Hi Mayner, I get this but as IRM or Accurascale are the Data Controller are engaging Shopify under contract to deliver services on their behalf, they need to be clear in the privacy notice where our customer data is being processed.
There does not seem to be any of that information provided.
The privacy notice mentions consent as the basis for processing but I don't think we were asked to give consent to have an Accurascale account created for us using the customer data we gave to IRM.