TillKit UK Postcode Rules privacy policy

TillKit UK Postcode Rules lets a Shopify store block or change checkout and delivery options by postcode. This page says what the app stores and why.

What the app stores

• The store's Shopify access token, with its refresh token, the permissions granted and the store's myshopify domain, so the app can act for the store when a member of its staff opens the app in Shopify admin. They are kept in a database on Cloudflare and deleted when the store uninstalls the app.
• The rules the store's staff set up in the app. These are kept in the store's own Shopify data, as app metafields, not on the app's servers.

What the app doesn't store

The app keeps no customer data. Postcodes and carts are read only inside Shopify's checkout, by Shopify Functions that run on Shopify's servers and keep nothing. No orders, addresses or payment details reach the app. Shopify's customer data request and customer deletion notices, which carry a customer's id, email and phone number, are acknowledged and dropped without being stored, as there is nothing held to return or delete.

Sharing

Nothing is sold or shared. The app uses Cloudflare to host its pages and its session database, and Shopify to run the checkout functions. Cloudflare keeps request logs (the page address and the store's domain) for its standard retention period.

Deletion

Uninstalling the app deletes the store's sessions straight away. Shopify's shop data deletion request deletes them too. The rules live in the store's own Shopify data, and the app keeps no copy of them.

Contact

Questions about this policy: hello@tillkit.app.