Eye4Tech

Home/Case Studies/Premium watch brand, US

The platform that sits between Shopify, the warehouse and the marketing stack.

Shopify runs the storefront. It does not run the parts of the business that sit either side of it.

Premium watch brand, USClient
19 → 7columns of customer data retained per order
11webhook topics, every one signature-verified and logged
4credential sets moved out of files into an audited vault

Sector

Premium watch retail · Commerce operations & privacy engineering

Technologies

PHP 8.2Laravel 11MySQL 8Shopify REST + GraphQLTailwindAlpine.jsViteFTPAES-256

Services involved

The situation

A premium watch brand's US business sells through a Shopify storefront, but the storefront does not handle warranty registration, store-locator data, merchandising control, or the flat-file order and inventory exchange the warehouse system expects. That gap was being filled by an ageing internal tool, and every order had to be screened before release, because an order pushed to fulfilment cannot be recalled.

What we found

A wide, event-driven integration surface: eleven storefront webhook topics, both REST and GraphQL APIs, an FTP drop for inbound inventory and outbound order files, and a marketing platform to keep in step. The earlier system also mirrored a large amount of order data locally — full shipping and billing addresses, line items, payment method — meaning the admin tool held a growing store of customer personal data it did not need, and the order webhooks accepted unauthenticated requests.

What we built

  • Catalogue sync across products, variants, images, tags, metafields and per-collection ordering, driven by eleven webhook topics the platform registers itself
  • An order screening pipeline that checks payment capture and platform risk signals before any order is released to the warehouse
  • ERP file exchange over FTP — outbound order and refund files, inbound hourly inventory and order-status feeds, with a run log for every job
  • An encrypted credential vault with an admin interface, masked-only display, a full audit trail, and one-command key rotation
  • A data-minimisation rebuild that cut nineteen columns from the order table and removed the local customer table entirely
  • Signature verification on every inbound webhook, plus an append-only event log with a per-row retry that re-fetches and re-runs the original action
  • A thirteen-module admin panel covering products, collections, store locator, warranty registration, exports, reporting and user management
  • Public storefront endpoints for warranty registration with receipt upload, store locator, back-in-stock signup and subscription management

Before and after

What changedBeforeAfter
Customer data held in the admin databaseFull addresses, names, line items, SKU, price and payment method mirrored locally, plus a standalone customer tableSeven columns per order; all detail fetched live at the moment it is used, customer table removed
Webhook authenticationOrder and refund endpoints accepted unauthenticated requestsConstant-time signature verification on every topic, rejecting unsigned requests with a logged reason
Visibility over releasesNo per-attempt record of whether an alert or a warehouse file actually went outAppend-only event log with status, attempt count and error, and a retry that re-runs the original side effect

Where it stands now

In active development and production use. We run the catalogue sync, the order screening pipeline and its alerting, the warehouse file exchange, the credential vault and key rotation, and the admin platform itself.

More work

Other case studies.

Free consultation

Recognise something from this project?

If your situation looks like this one, tell us about it. A senior engineer will tell you how close the match really is and what it would take.

Or email info@eye4tech.com — a senior engineer replies, usually within one business day.

Free · 30 minutes · no obligation

Free 30-minute technical consultation

  • A technical opinion on your website, application or infrastructure
  • A review of an existing project — what is solid, what is risky, what it would take
  • A second opinion on an approach or a quote you have been given
  • An honest answer on whether we are the right people, and what to look for if we are not
Book free consultation Send details