Privacy Policy

Last updated: 31 May 2026

This Privacy Policy describes how Portside Commerce Ltd (“Portside Commerce,” “we,” “us”) handles information collected through the Delivery Messaging Shopify app (“the app”) and through this website (delivery-messaging.app).

Portside Commerce Ltd is a company registered in England and Wales (company number 17214839), with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

Information the App Collects

When a merchant installs the app, we collect the shop domain, shop ID, and access tokens required to operate the app. We do not collect personal information about customers of the merchant’s store.

If the merchant configures the optional Pre-Order Order Tagging feature, the app subscribes to the Shopify orders/create webhook. The handler reads only the order’s identifier and the product IDs of its line items, in order to add a workflow tag (such as “pre-order”) to orders that contain pre-order products. No customer-identifying fields — including name, email, phone number, or billing/shipping address — are accessed, stored, or transmitted.

How We Use Information

We use the collected information solely to provide and operate the app’s functionality on the merchant’s Shopify store. We do not sell your data, and we do not share it with third parties for marketing purposes. We use third-party service providers (described below) to operate the app, who act as data processors on our behalf.

Data Storage and Processors

Operational data (such as session records and webhook events) is stored on databases hosted by Render (EU region — Frankfurt, Germany) and is handled in accordance with their security practices. Configuration data (such as the merchant’s rule and message setup) is stored in Shopify shop metafields under the merchant’s own store and remains accessible to the merchant directly.

The app relies on the following third-party services to operate:

• Render (cloud hosting, EU region — Frankfurt) — application hosting and database
• Cloudflare (DNS) — domain management
• Google Workspace (email infrastructure) — support correspondence

Data Retention and Deletion

Operational data is deleted when the app is uninstalled from the merchant’s Shopify store. Shopify notifies the app of uninstallation via the standard app/uninstalled webhook, which triggers cleanup of the associated session data. Configuration data stored in Shopify shop metafields is governed by Shopify’s own data retention practices.

GDPR Compliance

We comply with the UK GDPR and EU GDPR. As part of our Shopify integration, we honour the Shopify-mandated GDPR webhooks for data deletion requests:

• customers/data_request — requests for stored customer data
• customers/redact — customer data deletion requests
• shop/redact — shop data deletion requests, processed within 48 hours of uninstall

Website

This website (delivery-messaging.app) provides information about the app. The website is hosted on Render (EU region — Frankfurt, Germany). Standard technical information (such as IP address, browser type, and request timestamps) may be processed by Render for the purposes of operating the website and protecting against abuse. We do not use analytics, tracking pixels, or marketing cookies, and we do not collect personal information from website visitors directly.

Your Rights

Under UK and EU data protection law, you have rights regarding personal data we may hold about you, including the right to access, correct, or request deletion. To exercise these rights, or for any other privacy-related questions, please contact us using the details below.

Contact

← Back to home