefront customers.
Sharing
We share data only:
- with Shopify (platform requirement for the app to work);
- with infrastructure providers who host Moments under contract (including Fly.io);
- when the law requires it;
- with your written instruction (e.g. a support diagnosis you asked for).
International transfers
Hosting and subprocessors may process data in the United Kingdom the EEA and/or other countries. Where UK GDPR requires a transfer safeguard we use appropriate mechanisms (for example an adequacy decision or standard contractual clauses with the provider).
Retention
We keep shop and campaign data while the app is installed. After uninstall Shopify's shop redaction process applies; we then delete or anonymise shop data where practical subject to backups disputes and legal duties (typically within 30–90 days after we are required to redact unless the law requires longer).
Support emails and related tickets: kept for as long as needed to resolve your request and for a reasonable follow-up period then deleted or archived with access limited.
Your rights
Depending on where you are you may ask to access correct update erase or restrict personal data we hold as controller or object to certain processing or raise a concern. Email hello@byhubo.com.
You may also complain to the UK Information Commissioner's Office (ICO): ico.org.uk.
For GDPR-style requests that Shopify routes to us as an app we follow Shopify's mandatory compliance webhook process for customers/data_request customers/redact and shop/redact where those webhooks are configured and as we complete Partners setup. We aim to complete applicable actions within 30 days of a valid request.
Children
Moments is for businesses on Shopify not for children.
Changes
We may update this page. The date above will change. Material changes will be noted here or by email where appropriate.