Information requests by country
Information requests by country
In 2019, we received legal requests for information from twelve countries.
As outlined in our Guidelines on Legal Requests for Information, we will only respond to enforceable subpoenas or court orders issued by: (a) bodies that have jurisdiction over the specific Shopify entity from which information is being requested; and (b) the authority to compel the production of information.
If the requesting body does not have jurisdiction over the relevant Shopify entity, we require that they follow the Mutual Legal Assistance Treaty or Hague Evidence Convention (“Letters Rogatory”) processes.
Information Requests by Country | Requests Received |
---|---|
Australia | 1 |
Belgium | 1 |
Brazil | 3 |
Canada | 5 |
France | 34 |
Germany | 26 |
India | 3 |
Italy | 5 |
Poland | 1 |
Spain | 10 |
UK | 2 |
USA | 154 |
Types of information requests
Types of information requests
In 2019, we received different types of legal requests for information, including Grand Jury Subpoenas, Summons, Preservation Orders, Information Subpoenas, and Certifications of Trustee in Bankruptcy. We did not receive any national security letters, FISA orders, or other classified requests in 2019.
Type of Data Request | Number received |
---|---|
Certification of Trustee in Bankruptcy | 1 |
Civil Investigative Demand | 12 |
Demand to Furnish Information | 1 |
Grand Jury Subpoena | 38 |
Information Injunction | 2 |
Law Enforcement Request | 54 |
Preservation Order | 2 |
Production Order | 5 |
Regulatory Request | 18 |
Search Warrant | 2 |
Subpoena | 93 |
Summons | 54 |
Other | 13 |
Individual Rights
Individual Rights
Shopify strongly believes that individuals should have control over their personal information. In this spirit, and in accordance with our Privacy Policy, we respond directly to requests from our merchants, partners, and app users to access or delete their personal information. That said, when it comes to personal information about our merchants’ customers, we do not control that information - we only process that information as a “data processor” or a “service provider” for our merchants.
As a result, we are not permitted to respond to requests from a merchant’s customer directly. Instead, we relay these requests to the relevant merchant, and have built tools for our merchants to enable them to act on them in our platform.
In 2019, we fulfilled these data subject requests:
Access
Merchants | 14 |
Partners | 2 |
Deletion
Merchants | 450 |
Partners | 78 |