Privacy Policy
ParkCart for Shopify POS. Last updated: 4 September 2026.
ParkCart is provided by RVDH Interim Management B.V., established in Veenendaal, the Netherlands. It lets staff park a cart at the till and retrieve it later. Parking a cart means saving what was in it — and, when your staff attach one, which customer it belongs to. This policy is explicit about that, because unlike our other Shopify apps, ParkCart does hold personal data about your customers.
You are the controller of this data; we process it for you. The customer details in a parked cart come from your own Shopify store, are stored so your staff can find the cart again, and are erased on your instruction or on Shopify's.
1. What the app reads from your store
- Products and variants — titles, SKUs and prices — so a parked cart can show what was in it. Permission:
read_products. - Customers, when your staff attach one to a cart: the customer's Shopify id, name and email address. Permission:
read_customers. - The till location and the staff member who parked the cart, so a colleague can see who parked it and where.
- For the person signed in to the admin part of the app: name, email address and locale, supplied by Shopify with the session.
The app requests no access to orders or payment details, and never sees a card number.
2. What is stored, and why
| Stored | Why |
|---|---|
| Store domain and access token | To call the Shopify API on your behalf |
| The parked cart: label, optional note, reason for parking, status, till location, staff member, currency, subtotal and total, and a snapshot of the cart's contents | This is the cart itself — without it there is nothing to retrieve |
| Cart lines: product and variant, title, SKU, quantity and price | To rebuild the cart exactly as it was |
| Customer id, name and email address — only when staff attach a customer | So staff can find the cart by customer, and so a restock notice can reach the right person |
| Shop settings: retention period, the list of parking reasons, and whether the badge and restock email are on | Your own configuration |
| Installation record: plan, subscription id and install date | To apply the plan you are on. Deleted when you uninstall. |
3. How long a parked cart is kept
Every parked cart is given an expiry date when it is created. The period is a setting in the app — 30 days by default — and you can shorten or lengthen it. Expired carts are cleaned up automatically; you do not have to remember.
Everything else is kept while the app is installed. The app deletes it as soon as you uninstall, and again when Shopify sends its shop/redact request 48 hours later: all parked carts, restock watches, settings, sessions and the installation record itself. Nothing is left that names your shop.
One record outlives that deletion, and it identifies no shop. To measure how many stores get past setup, the app keeps a row holding only the dates it was installed, first opened, first configured, last used and uninstalled, keyed by a one-way hash (HMAC-SHA256) of your shop domain computed with a secret only this app holds. It contains no domain, no name and no address, it cannot be turned back into your shop without that secret, and it is never shared. It is deliberately not deleted: a record erased along with the shop would remove exactly the stores that left, which is what the measurement is for.
4. When a customer asks to be erased
Shopify forwards those requests to the app, and it acts on them rather than acknowledging them:
- Access request (
customers/data_request) — the app reports how many parked carts reference that customer, so the request can actually be answered. - Erasure (
customers/redact) — the customer's id, name and email address are removed from every parked cart of yours that references them, the free-text note is cleared, the cart is relabelled, and the stored cart snapshot and line properties are stripped of anything identifying. The cart's commercial record — what was in it, for how much — remains, with no person attached to it.
5. Who else sees it
Shopify only — as the source of the product and customer data, under your own agreement with Shopify. The app sends your data to no other party. Nothing is sold, rented or used for advertising.
6. Where it is stored
In a PostgreSQL database on a server in the European Union, not shared with any other party. Traffic to the app runs over HTTPS.
7. Your rights, and your customers'
You can ask what is held, ask for it to be corrected, or ask for it to be deleted — uninstalling the app triggers deletion automatically. Your customers' requests are best made through you or through Shopify, so they arrive over the webhook route described in section 4 and are handled on the record rather than by hand. For anything else, write to info@getcompliant.nl and you will get an answer within two business days.
8. Changes to this policy
If this policy changes, the date at the top changes with it. Material changes will be announced in the app before they take effect.