Deliberry Pickup Points — Privacy Policy

Effective 2026-11-06.

This policy explains what personal data the Shopify app Deliberry Pickup Points ("the App", "we") processes, why, who receives it, how long we keep it, and how to reach us. Part 2 contains the data processing terms that apply between us and the stores that install the App.

Who we are

Seaside Studio Ltd. (СИЙСАЙД СТУДИО ООД), 18 Shipka Street, floor 2, office 203, 9000 Varna, Bulgaria. Company number (ЕИК) 208607221, VAT number BG208607221.

Contact for privacy questions: seaside@seasideapps.co

Part 1 — Privacy policy

1. Who this policy is about

Merchants: the Shopify stores that install the App, and the staff who use it.
Buyers: the people who order from those stores and have the order delivered by a courier connected in the App (Econt, Speedy, BOX NOW, Sameday or ACS).

For buyers' data, the store is the controller and we process the data on its behalf (see Part 2). For merchant data, we are the controller.

2. What we process and why

About buyers, for orders that go with a courier connected in the App:

Name, phone number and e-mail address: the courier needs them on the waybill to contact the buyer and send delivery notices. The name can be a company name taken from the order.
Delivery address, or the chosen courier office or locker: to create the waybill and deliver the parcel.
Order number, amount still to be paid (cash on delivery), value of the goods and parcel weight: to fill in the waybill.
Waybill number and tracking status: to show the store where the parcel is and, if the store chooses, mark the order fulfilled with the tracking number. Shopify then sends the buyer its shipping notice.

We read buyer data from the store's Shopify orders. We store the buyer's name, phone number, delivery place, the order number, the waybill number and the cash on delivery amount, so the store can find, reprint, track and correct its shipments. We do not store the buyer's e-mail address: it goes to the courier with the waybill. Courier error messages we store can repeat part of the address. If the store turns it on, we also write the courier, the office or address and the waybill number back to the Shopify order.

About merchants:

Store domain, Shopify store ID and the access token Shopify issues to the App: to run the App in the store.
Whether the store is on Shopify Plus, and its App subscription (plan, trial end, cancellation): to offer the features of the store's plan. Billing itself is handled by Shopify.
Language of the staff member's Shopify admin: to show the App in Bulgarian or English. It is not stored.
Sender details (name, contact person, phone, e-mail and address): printed on the waybills as the sender.
Courier account credentials (username and password, or API keys): to create waybills, labels and tracking with the store's own courier accounts. Passwords and keys are stored encrypted (AES-256-GCM) and never shown again after saving.

Legal basis: for merchant data, the contract with the store (GDPR Art. 6(1)(b)) and our legitimate interest in keeping the service secure and working (Art. 6(1)(f)). For buyer data, we act on the store's instructions; the store relies on its own legal basis, usually the contract with the buyer.

We don't sell personal data, don't use it for advertising or profiling, and the App uses no analytics or tracking services.

3. On the storefront

Pre-checkout page (any Shopify plan). If the store turns it on, a page before checkout asks for the recipient's name, phone number, e-mail (optional) and address, and for the delivery choice: address, courier office or locker. It puts them on the buyer's Shopify cart so checkout opens filled in. Only the office search text and the postcode reach our server, to list offices and lockers, and we don't store them. The browser keeps the recipient's details for the visit only (session storage), and the delivery type, courier, office or locker and search text for up to 60 days (local storage), so the buyer doesn't have to choose again.
Picker inside checkout (Shopify Plus). The buyer chooses an office or locker under the shipping rate. To list the nearest ones, the town, postcode and street from checkout are sent to our server and, for Econt, to Econt through the store's own Econt account. The picker keeps the chosen office and recent search results for 10 minutes in Shopify's checkout storage.

The App sets no cookies and no advertising or analytics trackers.

4. Who receives the data

Couriers, when the store sends a parcel with them: Econt, Speedy, BOX NOW, Sameday and ACS. They receive the buyer and sender details needed for the waybill, under the store's own contract with them, and process them under their own privacy terms.
Shopify, which hosts the store, the App's admin pages and the App's billing.
Our hosting providers: Render (Render Services, Inc.), which runs the App, and Neon (Neon, Inc.), which hosts its database, both on servers in Frankfurt, Germany.

We don't share personal data with anyone else, unless the law requires it.

