Privacy Policy

Last updated: 30 June 2026

This Privacy Policy describes how Portside Commerce Ltd (“Portside Commerce,” “we,” “us”) handles information collected through the Hybrid Wholesale Shopify app (“the app”) and through this website (hybrid-wholesale.app).

Portside Commerce Ltd is a company registered in England and Wales (company number 17214839), with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

Information the App Collects

When a merchant installs the app, we collect the shop domain, shop ID, and access tokens required to operate the app.

To provide wholesale pricing, the app reads data from the merchant’s Shopify store: customer tags (to determine which customers are eligible for wholesale pricing), and product and variant information (to calculate the prices to display). The app also subscribes to the Shopify orders/create webhook and reads an order’s identifier, line items, customer reference, applied-discount titles, and tags, in order to recognise qualifying wholesale orders and apply workflow tags.

If the merchant enables the wholesale application form, the app collects the information a prospective wholesale customer submits through that form. Depending on how the merchant configures the form, this may include the customer’s name, email address, telephone number, company name, and postal address. This information is submitted by the customer to the merchant in order to apply for a wholesale account, and is stored so the merchant can review and manage the application from their Shopify admin.

How We Use Information

We use the collected information solely to provide and operate the app’s functionality on the merchant’s Shopify store — including displaying wholesale pricing, managing wholesale account applications, and sending the merchant’s customers transactional emails relating to their application (for example, confirmation or approval messages). We do not sell your data, and we do not share it with third parties for marketing purposes. We use the third-party service providers described below to operate the app; they act as data processors on our behalf.

Data Storage and Processors

Operational and application data (such as session records, the merchant’s configuration, and wholesale application records) is stored in a database hosted by Render (EU region — Frankfurt, Germany) and is handled in accordance with their security practices. Some configuration data is also stored in Shopify shop metafields under the merchant’s own store and remains accessible to the merchant directly.

The app relies on the following third-party services to operate:

• Render (cloud hosting, EU region — Frankfurt) — application hosting and database
• Resend — delivery of transactional emails (such as wholesale application status messages)
• Cloudflare (DNS) — domain management
• Google Workspace (email infrastructure) — support correspondence

Where a merchant configures their own email-sending credentials in the app, transactional emails are sent using that merchant’s chosen provider instead.

Data Retention and Deletion

Session data is removed when the app is uninstalled from the merchant’s Shopify store, via the standard app/uninstalled webhook. Wholesale application records and the merchant’s configuration are deleted in response to the Shopify GDPR webhooks described below. Configuration data stored in Shopify shop metafields is governed by Shopify’s own data retention practices.

GDPR Compliance

We comply with the UK GDPR and EU GDPR. As part of our Shopify integration, we honour the Shopify-mandated GDPR webhooks for data requests and deletion:

• customers/data_request — requests for stored customer data
• customers/redact — customer data deletion requests; we delete the wholesale application records we hold for that customer
• shop/redact — shop data deletion requests; we delete all data we hold for that shop, processed within 48 hours of uninstall

Website

This website (hybrid-wholesale.app) provides information about the app. The website is hosted on Render (EU region — Frankfurt, Germany). Standard technical information (such as IP address, browser type, and request timestamps) may be processed by Render for the purposes of operating the website and protecting against abuse. We do not use analytics, tracking pixels, or marketing cookies, and we do not collect personal information from website visitors directly.

Your Rights

Under UK and EU data protection law, you have rights regarding personal data we may hold about you, including the right to access, correct, or request deletion. If you are a customer of a store using the app, the merchant is the controller of your data and you may also contact them directly. To exercise these rights, or for any other privacy-related questions, please contact us using the details below.

Contact

← Back to home