Order Hub — Privacy Policy

Last updated July 20, 2026

Order Hub is a shipping and fulfillment app for Shopify merchants. It helps a store create courier AWBs, validate delivery addresses, print labels, pick and pack orders, and issue invoices. This policy explains what personal data the app processes on a merchant's behalf, why, and how it is protected.

Who is responsible for the data

The merchant who installs Order Hub is the data controller for their customers' data. Order Hub processes that data solely to provide the fulfillment features the merchant uses, acting as their data processor.

What data the app processes

To create shipping labels and validate deliveries, the app reads and stores the following order and recipient fields from the merchant's Shopify store:

• Recipient name — to address the parcel and the AWB.
• Recipient email — required by some couriers (e.g. Packeta) to book a shipment; where an order has no email, the app synthesises a non-deliverable placeholder for that purpose.
• Recipient phone — for courier delivery notifications and customer-service lookup.
• Shipping address — to validate deliverability and print the label.
• Order metadata — order number, totals, payment and fulfillment status, line items, tags, tracking numbers.

The app requests only the fields it needs for fulfillment. It does not request the Shopify customer profile object, and does not use the read_customers scope. It does not collect data from store visitors, and it never sells personal data or uses it for advertising.

Why the app processes it (purpose limitation)

Personal data is used only to operate the fulfillment features the merchant has enabled — creating AWBs, validating addresses, printing labels, picking/packing, issuing invoices, and answering the merchant's customer-service queries about an order. It is not used for any other purpose.

How long it is kept

Order data is retained only as long as it is needed to fulfill and support the order. A merchant can have a customer's data erased at any time (see below), and all of a shop's data is deleted when the app is uninstalled.

Data deletion and access requests (GDPR/CCPA)

The app implements Shopify's mandatory privacy webhooks:

• customers/data_request — a merchant can request the data the app holds for one of their customers.
• customers/redact — the recipient personal data on that customer's orders is erased.
• shop/redact — 48 hours after a shop uninstalls, all of its data is deleted.

A merchant or a customer can also email gheorghe.beschea@overheat.agency to request access or deletion.

How it is secured

• All traffic is encrypted in transit over TLS/HTTPS.
• Shopify access tokens, courier credentials, and API secrets are encrypted at rest (AES-256-GCM).
• Database backups are encrypted (AES-256).
• Access to production data is restricted to the operator and protected by strong credentials; access to personal data is logged.

Sub-processors

The app shares data only as needed to perform fulfillment: with the courier the merchant selects (to book the shipment) and with the merchant's invoicing provider (SmartBill, when the merchant enables invoicing). It runs on a private virtual server. No data is shared for any other purpose.

Changes

Material changes to this policy will be reflected here with an updated date.

Contact

Questions about this policy or your data: gheorghe.beschea@overheat.agency.