Shopify must face data privacy lawsuit in US