Privacy policy.
How Retailer Limits uses information to provide purchasing restrictions and related functionality.
Last updated: 21 October 2026
Who operates the app
Retailer Limits is a Shopify application published by No Time To Sleep. For privacy enquiries, use our contact page.
Information processed
For the initial order-limits functionality, the app accesses Shopify shop identifiers, merchant-configured rules, product and variant identifiers, quantities and product weights. The checkout validation Function evaluates cart information provided by Shopify to apply the merchant's configured limits.
Some technical information, such as session credentials, request metadata and application error logs, may be processed to operate, secure and troubleshoot the service. Shopify app permissions and the data processed may change if additional features are enabled in future versions; this policy must be updated before those features are released.
Purposes and legal basis
Information is used to provide merchant-requested purchase restrictions, authenticate app installations, troubleshoot errors, maintain security and comply with applicable legal obligations. Where UK data protection law applies, the relevant lawful basis depends on the processing activity, including contractual necessity, legitimate interests or legal obligations as applicable.
Service providers and transfers
Retailer Limits communicates with Shopify and uses hosting and infrastructure providers to operate the application. These providers may process technical information on our behalf. The applicable providers, locations and transfer safeguards should be documented and kept under review.
Retention and deletion
App configuration, technical logs and installation data should be retained only for as long as reasonably necessary for the purposes described above and applicable legal obligations. Specific retention schedules and deletion processes are subject to implementation and verification before wider production release. Merchants and customers can contact us about applicable access or deletion requests using the contact page above.
Security
We aim to use appropriate technical and organisational safeguards, including restricted access and encrypted connections. No online service can guarantee absolute security. Security controls, including encryption of stored data, should be verified as part of production readiness.
Merchant responsibilities
Merchants remain responsible for their own customer-facing privacy notices and lawful operation of their Shopify stores. This policy covers Retailer Limits rather than the merchant's separate processing activities.
Updates
We may update this policy when features, service providers or legal requirements change. The updated date will be shown on this page.