Introduction
WD: COD Form & Upsells is a Shopify app that lets merchants take cash-on-delivery orders from a single form on their storefront. This Privacy Policy outlines how we collect, use, store, and protect data when merchants and their shoppers use our App.
Information We Collect
Unlike a reporting tool, this App exists to create orders, so it necessarily handles shopper details. We collect:
- Order details typed into the form — name, phone number, address, city, optional postal code, the chosen shipping option, and the marketing opt-in if the shopper ticks it.
- Fraud-prevention signals — email address, phone number and IP address, used to recognise a returning customer within the time window you set.
- Store configuration — your shop domain, form settings, shipping options, fraud rules and the message shown to a blocked shopper.
- Order records — the Shopify order ID, order total, payment status and fulfilment status of orders created by the App.
We do not collect or store payment card details. Cash-on-delivery orders are paid on delivery, so no card data ever reaches the App.
How We Use the Information
We use the data we collect for the purpose of:
- Creating the order in your Shopify store
- Applying the fraud rules you have configured, before the order is created
- Showing you the analytics dashboard — COD orders, revenue, items sold, shipping charged, and orders blocked by each rule
- Providing support when you contact us
We do not sell, rent, or share merchant or shopper data with any third party, and we do not use it to build advertising profiles.
IP Addresses
If you enable IP-address matching, the App compares the shopper's IP address against recent orders to decide whether to apply your time limit. Please note that shoppers on mobile data or shared office wifi often share one IP address, so this setting can affect people who are unconnected to each other. Enable it deliberately, and tell your customers if your local law requires it.
Data Security
Store credentials and settings are stored securely using encryption, and data is transmitted over HTTPS. We employ industry-standard security measures to protect your data from unauthorized access.
Data Retention & Deletion
When you uninstall the App, we permanently delete all data associated with your store, including form settings, fraud rules, order records held by the App and any stored shopper details. We retain no backup copies after uninstallation. Orders the App created remain in your Shopify store, under Shopify's own retention and your control. Retention may be longer if required by law or to establish or defend legal claims.
Your Responsibilities
As a merchant, you are responsible for:
- Informing your customers what the order form collects and why, as required by applicable law
- Keeping your own privacy policy accurate once the App is live on your storefront
- Choosing fraud rules that suit your market, including whether to match on IP address
- Controlling who has access to your Shopify admin and the App's settings
Changes to This Policy
We may update this Privacy Policy occasionally. Any changes will be reflected with an updated date at the top. Continued use of the App after changes constitutes your acceptance.
Contact Us
If you have questions or concerns about this Privacy Policy, contact us at: