This policy explains how Lockership (“we”) processes data when a Shopify store (“merchant”) uses the Lockership app, and when a buyer uses a Lockership page on a merchant’s store. Lockership is provided by Kacper David Staniš (individuali veikla), IV pažyma Nr. 1434941, Vilnius, Lietuva.
Roles
For order and buyer data, the merchant is the data controller and we act as a processor on the merchant’s instructions. For the merchant’s own account and contact details, and for messages sent through our website, we are the controller.
What we process
- Store data: the shop domain, app settings, shipping locations (sender and pick-up addresses, phone, email) and the merchant’s texts.
- Order data needed to ship: order number, items and weights, delivery method, the buyer’s name, delivery address, phone and email, the chosen parcel locker, tracking numbers and carrier statuses.
- Return requests: the items, quantities, reasons and notes the buyer enters, the chosen refund or exchange, and the outcome (approval, refund amount, restock).
- Carrier logins: API usernames, passwords or tokens for the merchant’s carrier accounts. They are encrypted (AES-GCM) and never shown again after saving.
- Website messages: the email, store address and message sent through the early-access form.
We do not sell data, show ads or build profiles of buyers.
Why we process it
- To show parcel lockers, create shipping labels, book couriers and sync tracking to Shopify (performance of the contract with the merchant).
- To run the returns and exchanges page and record its outcome in Shopify (on the merchant’s instructions).
- To answer early-access requests and support questions (our legitimate interest / steps before a contract).
Who receives data
- Shopify, which hosts the store and the order data.
- The carrier the merchant uses (LP Express/Unisend, Omniva, DPD, Venipak) – only the data needed for a label, a courier pick-up, a return or tracking.
- Cloudflare, which runs the app and stores its data (Workers, KV and D1) as our sub-processor.
- OpenStreetMap-based geocoding services, which receive a delivery address or search text to find the nearest parcel lockers. Results are cached under a one-way hash, not the address.
Some of these providers may process data outside the EU/EEA; where they do, they rely on the European Commission’s standard contractual clauses or an adequacy decision.
How long we keep it
- Settings, shipping locations and carrier logins: while the app is installed, and deleted when Shopify sends the shop deletion request (48 hours after uninstalling).
- Return requests: while the app is installed, so the merchant keeps a return history and accounting exports; deleted with the shop, or earlier on a buyer’s deletion request.
- Temporary files (label PDFs, documents, exports): one hour; return label PDFs sent to buyers: 60 days.
- Short logs used to fix errors: up to 14 days.
- Early-access messages: until the request is handled, and at most 24 months.
Your rights
Buyers should contact the store they bought from; the store can ask us to help. We act on Shopify’s data requests automatically: a buyer’s deletion request removes their return requests, and a shop deletion request removes all of the store’s data. Merchants and website visitors can ask us for access, correction or deletion at support@lockership.com, and have the right to complain to their data protection authority (in Lithuania, the State Data Protection Inspectorate).
Security
Data travels over HTTPS. Carrier passwords are encrypted. Admin requests are accepted only with a valid Shopify admin session, and buyer pages only for the buyer’s own order. Access to production systems is limited to the people who run Lockership.
Cookies
This website sets no cookies and uses no analytics or tracking scripts. The app inside Shopify uses only what Shopify needs to sign you in.
Changes and contact
We will update this page when our processing changes and show the date at the top. Questions: support@lockership.com. See also the terms of service.