Privacy Policy

Last updated: April 10, 2026

Hold My Order is a Shopify application that allows merchants to offer customers the option to select a future delivery date at checkout. This privacy policy explains how we collect, use, and protect information when you use our app.

1. Information We Collect

When a merchant installs Hold My Order, we collect and store the following information:

• Shop information: Store domain name, access tokens required for app functionality, and subscription/billing status.
• Order information: Order ID, order number, order total, customer name, customer email, and the selected hold/delivery date for orders that use the hold feature.
• Session data: Authentication session tokens required by Shopify for secure app access.
• App settings: Merchant-configured preferences such as hold periods, lead times, and checkout display text.

2. How We Use Information

We use the collected information solely to:

• Provide the hold order functionality at checkout.
• Display and manage held orders on the merchant dashboard.
• Authenticate merchants and maintain secure sessions.
• Process subscription billing through the Shopify Billing API.
• Respond to customer data requests as required by privacy regulations.

3. Data Storage and Security

All data is stored in a secure PostgreSQL database hosted on Render. We use HTTPS/TLS encryption for all data in transit. Access tokens are stored securely and are never exposed to third parties. We do not sell, rent, or share any merchant or customer data with third parties.

4. Data Sharing

We do not share personal data with any third parties. The app communicates only with:

• Shopify APIs (for authentication, order data, and billing).
• Our own database (for storing app settings and hold order records).

5. Data Retention

We retain merchant and order data for as long as the app is installed. When a merchant uninstalls the app, we mark the shop as inactive. Within 48 hours of uninstallation, Shopify sends a shop redaction webhook, and we permanently delete all shop data including orders, settings, analytics, and session records.

6. Customer Data Rights

We comply with applicable privacy regulations including GDPR and CCPA. We support the following rights through Shopify's mandatory compliance webhooks:

• Data access: When a customer requests their data, we respond with any stored information associated with their account.
• Data deletion: When a customer requests deletion of their data, we remove all hold order records associated with their email address.
• Shop data deletion: When a merchant uninstalls the app, all associated shop data is permanently deleted.

7. Cookies

Hold My Order does not use cookies directly. The app relies on Shopify's session token authentication for embedded app access.

8. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated revision date.

9. Contact

If you have questions about this privacy policy or how we handle your data, please contact us at:

Email: info@pytech.co.uk