Privacy Policy

1. Introduction

This Privacy Policy explains how GLS Delivery & Payment Filter ("we", "our", or "the App") collects, uses, and protects information when you install and use our Shopify application.

2. Information We Collect

When you install and use our App, we collect:

• Store Information: Your Shopify store name and domain
• Configuration Data: Your delivery and payment filter settings, country configurations, and pricing preferences
• Usage Statistics: Aggregated data about delivery method selections (home delivery vs. ParcelShop)
• Shipping Credentials: Your MyGLS API credentials (username, client number, country). Passwords are hashed (SHA-512) and encrypted (AES-256-GCM) before storage
• Sender Address: Your business name, address, and contact details for shipping label creation
• Customer Shipping Data: When you create shipping labels, we store recipient name, address, phone number, and email address from your Shopify orders. This data is necessary for GLS label creation and shipment tracking

3. How We Use Information

We use the collected information to:

• Provide and maintain the App's delivery and payment filtering functionality
• Display your configured delivery and payment options to customers at checkout
• Create GLS shipping labels and track shipments via the MyGLS API
• Generate usage statistics for your dashboard
• Monitor app performance and reliability

4. Data Storage and Security

All data is stored securely on our servers. We implement the following security measures:

• MyGLS API passwords are hashed using SHA-512 and encrypted using AES-256-GCM before storage
• Encryption keys are stored separately from the database and are never included in application code
• All communication between the App and external services uses HTTPS/TLS encryption
• Database access is restricted to the application server only

5. Data Sharing with Third Parties

We share data with the following third-party services:

• MyGLS API (GLS General Logistics Systems): When you create shipping labels, we transmit recipient name, address, phone number, and shipment details to the MyGLS API for label generation and shipment tracking. GLS processes this data according to their own privacy policy.
• GLS ParcelShop Widget: The interactive map for ParcelShop selection is loaded directly in your customers' browsers from GLS servers (map.gls-hungary.com). We do not control what data GLS collects through this widget.
• Internal Monitoring (GLS Central): We send aggregated shop activity data (installation status, app usage statistics) to our internal monitoring system for operational purposes. No customer personal data is shared with this system.

We do not sell, trade, or otherwise transfer your information to any other third parties.

6. Data Retention

We retain data according to the following schedule:

• Configuration Data: Retained for as long as the App is installed on your store
• Shipping Records: Retained for as long as the App is installed. When you uninstall the App, all shipping records are deleted within 48 hours
• MyGLS Credentials: Deleted immediately upon App uninstallation
• Usage Statistics: Deleted upon App uninstallation

Upon uninstallation, all your data is automatically deleted. Shopify sends a final data deletion confirmation webhook 48 hours after uninstall, at which point any remaining data is permanently removed.

7. GDPR Compliance

We comply with the General Data Protection Regulation (GDPR). You have the right to:

• Access your data — request a copy of all data we store about your shop
• Request data correction — update any inaccurate information
• Request data deletion — have all your data permanently removed
• Data portability — receive your data in a structured format

We also handle Shopify's mandatory GDPR webhooks for customer data requests, customer data deletion, and shop data deletion in compliance with applicable law.

To exercise these rights, contact us at the email below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: support@sharenoconcept.com
• Website: https://sharenoconcept.com