Privacy policy

Highlands & Islands Shipping is a Shopify app made by Web Optic Limited, Stoke-on-Trent, United Kingdom. Last updated 10 September 2026.

What the app does

It lets a store decide which of its existing shipping rates are shown to customers in different UK postcode areas. It does not create prices, contact carriers or communicate with customers.

Data we store about the store

• The store's myshopify.com domain and an access token so the app can update the store's checkout rules.
• The postcode zones and rules the merchant sets up.
• Whether the store is a development store, to decide if the subscription applies.

Data we store about customers

When an order is placed, Shopify sends the app an order webhook. From it we keep only:

• the order number and time,
• the outward part of the shipping postcode (for example IV21, never the full postcode or address),
• the country code, and
• the name and price of the shipping rate chosen.

This lets the merchant see which zone applied to each order and whether the chosen rate matched their rules. We do not store customer names, emails, phone numbers, street addresses, payment details or order contents. Entries are deleted after 60 days.

Why we process it

Solely to provide the app's functionality to the merchant. We do not use the data for analytics across stores, marketing, profiling or automated decisions about individuals, and we never sell or share it.

Where it lives

Servers and database are hosted with DigitalOcean in London, United Kingdom. Data is encrypted in transit (TLS) and at rest, including backups. Access is limited to Web Optic staff who maintain the app, using key-based authentication and two-factor accounts.

Deletion

Uninstalling the app removes its access immediately; the store's rules and log are deleted within 48 hours of Shopify's shop redaction request. Customer redaction requests from Shopify delete the log entries for that customer's orders. Merchants can also ask us to delete everything at any time.

Your rights

Merchants act as data controller for their customers' data; Web Optic Limited is a processor. Customers should contact the store they bought from. Anyone can contact us about this policy at support@weboptic.com.