Introduction
Zapiet – Pickup + Delivery “the App” provides store pickup and delivery services “the Service” to merchants who use Shopify to power their stores. This Privacy Policy describes how personal information is collected, used, and shared when you install or use the App in connection with your Shopify-supported store.
Personal information the app collects
When you install the App, we are automatically able to access certain types of information from your Shopify account, this includes:
- Read and modify orders
This is required to pull in the order information from your Shopify Account into the App and is critical to its functioning. Order information is used for reporting, updating of tags / shipping addresses and for sending email notifications to your bricks and mortar stores. We receive the entire order information from Shopify for initial process but only store the minimum required data in the Apps database. This includes the following details; customer name, customer email, customer phone, customer address, order total, currency code, pickup/delivery/shipping date, time and location, order name, external order ID.
If you are using one of our integrations with HubBox, Deliv, Exportify or Zapier please see the section titled “Integrations” for additional information on how your customers order information is used. - Read and modify draft orders
This is required to allow a merchant the ability to easily convert a standard draft order into a pickup, delivery or date based shipping order. The App uses and stores draft order information identically to standard orders. - Read products
Required to allow merchants to specify which products are available from which outlets within the App. It’s also used to display product images within the App. We only store the minimum required information on your products which includes; product ID, product name and thumbnail. - Read and write carrier services (shipping rates)
Required in order for the App to generate pickup, delivery and shipping rates within your shops checkout process. - Read and write themes
Required in order to embed the Apps code into your themes. This streamlines the installation process by removing manual file uploading and code modifications. - Script tags
Used for legacy users of the App where we dynamically loaded the Apps code via a script tag rather then embedding directly into the theme. - Read shop information
Shopify Accounts linked to an app are provided basic information about the shop by Shopify. This includes personal information such as the shop’s address, email, phone, location, locale and store owners name and email address. This information is needed to customize the application based on the shop details, as well as to help identify customer service requests. - Integrations
- Exportify
If you are using our Exportify integration we send very minimal information. In fact we only send Exportify a list of filtered Shopify order ID numbers. Exportify will then retrieve the full order information from Shopify for producing your exports. Please be sure to make yourself aware of Exportify’s privacy policy if you decide to use this integration. - Zapier
If you are using our Zapier integration we will retrieve and send Zapier a copy of the full order information. Please be sure to make yourself aware of Zapier’s privacy policy if you decide to use this integration.
Additionally, we collect the following types of personal information from you and/or your customers once you have installed the App:
- Log and device data
When you use Zapiet, our servers automatically record information (“log data”), including information that your browser sends whenever you visit our App. This log data may include your web address you came from or are going to, your device model, operating system, browser type, unique device identifier, IP address, mobile network carrier, and time zone or location. Whether we collect some or all of this information often depends on what type of device you’re using and its settings. For example, different types of information are available depending on whether you’re using a Mac or a PC, or an iPhone or an Android phone. To learn more about what information your device makes available to us, please check the policies of your device manufacturer or software provider. - Cookies and tracking technologies
We use automatically collected information and other information collected on the App through cookies and similar technologies to: (i) personalize our App, such as remembering a users information so that the user will not have to re-enter it during a visit or on subsequent visits; (ii) provide customized advertisements, content, and information; (iii) monitor and analyze the effectiveness of the App and third-party marketing activities; (iv) monitor aggregate site usage metrics such as total number of visitors and pages viewed; and (v) track your entries, submissions, and status in any promotions or other activities on the Service. You can obtain more information about cookies by visiting http://www.allaboutcookies.org.
How do we use your personal information?
