Makr3D Shopify app: data handling

Who operates the app and in what role

The app is operated by Yorkshire3D Limited, trading as Makr3D, registered in England and Wales under company number 15466679.

For buyer and recipient data you route to Makr3D for fulfilment, you are normally the data controller and Makr3D acts as your processor under our Data Processing Addendum, which forms part of our Terms of Service.

Makr3D is a separate controller for your own merchant account, billing, fraud prevention, platform security, support, tax and accounting records.

Shopify access requested

Installing the app grants exactly the following OAuth scopes, and no others:

• read_orders
• read_products
• read_locations
• write_inventory
• write_fulfillments
• read_assigned_fulfillment_orders
• write_assigned_fulfillment_orders

They are used as follows:

• Orders: to read the order behind a fulfilment order assigned to Makr3D — its payment status, currency and delivery address — so we only ever produce paid orders and post them to the right place.
• Products: to list your products and variants so you can map the ones you want Makr3D to make.
• Locations: to create and identify the Makr3D fulfilment location in your store, and to recognise the fulfilment orders routed to it.
• Inventory: used for one purpose only — writing the Makr3D unit production cost into the Cost per item field of the variants you map, so your Shopify profit reporting is accurate. We never change your stock quantities.
• Assigned fulfilment orders: to receive, accept, reject and update only the fulfilment orders routed to the Makr3D location. We cannot see or act on fulfilment orders assigned anywhere else.
• Fulfilments: to register Makr3D as a fulfilment service and, after dispatch, to create the fulfilment carrying the carrier, tracking number and tracking URL.

Order and customer data used

For a fulfilment order assigned to Makr3D, we process:

• shop, order and fulfilment-order identifiers, the order number, and its payment and fulfilment status;
• mapped product and variant identifiers, SKU, quantity, and any personalisation or variant options needed to make the item;
• the recipient’s name and delivery address, because the parcel is physically addressed to them;
• the recipient’s phone number, where the selected carrier, a customs process or a delivery exception requires it — used to resolve a failed or undeliverable delivery, and required by customs on international shipments;
• the recipient’s email address, which is passed to the carrier with the shipping label. The carrier uses it to send delivery and delivery-confirmation notices, to arrange redelivery when a delivery is missed, and to contact the recipient about customs clearance on international shipments. It also lets you reconcile a Makr3D order against your Shopify order when answering a buyer’s query;
• carrier, parcel and tracking information, and fulfilment, remake and claim records.

Makr3D never emails buyers directly, never markets to them, and never builds a profile of them. Their email address leaves our systems only to the carrier delivering that specific parcel.

We do not access your customer list, payment card details, themes or online-store content. Buyer names, addresses, phone numbers and email addresses are excluded from our analytics, advertising and error-reporting payloads, and are never used to train AI models.

Please do not put unnecessary sensitive or special-category personal data into personalisation fields, order notes or fulfilment instructions.

Who we share it with

Shopify data is shared only with the providers needed to run the service and deliver the parcel: our application, database and encrypted storage providers; our label provider and the selected postal or parcel carrier; customs providers where required; and professional advisers or authorities where we are legally required to disclose. Current providers and their locations are listed on our Subprocessor List.

We never sell your data or your buyers’ data. Our payment processor handles your Makr3D billing only; it does not receive buyer delivery data because an order was fulfilled.

How long we keep it

We keep personal data only as long as it is needed. Keeping a buyer’s full delivery details for as long as we keep an accounting record would be longer than necessary, so the two are separated:

• Shopify access and refresh tokens: only while the store is connected. Deleted on uninstall, revocation or disconnection.
• Store settings and product mappings: while the connection is active, then deleted within 30 days of a shop-redaction request.
• Recipient phone number: deleted no later than 30 days after confirmed delivery, unless an active delivery issue or carrier claim needs it.
• Recipient name, delivery address and email: deleted or irreversibly anonymised 180 days after dispatch, unless an active dispute, remake, carrier claim or legal hold needs them.
• Production and accounting records: up to six years where required for tax, audit or legal purposes, with direct buyer identifiers removed where they are not needed for that purpose.
• Security and access logs: normally up to 12 months.
• Encrypted backups: expire on a documented rolling lifecycle and are used only for disaster recovery.

A valid customer-redaction request overrides this schedule, except for the minimum we must retain under a specific legal obligation. Anything retained that way is restricted from normal operational use.

Uninstalling, and Shopify privacy requests

When you uninstall the app, Makr3D immediately stops receiving new data from your store and deletes the stored Shopify credentials for it.

We implement Shopify’s three mandatory privacy webhooks — customer data request, customer redaction and shop redaction. Shopify sends the shop-redaction request automatically 48 hours after an app is uninstalled; it is not something you need to request. Every delivery is verified against Shopify’s signature before it is acted on.

For a customer data request we identify what we hold against the identifiers Shopify supplies and return it to you. For a customer or shop redaction we delete or irreversibly anonymise the matching data within 30 days, keeping only what a specific legal obligation requires. We never erase more than Shopify identifies.

Security

• Protected customer data is encrypted in transit and at rest.
• Shopify access and refresh tokens are encrypted with AES-256-GCM and rotated; they are never written to logs.
• Staff access to buyer personal data is least-privilege and authenticated, and is removed when it is no longer needed.
• Incoming Shopify webhooks are signature-verified before they are acted on, and embedded app requests are verified with a fresh Shopify session token on every call.
• Buyer personal data is excluded from our analytics, advertising and error-reporting payloads.

No connected service can remove every risk, but we review these controls regularly and keep access to protected data limited to the people and systems that need it.

Billing

The Makr3D Shopify app is free to install. Charges for manufacturing, packing and shipping physical products are physical-order charges, collected by Makr3D through Stripe, a PCI-compliant payment provider. You are charged when Makr3D takes on your fulfilment request, immediately before we accept it in Shopify.

Any future subscription, software or premium-feature charge for the app itself would be billed through Shopify’s Billing API, not through Stripe.

Contact

Privacy and data requests: privacy@makr3d.app. General support: support@makr3d.app. See also our Privacy Policy, Data Processing Addendum, Terms of Service and Subprocessor List.