5. Where the data is kept

On servers in Frankfurt, Germany, in the European Union. If a provider processes data outside the EU, it does so under the European Commission's standard contractual clauses or an adequacy decision.

6. How long we keep it

While the App is installed: shipment records are kept for 12 months after the App first recorded the order. After that, the buyer's name, phone number, delivery place, courier error messages and label link are deleted; the order number, waybill number, courier and status stay.
Office and locker searches: the address used to find nearby Econt offices is kept in server memory only, for at most 30 days, and never written to the database.
When the store uninstalls the App: we delete the store's sign-in sessions straight away. 48 hours after uninstalling, Shopify asks us to erase the store's data, and we delete all of it (shipments, settings, sender details and courier credentials), unless the store has installed the App again by then.
When a buyer asks the store to erase their data: Shopify forwards the request to us, and we remove that buyer's name, phone number, delivery place, courier error messages and label link from the shipment records as soon as the request arrives. The order number, waybill number, courier and status stay.
Server logs record the web address of each request; for office searches it includes the town or search text and the postcode typed. Our own log lines leave out names, phone numbers and e-mail addresses; courier error messages in them can contain a street name. Logs are kept for at most 12 months.

7. Security

Courier passwords and keys are encrypted at rest with AES-256-GCM.
All traffic uses HTTPS.
Label links the App creates are signed and expire after one hour. Econt labels open through Econt's own link.
Only the company's managing director has access to the servers and the production database, for support and maintenance.

8. Your rights

Under the GDPR you can ask for access to your data, correction, deletion, restriction and portability, and you can object to processing.

Buyers: please contact the store you ordered from. The store controls your data, and we help it answer your request.
Merchants and staff: write to seaside@seasideapps.co. We answer within one month.

You can also complain to the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни, www.cpdp.bg) or to the authority in your country.

9. Changes

We'll post changes on this page and update the date at the top. If a change affects how we use merchant data in a significant way, we'll tell stores in the App before it applies.

Part 2 — Data processing terms

These terms form part of the agreement between the store ("Controller") and Seaside Studio Ltd. ("Processor") when the store installs Deliberry Pickup Points. They meet Article 28 of the GDPR.

Subject matter and duration. The Processor processes buyer personal data to provide the App: listing courier offices and lockers, creating waybills and labels, handling cash on delivery amounts and tracking parcels. The processing lasts as long as the App is installed, plus the deletion periods in Part 1, section 6.
Data and people concerned. Buyers of the Controller's store: name, phone number, e-mail address, delivery address or chosen office or locker, order number, cash on delivery amount, goods value, parcel weight, waybill number and tracking status.
Instructions. The Processor processes the data only to provide the App as the Controller configures it (for example, which couriers and shipping rates to use and when waybills are created), and on other documented instructions from the Controller. If an instruction appears to break data protection law, the Processor says so.
Confidentiality. Everyone at the Processor who can access the data is bound to confidentiality.
Security. The Processor applies the measures in Part 1, section 7, and keeps them appropriate to the risk (GDPR Art. 32).
Sub-processors. The Controller authorises the sub-processors listed in Part 1, section 4 (hosting and database). The Processor gives at least 30 days' notice on this page before adding or replacing one, and the Controller may object by uninstalling the App. The Processor holds each sub-processor to the same data protection obligations. Couriers are not sub-processors: they receive data under the Controller's own contract with them, on the Controller's instruction.
Help with requests. The Processor helps the Controller answer buyers' requests to exercise their rights, including through Shopify's customer data request and erasure webhooks.
Personal data breaches. The Processor tells the Controller without undue delay, and within 48 hours of becoming aware of a breach affecting the Controller's data, with the information the Controller needs to meet its own obligations.
Help with compliance. On request, the Processor gives the information the Controller needs for a data protection impact assessment or a consultation with a supervisory authority.
End of processing. When the App is uninstalled, the Processor deletes the Controller's data as set out in Part 1, section 6, unless the law requires it to keep it.
Audits. The Processor makes available the information needed to show it meets these terms and allows reasonable audits, with 30 days' notice, at the Controller's cost, no more than once a year unless there has been a breach.

Seaside Studio Ltd. (СИЙСАЙД СТУДИО ООД) · ЕИК 208607221 · 18 Shipka Street, floor 2, office 203, 9000 Varna, Bulgaria · seaside@seasideapps.co