Privacy Policy
Last updated: 2026-10-05
Data controller: INTROY LTD (company no. 16708956)
Suite 9839, 5 Brayford Square, London, United Kingdom, E1 0SG
Contact: info@cod-ship.com
This policy explains how Codship processes personal data belonging to the customers of the merchants who install it. A Turkish version is also available.
1. What the app does
The app lets Shopify merchants take cash-on-delivery orders directly from the product page. The customer enters a name, phone number and address without going through checkout, and the order is created in the merchant’s own Shopify account.
2. What we process, and why
| Data | Purpose | Retention |
|---|---|---|
| Full name | Creating and delivering the order | 24 months |
| Phone number | Delivery contact, sending a verification code | 24 months |
| Delivery address | Delivering the order | 24 months |
| Email (optional) | Order notifications | 24 months |
| Order contents and totals | Creating the order, reporting to the merchant | 24 months |
| Order outcome (delivered / refused) | Fraud detection | 24 months |
| IP address, user agent | Bot and fraud detection | 90 days |
| Time taken to fill the form | Bot detection | 90 days |
What we never process: card details, bank details, national identity numbers. Cash on delivery involves no payment data at all.
Retention is enforced automatically: IP address and user agent are erased from the record after 90 days, and the order record is deleted entirely after 24 months. If a merchant uninstalls the app, that merchant’s records are deleted sooner.
3. Legal basis
- Performance of a contract — name, phone and address are necessary to create and deliver the order.
- Legitimate interest — preventing fraudulent orders and refused deliveries. GDPR Recital 47 expressly recognises fraud prevention as a legitimate interest.
4. The shared fraud network
The app has an optional feature: merchants can share a signal about phone numbers that refused a cash-on-delivery parcel. The feature is off by default and only operates if the merchant explicitly turns it on.
What enters the network:
- An irreversible hash of the phone number (HMAC-SHA256)
- Counters: how many separate stores, how many refusals
What never enters the network:
- The phone number itself
- Name, address, email
- Order contents or totals
- Which store the refusal happened in
Other merchants cannot see anyone’s identity; they only receive a “this hash is risky” signal. A hashed number is not anonymous but pseudonymous data, and it is protected as personal data under this policy. A merchant who contributes nothing to the network receives nothing from it.
To object to a record or ask for its erasure, use the data request form.
5. Who we share with
- Shopify — the platform the order is created on.
- The merchant’s own SMS provider — to send a verification code, and only if the merchant connected one. The merchant chooses the provider; we do not resell SMS.
- Other merchants in the network — the signal in section 4, nothing else.
We do not sell data, we do not share it for advertising, and we do not use it to train AI models.
6. Storage and security
Data is stored on servers inside the European Union: the application and the database are hosted in Amsterdam, the Netherlands.
- Encryption in transit and at rest
- Encrypted backups
- Staging and production data kept in separate environments
- Staff access kept to a minimum and logged
- Merchant SMS provider credentials are encrypted with AES-256-GCM
7. Your rights
Anyone whose personal data we process may request:
- A copy of the data held about them
- Correction of inaccurate data
- Erasure of their data
- To object to the processing
- Erasure of their record in the shared fraud network
Use the data request form or the email address above. Contacting the store you ordered from is equally valid; the merchant passes the request on to us.
When Shopify sends a customer redaction request, all of that person’s records — including their record in the shared network — are deleted automatically.
8. Changes
If this policy changes, the date above changes and merchants are notified inside the app.