We use the information that we collect in a variety of ways in providing the App and operating our business, including the following:
- Operations
We use the information to operate, maintain, enhance and provide all features of the App, to provide the services and information that you request, to respond to comments and questions and to provide support to users of the App. - Understand and improve our products
We use the information to understand and analyze the usage trends and preferences of our Visitors and Users, to improve the App, and to develop new products, services, feature, and functionality. Should this purpose require Zapiet to process your data, then the information will only be used in anonymized or aggregated form. - Communicate with you
We may use a user’s email address or other information (i) for administrative purposes such as customer service, to address intellectual property infringement, right of privacy violations or defamation issues related to the data posted on the Service or (ii) where you have consented, with updates on promotions and events, relating to products and services offered by us and by third parties we work with. You have the ability to opt-out of receiving any promotional communications as described below under “Your rights and choices” - Service related communications
We may send you service and administrative emails to ensure the service is working properly. - Promotional
Subject to your opt-in preference, we may send you emails about new product features or other news about Zapiet or on topics we think would be relevant to you. You may opt out of receiving these communications at any time. See the “Your rights and choices” section below for more information. - Advertising
Subject to your opt-in preference, we may develop and display content and advertising tailored to your interests on our services and other sites. See the “Direct marketing opt-out” section below for more information. - Analytics
We use Google Analytics to measure and evaluate access to and traffic on our site //www.zapiet.com and within the App, and create user navigation reports. Google operates independently from us and has its own privacy policy, which we strongly suggest you review. Google may use the information collected through Google Analytics to evaluate users activity on our site. For more information, see Google Analytics Privacy and Data Sharing. - Legal compliance
We may use your information to comply with applicable legal or regulatory obligations, including informal requests from law enforcement or other governmental authorities. - Other
We also may use your information to manage our business or perform functions as otherwise described to you at the time of collection subject to your consent. Please read all online agreements carefully before accepting them.
Minors and children's policy
Protecting the privacy of young children is especially important. Our App is not directed to children under the age of 16, and we do not knowingly collect Personal Data from children under the age of 16 without obtaining parental consent. If you are under 16 years of age, then please do not use or access the App at any time or in any manner. If we learn that Personal Data has been collected on the App from persons under 16 years of age and without verifiable parental consent, then we will take the appropriate steps to delete this information. If you are a parent or guardian and discover that your child under 16 years of age has obtained an access to the App, then you may alert us at dpo@zapiet.com and request that we delete that child’s Personal Data from our systems.
The App is not intended to be used by minors, and is not intended to be used to post content to share publicly or with friends. To the extent that a minor has posted such content on the App, the minor has the right to have this content deleted or removed using the deletion or removal options detailed in this Privacy Policy. If you have any question regarding this topic, please contact us as indicated in the “How to contact us” section. Please be aware that, although we offer this deletion capability, the removal of content may not ensure complete or comprehensive removal of that content or information.
How do we keep your personal information secure?
We follow generally accepted industry standards to protect the information submitted to us, both during transmission and once we receive it. We maintain appropriate administrative, technical and physical safeguards to protect Personal Data against accidental or unlawful destruction, accidental loss, unauthorized alteration, unauthorized disclosure or access, misuse, and any other unlawful form of processing of the Personal Data in our possession. This includes, for example, firewalls, password protection and other access and authentication controls. We use SSL technology to encrypt data during transmission through public internet, and we also employ application-layer security features to further anonymize Personal Data.
However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. We cannot ensure or warrant the security of any information you transmit to us or store on the Service, and you do so at your own risk. We also cannot guarantee that such information may not be accessed, disclosed, altered, or destroyed by breach of any of our physical, technical, or managerial safeguards. If you believe your Personal Data has been compromised, please contact us as set forth in the “How to contact us” section.
If we learn of a security systems breach, we will inform you and the authorities of the occurrence of the breach in accordance with applicable law.
Sharing your personal information
We do not and will never share, disclose, sell, rent, or otherwise provide personal information to other companies for the marketing of their own products or services.
We do not use the personal information we collect from you or your customers to independently contact or market to your customers. However, Zapiet may contact or market to your customers if we obtain their information from another source, such as from the customers themselves.
