Privacy Policy

Last updated: 2026-05-16

This Privacy Policy describes how the Larkis Delivery Time Picker Shopify application (the "App") collects, uses, and shares information when a Shopify merchant installs it on their store.

1. Data we collect

• Shop information (shop domain, access token, timezone, locale) — required to authenticate with Shopify and read/write resources you authorize.
• Order metadata (order ID, order name, total price, customer name, customer email) — limited to orders that include a delivery date/time selected through the App.
• Delivery selections (date, time, type: pickup / delivery / reservation) made by your customers at checkout.
• Merchant configuration you enter in the App admin (schedules, blackout dates, capacity, themes, labels).

We do not collect payment details, full customer addresses, or browsing data outside of what is required to schedule deliveries.

2. How we use data

• To display available time slots to your customers.
• To enforce capacity, cutoff, and preparation-time rules you configure.
• To present a dashboard, analytics, and order schedule to you as the merchant.
• To tag and annotate orders in your Shopify admin with the customer's delivery selection.

3. Sharing

We do not sell or rent personal data. Data is shared only with:

• Shopify — through official Shopify APIs, in order to fulfil App functionality.
• Our hosting provider — solely to operate the App infrastructure.

4. Retention & deletion

Order and customer data is retained for as long as the App is installed. When you uninstall the App, we automatically receive an app/uninstalled webhook and remove your session credentials.

We honour Shopify's mandatory GDPR webhooks:

• customers/data_request — we respond with any customer data we hold for the requested customer.
• customers/redact — we permanently delete delivery entries linked to the customer 30 days after the request.
• shop/redact — we permanently delete all shop data 48 hours after the request.

5. Security

All traffic is served over HTTPS. Shopify access tokens are stored encrypted at rest. HMAC signatures are verified on every webhook.

6. Your rights

If you are a customer of a store using this App and wish to access, correct, or delete your personal data, please contact the merchant directly. The merchant may then forward the request to us.

7. Contact

For privacy questions, contact: [email protected].