Privacy policy

Store data. When a merchant installs DatePick, Shopify grants the app access to the store data it needs to run bookings: the store domain, name, email, currency, timezone and plan; products, variants and images used as bookable services; orders and line items tied to a booking; and store locations. We request the narrowest set of Shopify scopes the features need.

Booking data the merchant creates. Services, availability rules, staff and team members, equipment, and the settings for notifications and booking pages.

Customer data for a booking. When a customer books, we store the details needed to fulfil and manage that booking: name, email address, phone number where provided, the chosen date, time and timezone, the quantity and party size, answers to the custom questions the merchant configured, and any note or cancellation or reschedule history.

Technical data. Server and application logs containing request metadata (IP address, user agent, timestamps, error traces) used to keep the service running and secure.

The app does not collect or store payment card details. Payments are handled by Shopify Checkout and Shopify Billing.

• To provide the service: show real availability, create and manage bookings, and keep them in sync with Shopify orders.
• To send transactional messages a merchant has enabled — booking confirmations, reminders, reschedule and cancellation notices — to the customer and to the merchant or staff member concerned.
• To operate merchant billing and plan limits through Shopify Billing.
• To support merchants when they contact us, and to investigate errors and abuse.
• To improve the app using aggregated, non-identifying usage figures.

We do not sell personal data, and we do not use booking data to advertise to customers.

For the personal data of a store’s customers, the merchant is the data controller and DatePick acts as a processor on the merchant’s instructions. For a merchant’s own account and billing data, we act as the controller.

We share data only with the service providers needed to run the app, and only what each needs:

• Shopify — installation, authentication, orders, and billing.
• Our hosting and database providers, which store the app's data.
• Email, SMS and WhatsApp providers, to deliver the notifications a merchant turns on.

We may also disclose data where the law requires it, or to protect our rights, safety or property.

Booking and service data is kept while the app is installed. When a merchant uninstalls DatePick, Shopify sends us a shop redact request and we delete the store’s data within 48 hours of receiving it, except where we must keep records to meet a legal obligation. Customer redact requests from Shopify are handled the same way for the customer named in the request. Logs are kept for a short period and then discarded.

Data travels over TLS and is stored on managed infrastructure with access restricted to the people who operate the app. Shopify access tokens are stored encrypted and used only to serve the merchant. No system is perfectly secure, but we work to keep this one current and to respond quickly if something goes wrong.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to or restrict its processing. If you booked with a store, contact that store first — it controls your booking data — or write to us and we will pass the request on and help the merchant answer it.

The app and its providers may process data in countries other than your own. Where data leaves the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as the European Commission’s standard contractual clauses.

DatePick is a tool for businesses and is not directed at children. We do not knowingly collect personal data from children.

This site sets no tracking or advertising cookies. Booking pages and the storefront widget use only the storage needed to hold a booking in progress, and Shopify’s own cookies apply on the merchant’s storefront and checkout.

We will update this page when the app’s data practices change and revise the date at the top. Significant changes will be notified to merchants in the app.

Questions about this policy or a data request can go to [email protected].