Privacy information
Privacy Policy
This policy explains how Netminds Order Tracking processes personal data when merchants install the app and when customers use its order tracking form.
Last updated: 1 October 2026
1. Provider and contact details
Netminds Order Tracking is provided by NETMINDS Soc. Coop. di Prod. e Lavoro, Via A. Pecchia 153, 80022 Arzano (NA), Italy, VAT number IT07670761217 ("Netminds", "we", "us").
Privacy enquiries can be sent to info@netminds.it.
2. Roles and scope
The Shopify merchant generally determines why and how customer order data is processed and acts as data controller. Netminds generally processes that data on the merchant's behalf to provide the app. For data used to operate, secure and support the service, Netminds may act as an independent controller where required by applicable law.
This policy applies to the Netminds Order Tracking app and its order lookup service. A merchant's own privacy policy continues to apply to the merchant's storefront and commercial relationship with customers.
3. Data we process
| Category | Examples | Source |
|---|---|---|
| Order lookup data | Order number or confirmation code and checkout email | Entered by the customer |
| Order information | Order date, payment, fulfilment and shipment status, carrier, tracking number and tracking link | Shopify APIs |
| Merchant and installation data | Store domain, granted permissions, app session and authentication credentials, and limited merchant account data supplied by Shopify | Merchant and Shopify |
| Security and technical data | Hashed network identifier, request path, response status, timestamp and diagnostic information | Generated when the service is used |
The app does not request customer names, postal addresses or telephone numbers for order lookup. It does not use customer data for advertising, profiling or sale.
4. How and why we use data
- Verify that the order reference and email match an order.
- Display the order, payment, fulfilment and shipment status.
- Authenticate merchants and maintain the Shopify integration.
- Prevent abuse, enforce request limits and protect the service.
- Diagnose errors, maintain availability and provide support.
- Meet legal obligations and respond to valid legal requests.
Depending on the context, processing is necessary to perform the service agreement, pursue legitimate interests in operating and securing the service, comply with legal obligations, or act on the merchant's documented instructions.
5. Storage and retention
- Order references, customer emails and order results are processed in memory for the duration of the request and are not stored in the app database.
- Rate-limit records contain a one-way hash derived from the store and network address, not the plain network address. Expired records are removed during subsequent maintenance cycles.
- Installation and session records are retained while the app is installed or as needed to provide the service, and are deleted after uninstall or a valid shop-erasure request, subject to legal obligations.
- Protected-data access logs contain the store domain, action, outcome and timestamp, but no customer identifier or order reference. They are retained for 90 days. Other technical logs are retained for limited operational and security periods and do not intentionally include order form contents or URL query strings.
6. Recipients and service providers
Data may be disclosed only as necessary to:
- the Shopify merchant that installed the app;
- Shopify, which supplies the commerce platform and APIs;
- Contabo, which supplies hosting infrastructure;
- authorised Netminds personnel and professional advisers subject to confidentiality obligations; and
- public authorities when disclosure is legally required.
We do not sell personal data. A current list of subprocessors can be requested using the contact details above.
7. International transfers
Data may be processed where Netminds, Shopify and their service providers operate. Where personal data is transferred outside the European Economic Area, appropriate safeguards required by applicable law are used, such as adequacy decisions or standard contractual clauses where relevant.
8. Security
We use measures designed to protect personal data, including encrypted HTTPS connections, access controls, environment separation, restricted database access, data minimisation, request limiting and logs that omit order lookup contents. No security measure can eliminate every risk.
9. Privacy rights and requests
Depending on applicable law, individuals may have rights to access, correct, erase, restrict or object to processing, receive a portable copy of their data, and complain to a supervisory authority.
Customers should normally contact the merchant from which they placed the order. Merchants can contact Netminds at info@netminds.it. We also respond to Shopify's mandatory customer-data and shop-erasure requests.
10. Children
The app is a business service for Shopify merchants and is not directed to children. We do not knowingly collect children's data for separate purposes through the app.
11. Changes to this policy
We may update this policy to reflect changes to the app, our providers or applicable requirements. The updated version and effective date will be published on this page.