Privacy Policy

This Privacy Policy explains what personal information HHC Dropshipping ("HHC", "we", "us") collects through the HHC Dropshipping app when a merchant installs it on their Shopify store, why we collect it, how we use and protect it, and the rights available to merchants and their customers. It is written to satisfy Shopify's requirements for apps that access customer data through the Shopify Admin API.

1Who We Are

HHC Dropshipping operates the HHC Dropshipping platform, which connects merchants with suppliers and couriers to fulfill orders placed on their Shopify stores.

2Information We Collect From Your Shopify Store

When a merchant installs the HHC Dropshipping app and forwards an order for fulfillment, we access and store only the information needed to ship that order:

• Order ID / order number — to identify and track the order through fulfillment.
• Customer name — addressed to the correct recipient on the shipping label.
• Customer phone number — courier delivery coordination.
• Shipping address — delivery of the physical order.
• Ordered product(s) and quantity — picking, packing, and invoicing the correct items.

We do not collect, store, or process your customers' payment card details, passwords, or government identification numbers. Order data is retrieved only for orders the merchant explicitly selects to forward for fulfillment, or that Shopify sends via the webhook subscriptions described below.

3How We Access This Data

We access store and order data exclusively through Shopify's Admin API, using the OAuth scopes the merchant grants at install time. We request only the scopes needed for the app's fulfillment, inventory-sync, and order-forwarding features, and never request broader access than the feature in use requires.

4Shopify's Mandatory Compliance Webhooks

The app implements Shopify's mandatory privacy webhooks so that data-subject requests are honored even if a merchant is not actively using the app at the time:

• customers/data_request — logged and actioned within Shopify's required response window whenever a customer requests a copy of their data.
• customers/redact — personal data tied to the specified customer/orders is erased from our systems.
• shop/redact — all personal data associated with a store is erased after the app is uninstalled and Shopify's retention window has elapsed.

5Data Retention

We retain order-fulfillment data only for as long as necessary to complete delivery, handle returns, and meet our accounting and legal obligations. Working records used purely to route an order to a supplier are deleted on a rolling schedule once fulfillment is complete. We do not retain customer personal data for marketing purposes, and we do not sell customer data to third parties.

6Who We Share Data With

Shipping details (name, phone, address, and ordered items) are shared only with the specific supplier and courier assigned to fulfill that order — never with unrelated third parties, and never for advertising purposes.

7Data Security

All data in transit between Shopify, our servers, and our fulfillment partners is encrypted using HTTPS/TLS. Access to systems holding customer data is restricted to authorized staff whose role requires it, governed by our internal access-control policies.

8International Data Transfer

Order data is processed on servers located in the USA. If this differs from your store's or your customers' location, data may be transferred internationally as part of normal order fulfillment.

9Your Rights

Merchants may request access to, correction of, or deletion of data we hold on their behalf at any time by contacting us using the details below. Shoppers who wish to exercise data rights over their own information should first contact the merchant's store directly; Shopify's mandatory webhooks (Section 4) ensure such requests reach us as well.

10Children's Privacy

The HHC Dropshipping app is intended for use by merchants and is not directed at children. We do not knowingly collect personal data from children through the app.

11Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page will always reflect the most recent revision.

12Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us at hhcdropshipping@gmail.com.