Flexible Delivery Date privacy

Who operates the app

Flexible Delivery Date is operated by Vitalijs Ivanovs, trading as WebSlice, at 43 Mary Court, Chatham, Kent, ME4 5NT, United Kingdom. Privacy questions can be sent to info@webslice.co.uk.

Information the app uses

The app uses the following information to operate for an installed shop:

• the Shopify shop domain and Shopify shop and app identifiers;
• encrypted Shopify access and refresh credentials, together with credential expiry metadata;
• delivery availability, preparation time, cutoff, weekday, booking-window, blocked-date, storefront wording, product-exclusion, and publication settings;
• product identifiers selected in the app's configuration;
• delivery-profile, Shopify shipping-rate, provider, price, free-delivery, and product-group configuration;
• subscription entitlement state; and
• operational health, webhook receipt, security, and error metadata.

Information the app does not request

Flexible Delivery Date does not request access to Shopify customer or order data through the Shopify Admin API.

Relevant cart inputs and delivery choices are processed through Shopify storefront and checkout mechanisms so the selected rules can be applied. WebSlice does not use those inputs to build customer profiles or import order histories.

Why we use information

Information is used to provide the app, apply and publish merchant settings, administer the subscription, prevent abuse, diagnose faults, respond to support, and meet legal obligations. Essential app operation is based on performing the merchant agreement; security and service improvement rely on legitimate interests; legal records are used where required by law.

Shopify, hosting, and other recipients

Shopify provides the commerce platform, app installation, billing, storefront, and checkout mechanisms. Contabo provides application hosting and encrypted backup storage in the European Union. IONOS processes messages sent to info@webslice.co.uk.

Where Shopify or the email provider processes information outside the United Kingdom or European Economic Area, their applicable contractual and legal transfer safeguards are used. We do not sell merchant or personal information.

Retention and uninstalling

Shopify access credentials are cleared immediately after a valid uninstall webhook is processed. The live shop record is scheduled for deletion 48 hours after uninstall, allowing a legitimate reinstall to cancel a stale deletion. A valid Shopify shop/redactwebhook advances deletion to immediate processing.

Application security and error logs rotate as new logs are written. The retention period varies with log volume. Request access logging is disabled for the app. Support correspondence is normally kept for 12 months after the last contact, subject to legal or active-dispute needs.

When database backups are taken, encrypted restore points rotate through 7 daily, 4 weekly, and 3 monthly tiers. Deleted live information can remain inside an encrypted restore point until that point expires. Backups are used only for recovery and are not searched or restored to avoid a valid deletion request.

Mandatory Shopify privacy requests

Shopify can send mandatory privacy webhooks for customer-data requests and shop deletion. The app acknowledges and handles valid requests within its actual data boundaries. Customer request payloads are not retained beyond the bounded receipt and operational handling needed to acknowledge them.

Your rights and how to contact us

Depending on the circumstances, you may request access, correction, deletion, restriction, or object to processing based on legitimate interests. Emailinfo@webslice.co.uk or use theFlexible Delivery Date support page. You may also complain to the Information Commissioner's Office.