We will share information we collect about you, including personal information, in the following ways:
- With third party service providers, agents, or contractors
We use other companies, agents or contractors (“Service Providers”) to perform services on our behalf or to assist us with providing services to you for example, we may engage Service Providers to provide services such as marketing, advertising, communications, infrastructure and IT services, to provide customer service and to analyze and enhance data (including data about users’ interactions with our service). These Service Providers may have access to your personal or other information in order to provide these functions. In addition, some of the information we request may be collected by third party providers on our behalf. We require our Service Providers to agree to take reasonable steps to keep the personal information that we provide to them secure. We do not authorize them to use or disclose your personal information except in connection with providing their services. - To comply with legal process or to protect Zapiet and our users and members
We may share your data: if we believe that disclosure is reasonably necessary to comply with a law, regulation, legal or governmental request; to respond to a subpoena, court order, warrant, or other legal process; to enforce applicable terms of use or this Privacy Policy, including investigation of potential violations thereof; to protect the safety, rights, or property of the public, any person, or Zapiet; to detect, prevent, or otherwise address, security, or technical issues or illegal or suspected illegal activities (including fraud); or as evidence in litigation in which we are involved, as part of a judicial or regulatory proceeding. - Business Transfers
We may engage in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding that involves the transfer of the information described in this policy. In such transactions, customer information is typically one of the business assets that is transferred or acquired by a third party. If we are acquired by or merged with another company, if we sell or transfer a business unit or assets to another company, in the unlikely event of a bankruptcy proceeding, or as part of any other similar business transfer, you acknowledge that such transfers may occur. - Aggregate or De-identified Information
We may disclose aggregate, anonymous, or de-identified information about users for marketing, advertising, research, compliance, or other purposes.
Behavioural advertising
Interest based advertising is the collection of data from different sources and across different platforms in order to predict an individual’s preferences or interest and to deliver to that individual, or his/her computer, smart phone or tablet, advertising based on his/her assumed preference or interest inferred from the collection of data pertaining to that individual or others who may have a similar profile or similar interests.
We work with a variety of third parties to attempt to understand the profiles of the individuals who are most likely to be interested in the Zapiet products or services so that we can send them promotional emails, or serve our advertisements to them on the websites and mobile apps of other entities.
These third parties include: (a) advertising networks, which collect information about a person’s interests when that person views or interacts with one of their advertisements; (2) attribution partners, which measure the effectiveness of certain advertisements; and (3) business partners, which collect information when a person views or interacts with one of their advertisements.
In collaboration with these third parties, we collect information about our customers, prospects and other individuals over time and across different platforms when they use these platforms or interact with them. Individuals may submit information directly on our Sites or on platforms run by third parties, or by interacting with us, our advertisements, or emails they receive from us or from third parties. We may use special tools that are commonly used for this purpose, such as cookies, beacons, pixels, tags, mobile advertising IDs, flash cookies, and similar technologies. We may have access to databases of information collected by our business partners.
The information we or third party collect enables us to learn what purchases the person made, what ads or content the person sees, on which ads or links the person clicks, and other actions that the person takes on our Sites, or in response to our emails, or when visiting or using third parties’ platforms.
We, or the third parties with which we work, use the information collected as described above to understand the various activities and behaviors of our customers, Site visitors and others. We, or these third parties, do this for many reasons, including: to recognize new or past visitors to our Sites; to present more personalized content; to provide more useful and relevant ads – for example, if we know what ads you are shown we can try not to show you the same ones repeatedly; to identify visitors across devices, sales channels, third party websites and Sites, or to display or send personalized or targeted ads and other custom content that is more focused on a person’s perceived interest in products or services similar to those that we offer.
Our interest-based ads may be served to you in emails or on third-party platforms. We may serve these ads about our products or services or send commercial communications directly ourselves or through these third parties.
Visitors may opt out of receiving interest based advertising by advertising networks that may be delivered to them on our platform and other websites by visiting the following websites: http://www.aboutads.info/consumers; and http://www.networkadvertising.org. These features will opt a Visitor out of many – but not all – of the interest-based advertising activities in which we or third parties engage.
