COD Order Data Policy

01Who This Applies To

This policy is for shoppers who place a COD order on a Shopify store that has installed Brix. If you are a store owner using Brix, our Privacy Policy and Terms & Conditions apply to your own account data.

02Roles: Store and Brix

The store you buy from decides why your details are collected and what happens to your order. Brix provides the software and saves the details on the store's behalf. In data protection terms, the store is the controller of your order data and Brix acts as its service provider (processor).

This is why deletion requests are handled through the store first. See section 7.

03What We Store

When a COD order is placed, Brix saves the details needed to handle that order:

• Phone number
• Delivery address
• The order details needed to identify the COD order, such as order reference and order contents

We do not collect card numbers or bank details for COD orders, because payment is made on delivery.

04Why We Store It

We save this information only to:

• Record and process the COD order for the store.
• Let the store contact you about the delivery.
• Operate, secure and support the service, including preventing fraud and misuse.

We do not use your phone number or address for our own advertising.

05Sharing

We do not sell this data. It may be accessible to:

• The store you ordered from.
• Shopify, as needed for the app to work.
• Hosting and infrastructure providers that run our service for us.
• Authorities, where we are legally required to disclose it.

06How Long We Keep It

We keep COD order details for as long as the store uses Brix and needs them to run its orders, or until a verified deletion request is completed. When a store uninstalls Brix, we delete the data we hold for that store in line with Shopify's data deletion requirements.

The store may keep its own copy of your order in Shopify, for example for tax, accounting or delivery records. That copy is under the store's control, not ours.

07How to Delete Your Data

If you want your COD phone number and address removed, follow these steps:

• Step 1. Contact the store you ordered from. Tell them you want your COD order details deleted from the Brix app. Give them your name, phone number and order reference so they can find your order.
• Step 2. The store sends us the request. The store emails [email protected] with its store URL and the order reference or phone number to delete.
• Step 3. We verify and delete. We confirm the request comes from the store, delete the matching data from Brix, and confirm to the store when it is done.

If you email us directly, we cannot verify who you are on the store's behalf, so we will point you back to the store. We also act on customer data erasure requests sent to us through Shopify.

Deleting your data from Brix does not delete the order from the store's own Shopify records. Ask the store about that separately.

08Notes for Store Owners

If you use Brix to take COD orders, you are responsible for telling your shoppers what you collect and why, and for having a legal basis to collect it. Please link to this policy from your own privacy policy or checkout. When a shopper asks you to delete their COD details, send us the request at [email protected] with the shopper's phone number or order reference and your store URL.

09Security

We use industry-standard measures to protect the data we hold. No method of storing or sending data over the internet is completely secure, so we cannot guarantee absolute security.

10Contact Us

Questions about this policy, or a deletion request from a store? Get in touch.