Privacy Policy

Last updated: 29 July 2026

This Privacy Policy describes how Portside Commerce Ltd (“Portside Commerce,” “we,” “us”) handles information collected through the Tidal Shipping Rates Shopify app (“the app”) and through this website (tidal-shipping.app).

Portside Commerce Ltd is a company registered in England and Wales (company number 17214839), with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

Information the App Collects

When a merchant installs the app, we collect the shop domain and the access token required to operate the app on the merchant’s behalf.

To let a merchant configure shipping, the app reads data from their Shopify store via the Admin API: product and variant information (title, tags, price, weight, vendor, product type, and collections). This is used to configure carriers and rates and to assign tags to products so the app can route each product to the correct carrier. The app also stores the shipping configuration a merchant creates — carriers, postcode zones, rates, services, delivery sets, and settings — per store, along with a cache mapping products to their tags so rates can be calculated quickly at checkout.

At checkout, Shopify sends the app a rate request containing the basket contents and the delivery destination (including the postcode and the recipient’s first name) so the app can calculate a shipping rate to return. The most recent rate requests per store are kept briefly as a diagnostic log and are automatically pruned.

We do not collect or store customer accounts, email addresses, phone numbers, or payment details. We do not sell your data, and we do not share it with third parties for marketing purposes. We use the third-party service providers described below to operate the app; they act as data processors on our behalf.

Data Storage and Processors

Operational data (such as session records, the merchant’s shipping configuration, the product-to-tag cache, and the transient rate-request log) is stored in a database hosted by Render (EU region — Frankfurt, Germany) and is handled in accordance with their security practices. Some configuration may also be stored in Shopify shop metafields under the merchant’s own store and remains accessible to the merchant directly.

The app relies on the following third-party services to operate:

• Render (cloud hosting, EU region — Frankfurt) — application hosting and database
• Shopify — the platform the app runs on and integrates with
• Cloudflare (DNS) — domain management
• Google Workspace (email infrastructure) — support correspondence

Data Retention and Deletion

Session data is removed when the app is uninstalled from the merchant’s Shopify store, via the standard app/uninstalled webhook. The merchant’s configuration and cached data are deleted in response to the Shopify GDPR webhooks described below. Configuration data stored in Shopify shop metafields is governed by Shopify’s own data retention practices.

GDPR Compliance

We comply with the UK GDPR and EU GDPR. As part of our Shopify integration, we honour the Shopify-mandated GDPR webhooks for data requests and deletion:

• customers/data_request — requests for stored customer data. As we hold no customer accounts, we have no customer profile to return.
• customers/redact — customer data deletion requests. We hold no customer profiles; the only customer-related data is the transient rate-request log, which is cleared as described below.
• shop/redact — shop data deletion requests; we delete all data we hold for that shop, including the rate-request log, processed within 48 hours of uninstall.

Website

This website (tidal-shipping.app) provides information about the app. The website is hosted on Render (EU region — Frankfurt, Germany). Standard technical information (such as IP address, browser type, and request timestamps) may be processed by Render for the purposes of operating the website and protecting against abuse. We do not use analytics, tracking pixels, or marketing cookies, and we do not collect personal information from website visitors directly.

Your Rights

Under UK and EU data protection law, you have rights regarding personal data we may hold about you, including the right to access, correct, or request deletion. If you are a customer of a store using the app, the merchant is the controller of your data and you may also contact them directly. To exercise these rights, or for any other privacy-related questions, please contact us using the details below.

Contact

← Back to home