Privacy policy
Whenly is a Shopify app that lets a shop’s buyers choose a delivery, pickup or shipping date and time window, and helps the shop plan those orders. This policy explains what personal data Whenly processes, why, and for how long. Whenly is provided by Yazıpark Bilgi Sistemleri Ltd. Şti., Ünalan Mah. Sarnıç Sk. No:3 A1 Blok D:10, Üsküdar, İstanbul, Türkiye. Contact: [email protected].
Our role
For the data of a shop’s buyers, the shop (the merchant) is the controller and Whenly is its processor: we process it only to run Whenly for that shop, under our data processing agreement. For the merchant’s own account data, Whenly is the controller.
What we process
| Data | Where it comes from | Stored by Whenly? |
|---|---|---|
| Shop domain, settings, plan, the app’s access token | Shopify, the merchant | Yes, while the app is installed |
| Per order: order ID and number, chosen method, date, time window, pickup location, delivery zone, delivery postal code, the shop’s progress status | The order’s attributes and Shopify’s order webhooks | Yes, see retention |
| Order line items and fulfillment status | Read from Shopify when the merchant opens a list | No |
| Which customer an order belongs to | Read from Shopify when a signed-in buyer changes their order’s date, to check it’s theirs | No |
| Delivery name, company, address and phone number, and the buyer’s order note | Read from Shopify when the merchant opens the route list (Whenly Business) | No |
| The buyer’s e-mail address and language | Read from Shopify when a reminder e-mail is sent the day before the date (if the shop turned reminders on) | No. If the buyer unsubscribes, only a one-way hash of the address is kept, so no more reminders are sent |
| Gift recipient name and card message, if the buyer gives them | Order attributes, read from Shopify when shown | No |
| Error reports from the storefront calendar (page, browser, the error) | The buyer’s browser | Yes, 90 days; scrubbed of tokens, e-mails and similar |
Whenly does not store buyers’ names, e-mail addresses, phone numbers or street addresses, does not set cookies or tracking identifiers in the storefront, does not build profiles, does not sell or share personal data, and does not use it for advertising or for automated decisions with legal or similar effects.
Why
- To show buyers which dates and times are available and to check the choice at checkout.
- To show the merchant what to deliver, prepare or hand over, and when (calendar, lists, exports, Shopify Flow).
- To keep capacity counts right, and to find and fix errors.
The legal basis is the performance of our contract with the merchant and, for error reports, our legitimate interest in a working app.
Retention
- Order bookings are deleted 400 days (about 13 months) after their delivery or pickup date.
- When a buyer asks a shop to erase their data, Shopify tells us and we remove the postal code from their orders’ bookings.
- When a shop uninstalls Whenly, Shopify sends a deletion request 48 hours later and we delete all of that shop’s data.
- Backups are kept for 14 days.
Where and how it’s kept
Whenly runs on a server rented from netcup GmbH in Austria (EU). Data is encrypted in transit (HTTPS) and at rest, backups included. Only the developer can reach the server. Cloudflare passes web traffic to the server and may process IP addresses; Shopify hosts the shop and its orders.
| Service | What for | Location |
|---|---|---|
| netcup GmbH | Server and storage | Austria (EU) |
| Cloudflare, Inc. | Network delivery and protection | Global (EU Standard Contractual Clauses) |
| Resend (Plus Five Five, Inc.) | Sending reminder e-mails | United States (EU Standard Contractual Clauses) |
| Shopify | The shop, its orders, app billing | Per Shopify’s terms |
Your rights
Buyers: Whenly holds your order data on behalf of the shop you bought from, so please contact that shop to see, correct or erase it; the shop’s request reaches us through Shopify. Merchants and anyone else: write to [email protected]. You can also complain to your data protection authority.
Changes
We update this page when what Whenly does with data changes, and change the date above.