Privacy Policy
Effective Date: 4 August 2026
1. Introduction
Safe-to-Ship (“we”, “our”, or “us”) is a Shopify application that helps merchants prevent orders from being released until operational readiness requirements have been satisfied. We are committed to protecting the privacy and security of merchant and customer information processed through our application. Safe-to-Ship is designed to process only the information necessary to provide operational readiness, fulfillment coordination, and related application functionality.
2. Information We Process
Safe-to-Ship processes only the information required to operate the application. Depending on how a merchant uses Shopify, this may include Shopify Order and Fulfillment Order information; order and fulfillment status; operational readiness evaluations; hold and release status; operational event history; application audit records; Shopify resource identifiers; shop identifiers; and authentication session information. Where necessary to operate the application, limited customer and order information supplied by Shopify may also be synchronised, including customer name, email address, phone number, shipping and billing addresses, browser IP address, device details provided by Shopify, customer locale information, order notes and attributes, fraud assessment information, and other order-related information made available through Shopify APIs. This information is synchronised from Shopify as part of the merchant’s order records and retained where necessary to operate the application, maintain complete application order records, support Shopify privacy request workflows, and satisfy Shopify platform requirements. Customer contact and address information is not used to determine operational readiness or fulfillment hold decisions unless explicitly required by a merchant-enabled feature. Safe-to-Ship does not use customer information for advertising, marketing, profiling, or selling personal information.
3. Why We Process This Information
We process information solely to operate Safe-to-Ship and provide the services requested by merchants. This includes evaluating operational readiness; coordinating fulfillment holds and releases; recording operational history; maintaining application audit records; troubleshooting technical issues; meeting Shopify platform requirements; providing customer support when requested; and responding to Shopify privacy requests. We do not process personal information for advertising, marketing, or profiling purposes.
4. Operational Data, Data Sharing & Security
To provide reliable fulfillment coordination, Safe-to-Ship maintains application-owned operational records, including readiness evaluations, hold placement and release events, workflow execution history, timestamps, audit records, and internal identifiers required for application operation. These records are used solely for application functionality, troubleshooting, auditing, compliance with Shopify requirements, and operation of the service. We do not sell personal information. Information is shared only where necessary to operate the application, including with Shopify, Gadget (our application hosting platform), and infrastructure providers. We use reasonable technical and organisational measures including encryption in transit, encryption at rest where supported, secure authentication, access controls, the principle of least privilege, and application monitoring and logging.
5. Data Retention, Shopify Privacy Requests & App Uninstallation
We retain information only for as long as necessary to operate the Safe-to-Ship service, meet legal, regulatory, contractual, or Shopify platform requirements, and respond to technical issues. When information is no longer required, or Shopify privacy requirements require deletion or redaction, it is securely deleted or anonymised where appropriate. Safe-to-Ship supports Customer Data Requests, Customer Redact requests, and Shop Redact requests. Customer Data Requests are prepared from application-owned information and provided to the merchant in accordance with Shopify requirements. Customer information is redacted where required, and Shop Redact requests result in deletion of shop-associated application-owned data. Uninstalling the app does not immediately delete all data; information may be retained for a limited period where necessary to comply with legal obligations, resolve technical issues, and satisfy Shopify platform requirements. Shopify subsequently issues a Shop Redact request when appropriate; upon receiving a valid request, Safe-to-Ship deletes shop-associated application-owned data in accordance with Shopify requirements.
6. Your Rights, Changes & Contact
Depending on your jurisdiction, you may have rights to access your information, correct inaccurate information, request deletion, object to certain processing, or request restriction of processing. Requests may be submitted through Shopify or by contacting us. We may update this Privacy Policy from time to time. The latest version will always be published and the Effective Date updated. Safe-to-Ship: support@safetoshipapp.com.