Simple Delivery Privacy Policy
Last updated: 15 September 2026 Applies to: the Simple Delivery Shopify app ("the app")
This policy describes what personal data the app processes, why, and for how long. It is written to satisfy Shopify's protected customer data requirements and Australian Privacy Principles obligations.
Who we are
Simple Delivery is operated by Succi Inc. Contact: succiinc@proton.me
For data a merchant's store collects, the merchant is the data controller and Simple Delivery is a data processor acting on their instructions.
What we process, and why
| Data | Source | Why | Retention |
|---|---|---|---|
| Delivery address | Cart and order | To determine which delivery zone an address falls in and which times can be booked | Stored only as a one-way SHA-256 hash; the plain address is never written to our database |
| Approximate coordinates | Geocoding the address | To match the address against drawn delivery zones | Rounded to about 100 m, kept with the booking |
| Coordinates against a hashed address | Geocoding the address | Cached so the same address is not sent to a lookup provider twice, which keeps both the cost and the sharing down | Keyed by a one-way SHA-256 of the address, holding no address text. Coordinates are kept at full precision here because they decide which zone an address falls in. Pruned after 180 days unused |
| Vehicle registration | Entered by the customer for Direct to Boot | So staff can identify the vehicle at collection | Deleted when the order is marked complete, and swept after 30 days regardless |
| Delivery notes | Entered by the customer | Gate codes and drop-off instructions for the driver | Kept with the booking; cleared on redaction request |
| Order identifiers | Shopify order webhooks | To link a booking to its order | Kept for the life of the booking record |
| Delivery address, passed to Shopify | Cart | So the checkout opens with the address the customer already gave, instead of asking for it a second time. It is sent to Shopify's own cart, and to no one else | Not stored by us; it passes through and is held by Shopify as part of the customer's cart |
| Street name, suburb and postcode of unserviceable addresses | Cart | So merchants can see where demand exists outside their zones. The house or unit number is removed before storing, so the street is kept but the dwelling is not | 365 days |
We do not process customer names, email addresses or phone numbers. We do not sell, rent or share personal data with third parties, and we do not use it for marketing, advertising, profiling or automated decision-making with legal effects.
The only place a customer's address is sent, other than the lookup providers named below, is Shopify's own cart, so that the checkout opens with what they already typed. It is not written to our database in plain form at any point: what we keep is a one-way hash, which can confirm that a checkout address matches the one that was quoted, and can tell us we have looked an address up before, but cannot be turned back into an address.
Sub-processors
| Provider | Purpose | Location |
|---|---|---|
| Google Cloud Run | Application hosting | Sydney, Australia |
| Supabase (AWS) | Application database | Sydney, Australia |
| Google Maps Platform | Address geocoding | Global |
| Shopify | Carrying the customer's chosen method and address into their own checkout | Global |
| Cloudflare | Development tunnelling only | Global |
Addresses sent for geocoding are cached so the same address is not sent repeatedly.
Security
- All data is encrypted in transit (TLS) and at rest.
- Backups are encrypted by the database provider.
- Every table denies access by default; the database is reachable only by the app's server-side connection, never from a browser.
- Access to customer data through the app's admin is recorded in an audit log.
- Test and production data are held in separate database projects.
Data subject requests
Shopify's compliance webhooks are implemented:
customers/data_request: we return the booking data held for the named orderscustomers/redact: personal data on those bookings is clearedshop/redact: all data for the shop is deleted
Merchants or customers may also contact succiinc@proton.me.
Changes
Material changes will be notified to merchants through the app listing before taking effect.