Privacy policy

Ironbark Checkout Rules · Last updated 20 September 2026

The short version

Ironbark Checkout Rules does not collect, receive or store any personal information about your customers. It stores the rules you configure and the credentials needed to talk to your store, and nothing else.

What the app stores

What the app does not store

The rules are enforced by Shopify Functions, which run inside Shopify’s own checkout rather than on our servers. At checkout a Function is given the delivery address’s country, state or territory, and postcode, the available shipping rates and payment methods, and the cart total, so it can decide what to show.

That data never leaves Shopify. We do not receive it, log it, transmit it or keep it. Nothing about it is retained once the rate list has been filtered. The app does not request access to customer names, email addresses, phone numbers, street addresses, orders or payment details, and it holds no Protected Customer Data approval because it needs none.

Privacy requests

The app answers Shopify’s mandatory privacy webhooks. Because it holds no customer personal data, a customer data request returns nothing and a customer redaction request has nothing to erase. A shop redaction request deletes your store’s stored credentials.

If you uninstall the app, your credentials are deleted. Rules you created remain in your own shop’s metafields, under your control, and stop being applied because the Functions are uninstalled with the app.

Third parties

The app sends no data to any third party. There is no analytics, no tracking, no advertising and no external API beyond Shopify’s own.

Contact

Questions about this policy, or about what the app does with anything: ziondiorsm@gmail.com.