Privacy policy

Operator details (company name, registration number, registered address) will be added here before launch: [to be completed].

Who we are

DepositKit (“we”) provides software that adds drink container deposits to online store orders. It is available as an app for Shopify and, later, as plugins for other e-commerce platforms. This policy covers the DepositKit software and this website. Contact: support@depositkit.eu.

Our role

For the information about merchants described below, we act as the controller: we decide why and how it is used, namely to run the service. We do not process personal data of our merchants' customers. If that ever changes, we will act as a processor on the merchant's instructions under a data processing agreement, which we will provide on request.

What we store

• For each store that installs DepositKit: the store domain, the app settings (enabled countries, amounts, language), the identifiers of the deposit product and its variants, and the access credentials the platform issues to the app (with their granted permissions and expiry).
• For plan limits: for each month, the number of orders that contain a deposit line. We keep the order identifier only to avoid counting the same order twice.
• Messages you send us by email, so we can answer them.

The Shopify app does not use staff (online) sessions, so it does not store staff names or emails.

What we do not store

We do not store or request customer names, email addresses, phone numbers, postal addresses or payment details. DepositKit does not need customer data to work. Requests from a platform for customer data access or erasure are answered with “no customer data held”.

How data is used and shared

Data is used only to run the service: to add deposits at checkout, to show the admin pages and to apply plan limits. Our legal basis is performance of our contract with the merchant and our legitimate interest in operating a secure service. We do not sell data. We share it only with the infrastructure providers that host the service (the application and database hosting, and the web hosting for this website) and with the platform you install the app on.

This website

This website does not use cookies, analytics, advertising trackers or external fonts and scripts, so there is no cookie banner. Our web host may keep standard server logs (such as IP address and time of request) for security and operation. There are no forms on the site; if you email us we use your address to reply.

Retention and deletion

When you uninstall DepositKit we delete the store's settings and access credentials. Usage counts are kept until the platform's shop data erasure request (on Shopify, 48 hours after uninstall), when we delete everything that is left. Emails are kept as long as needed to handle your request and then deleted.

International transfers

Our application is hosted in the European Union (Stockholm, Sweden). Where a provider processes data outside the EEA, we rely on appropriate safeguards such as standard contractual clauses.

Your rights

Under the GDPR you may ask for access to, correction or deletion of data we hold about you, object to or restrict its use, and complain to a supervisory authority (in Latvia, the Data State Inspectorate, dvi.gov.lv). Write to support@depositkit.eu.

Changes

We will update this page when our practices change and show the date at the top.