GSX Trade-In & Buyback · Last updated August 2026
This policy explains how the GSX Trade-In & Buyback app ("the app", "we") handles data when a merchant installs it on their Shopify store and when a shopper uses the trade-in widget on that store.
The app requests no Shopify Admin API access scopes. It does not read, and cannot read, your Shopify customer records, orders, products or any protected customer data held by Shopify.
When a shopper chooses to sell a device through the widget, they voluntarily provide, and we collect only:
Solely to operate the trade-in the shopper requested: to generate a guaranteed price, arrange collection of the device, verify it, and pay the shopper. We do not sell personal data, and we do not use it for advertising.
Data is processed by GSX and its infrastructure providers (cloud hosting and the GSX platform that runs the merchant's stockroom). Devices are received and paid for through the merchant's own GSX tenant. We do not share personal data with third parties except as needed to complete the trade-in.
We keep trade-in records only as long as needed to complete the transaction and meet legal/tax obligations, then delete them. Shoppers and merchants may request access to, correction of, or deletion of their data. We honour Shopify's mandatory data-request, customer-redact and shop-redact webhooks: on a redaction request the associated records are deleted.
For any privacy request or question, contact privacy@gsx.co.uk.
Uninstalling the app stops all further data collection; existing records are handled per the retention and redaction terms above.