Do not track policy
California law requires that operators of websites and online services disclose how they respond to a Do Not Track signal. Some browsers have incorporated “Do Not Track” features. Most of these features, when turned on, send a signal or preference to the website or online service that a user visits, indicating that the user does not wish to be tracked. Because there is not yet a common understanding of how to interpret Do Not Track signals, we do not currently respond to Do Not Track signal. We continue to work with the online industry to define a common understanding of how to treat Do Not Track signals.
In the meantime, you may opt out of receiving interest based advertising from advertising networks that may be delivered on our platform and other websites by visiting the following websites. If you want to opt out of this online behavioral advertising, visit the following sites: https://www.aboutads.info/consumers and https://www.networkadvertising.org.
This will opt you out of many – but not all – of the interest-based advertising activities in which we or third parties engage. Choices you make may be browser and device specific. If you delete your cookies or use a different browser or a different computer or device, you may need to update your opt-out choices. Other third-party Sites provide visitors with the ability to opt-out of receiving interest-based ads on their Sites that you need to control through your settings on that Site. For example, to opt out of Google’s use of your online behavior for advertising purposes, visit Google’s Ad Settings page.
Your rights and choices
If you are a European resident, you have the right to access personal information we hold about you and to ask that your personal information be corrected, updated, or deleted. If you would like to exercise this right, please contact us on dpo@zapiet.com or using the contact information at the bottom of this Privacy Policy.
Additionally, if you are a European resident we note that we are processing your information in order to fulfill contracts we might have with you, or otherwise to pursue our legitimate business interests listed above. Additionally, please note that your information will be transferred outside of Europe, including to Canada and the United States.
- Account
In order to keep your personal information accurate and complete, you can log in to the App to review and update your account information via your settings page. You may also contact us to request information about the personal data we have collected from you and to request the correction, modification or deletion of such personal information.
If you would like to make a request, cancel your account or request we delete or no longer use your account information to provide you Services, contact us at dpo@zapiet.com or the address set forth at the end of this policy. Subject to applicable law, we will retain and use your account information only as necessary to comply with our legal obligations, resolve disputes and enforce our agreements. - Email
You may opt-out of receiving Zapiet email marketing materials by using the unsubscribe link in these communications or by changing your settings from within the App. You can also email dpo@zapiet.com and ask to stop email communications. Please note it can take up to 30 days to process your request. - Third party analytic services
Some of the services used provide the ability to opt-out. You may opt-out of Google Analytics’ services using opt-out features on their respective websites.
The Google Analytics service is provided by Google Inc. You can opt-out from Google Analytics service from using your information by installing the Google Analytics Opt-out Browser tool: tools.google.com/dlpage/gaoptout. For more information on the privacy practices of Google, please visit the Google Privacy & Terms web page: www.google.com/policies/privacy.
Data retention
We will retain your account data and order information until you ask us to delete this information. This allows you to easily reinstall the App without having to re-configure your settings in the future. To request removal of your data please email dpo@zapiet.com. All requests will be processed within 30 days from the time of the request.
Third-party links
Our App may contain links to third-party websites and applications. Subject to your opt-out preferences (see Your rights and choices), we may also use third-party advertisers, ad networks, and other advertising, marketing, and promotional companies, to serve advertisements on our websites. Any access to and use of such linked websites and applications is not governed by this Privacy Policy but instead is governed by the privacy policies of those third parties. We do not endorse these parties, their content, or any products and services they offer, and we do not endorse these parties, their content, or any products and services they offer, and we are not responsible for the information practices of such third-party websites or applications.
Changes and updates to this policy
We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
How to contact us
For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by email at dpo@zapiet.com or by mail using the details provided below:
Zapiet Ltd
14 Horncastle Road,
Louth,
Lincolnshire,
LN11 9LD,
United Kingdom