Privacy policy
Last updated October 4, 2026
Mint Team Order is a Shopify app made by Mint Labs ("we", "us"). It lets a merchant's customers run a group order: an organiser starts a team order on the merchant's product page and shares a link, members add their size and personalisation on the merchant's store, and the organiser checks out once for everyone (or, if the merchant allows it, every member checks out on their own). This policy explains what the app handles about merchants and about the people who use the team pages, why, and when it's deleted. For the data of the merchant's customers we act as a service provider (processor) to the merchant, who is the controller.
The short version
- No accounts. The app never reads or stores Shopify customer records (names, email addresses, phone numbers or addresses).
- It stores what people type on the team pages: the team order's name, the organiser's first name, and for each member their first name, the personalisation fields the merchant set up (for example a name and number to print) and the options they chose.
- Everything about a team order is deleted 60 days after it closes.
- An organiser may give an email address for reminders (only on stores where the merchant turned reminders on, and only with a consent box they tick). It's used for at most three emails about that team order and deleted when the team order closes.
- Visitors' IP addresses are never stored: rate limits use a keyed one-way hash, kept for at most an hour.
- We never sell or share data, use it for advertising, or combine it across stores. The app sets no cookies.
Information about merchants
| Information | Why |
|---|---|
| Store domain and a Shopify access token | To check products, read product titles, options and SKUs, manage the team discount and receive paid-order notifications. |
| Store name, Shopify store ID, time zone, the store's contact email, app installation ID | Closing dates are days in the store's time zone; reminder emails show the store's name and use its contact email as the reply-to address. |
| Settings: eligible products and collections, team order limits, personalisation fields, texts, colours, discount tiers, reminder options | To run the team pages the way the merchant set them up. |
| Plan (Free, Pro or Plus) and its dates | Read from Shopify to decide which features apply. Payments are handled entirely by Shopify. |
| Monthly counts (team orders started, members, items, orders) and when the product block and team pages were last used | The numbers on the app home and the setup checklist. |
Information about organisers and members
| Information | How it's used | Kept |
|---|---|---|
| Team order: its name, the organiser's first name (optional), closing date, who pays, the chosen products, whether names are shown | Shown on the team page and the organiser's page; the name goes onto each item as a line item property. | 60 days after the team order closes |
| Each member's entry: first name, personalisation (as defined by the merchant, e.g. a name and number to print), chosen products, options and quantities | Shown to the organiser and the merchant (members see only first names, and only if the organiser allows it). Copied onto the items in the cart as line item properties, so they reach the order. | 60 days after the team order closes |
| Private links: the organiser's manage link and each member's change-my-entry link | They work like keys. We store only a one-way SHA-256 hash of each, never the link itself. | With the team order |
| Organiser's email address (optional; Pro and Plus stores with reminders on; only with explicit consent) | Up to three emails about this team order: its links, a reminder before the closing date, and a note when it closes. Each has a link that stops them. | Deleted with the closing email, at the latest 3 days after the team order closes |
| Paid orders containing team order items: the Shopify order ID and order number, matched by line item properties | To mark which members have paid (each-pays) and which team orders were ordered. The notification the app subscribes to contains only the order ID, number and items — no customer fields. | With the team order |
| Rate-limit counters keyed by a keyed one-way hash of the visitor's IP address (never the address itself) | To stop automated sign-ups and guessing. | Up to 1 hour |
What people type is never written to logs. Shopify's own emails (order confirmation and so on) are sent by Shopify from the store as usual.
Customer privacy requests
- Access requests (Shopify's
customers/data_request): the app home shows the request and the merchant downloads, as a file, the team order entries linked to the listed orders, to send to the customer. - Erasure requests (
customers/redact): the entries linked to the listed orders are anonymised (first name and personalisation removed) and the link to those orders is deleted. - Store deletion (
shop/redact, sent 48 hours after a merchant uninstalls): we permanently delete everything we hold for the store. - Organisers and members can also remove their own entry or team order while it's open, using their private link.
Where data is processed and how it's protected
The app runs on Cloudflare (hosting, database and email sending) and connects to Shopify's APIs. Data is encrypted in transit (TLS) and at rest. Access is limited to Mint Labs staff who need it to provide support. We use no other sub-processors, analytics or trackers. See our security policy.
Retention
Team orders and their entries are deleted 60 days after they close; organiser email addresses when the team order closes; rate-limit counters within an hour. Access tokens are deleted as soon as the app is uninstalled, and everything else when Shopify sends the store deletion request 48 hours later. Settings are kept while the app is installed.
Your rights
Depending on where you are, you may have the right to access, correct or delete information about you. Merchants can contact us directly; organisers and members should contact the store, or email us and we'll pass the request on. We respond within 30 days.
Changes
If we change this policy we'll update the date above and, for significant changes, notify merchants in the app.
Contact
Mint Labs — support@stickermint.com