App privacy policy

Dolphinland 360 S.L., located at C. Parranda de los Buches, 18, Local 3, 35500 Arrecife, Las Palmas, España, provides Product Options for Shopify and is responsible for the personal data it processes for its own business purposes. The Shopify merchant remains responsible for the buyer and order data processed through the merchant's store.

Privacy questions and rights requests can be sent to support@dolphinland.org.

The app uses only the data needed to install, authenticate and provide product-option functionality.

• Store and installation data: Shopify store domain and identifiers, installed scopes, app status and subscription entitlement.
• Merchant user session data: Shopify user identifier and, when included in the authenticated session, name, email address, locale and account-role information.
• Product data: product identifiers, titles, images and the custom-option configuration selected by the merchant.
• Reusable templates and app settings created by the merchant inside Shopify.
• Technical data: request metadata, security events and error logs needed to operate and protect the service.
• Support data: contact details, store information and message content that a merchant voluntarily sends to support.

The current app configuration does not request Shopify customer or order API scopes. Product choices entered by a buyer are added to Shopify as line-item properties so that Shopify and the merchant can carry them through the cart and order workflow. Dolphinland 360 does not copy those buyer selections into its own application database.

The merchant determines why buyer data is collected and how long order records are retained. Buyers should direct requests about an order to the merchant first. Shopify may also process the information under its own terms and privacy notices.

We process data to authenticate the installed store, show and save product-option settings, provide templates, maintain cart and price-adjustment integrity where eligible, determine feature access, deliver support, prevent abuse, diagnose errors and comply with legal obligations.

We do not sell personal data, use it for third-party advertising or perform profiling or solely automated decisions that produce legal or similarly significant effects on an individual.

For merchants and their authorized users, processing is necessary to provide the requested app service and take steps connected with the subscription agreement. Security, service reliability and product improvement rely on our legitimate interests where those interests do not override individual rights. Legal obligations apply where records must be retained or disclosed by law. Support communications may also rely on consent or requested pre-contractual steps, depending on their subject.

Where Dolphinland 360 processes buyer information solely to provide the app functionality selected by a merchant, it does so on the merchant's instructions and the merchant is responsible for establishing the appropriate legal basis and notices for its customers.

Data is disclosed only when needed to operate the service, follow the merchant's instructions, comply with law, protect rights and security, or complete a business transaction subject to appropriate safeguards.

• Shopify provides the commerce platform, authentication, app APIs, billing and merchant data storage.
• Render hosts the application runtime and can process request and operational log data.
• Neon provides the PostgreSQL database used for authenticated app sessions.
• Resend delivers support and website contact emails when a merchant contacts us.

Some providers can process data outside Spain or the European Economic Area. Where data-protection law requires it, transfers are handled through an adequacy decision or contractual and organizational safeguards such as the European Commission's Standard Contractual Clauses. Information about a provider's locations and safeguards is available in that provider's privacy and data-processing documentation.

Application sessions are kept while needed to maintain the installation and are deleted from Dolphinland 360's database after an authenticated uninstall or Shopify shop-redaction request. Limited security logs and support correspondence can be retained for the period reasonably needed to resolve incidents, answer the request, establish legal claims or meet legal obligations.

Per-product option configuration is stored in the merchant-owned custom.product_options product metafield in Shopify and can remain under the merchant's control after uninstall. Reusable templates are stored as app-owned Shopify metaobjects and may be removed under Shopify's app-owned data lifecycle. Buyer line-item properties remain in Shopify according to the merchant's and Shopify's order-retention settings.

Depending on the law that applies, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. Send a request to support@dolphinland.org. We may ask for information needed to verify identity and the store concerned.

You can also lodge a complaint with the Spanish Data Protection Agency (AEPD) or the competent authority where you live or work. If the request concerns information held in a Shopify merchant's order, contact that merchant first.

We apply access controls, authenticated Shopify sessions, encrypted transport, restricted credentials and signed validation for eligible price adjustments. No system can guarantee absolute security. If an incident creates a legal notification duty, affected parties and authorities will be notified as required.

The app is a business tool for Shopify merchants and is not directed to children. Merchants should not configure free-text options to collect unnecessary sensitive information or personal data from children.

This policy may be updated when the app, providers or legal requirements change. Material changes will be reflected by updating the date on this page. Contact support@dolphinland.org or write to C. Parranda de los Buches, 18, Local 3, 35500 Arrecife, Las Palmas, España.