Address Guard is a Shopify app built and operated by BurTech Solution (“we”). It checks the shipping address on a store’s orders against Canada Post data, holds orders that will not deliver, and asks the customer to confirm or correct the address. This policy explains what the app reads, what it writes, and what it keeps. The general Privacy Policy covers this website.
What the app reads
When a store installs Address Guard, it receives order webhooks from Shopify. For each order it reads the shipping address, the order number, the customer’s email address (to send the confirmation message) and, once the order ships, the tracking number.
Where the results live
Everything the app concludes about an order is written back to that order in the store’s own Shopify account:
- the verdict, the evidence returned by Canada Post, and the history of messages sent or suppressed, as an order metafield;
- one status tag on the order (for example an address review, hold, fixed or confirmed state) that the store’s own automations can use;
- a parcel state once tracking is available.
There is no second copy of a customer’s address anywhere else. The store controls this data through Shopify, and uninstalling the app leaves it in place for the store to keep or remove.
What the app keeps in its own database
The app’s database holds only what it needs to operate for the store:
- the store’s Shopify session, required to call the Shopify API;
- the store’s settings;
- a cache of Canada Post building data (whether a building has units and how many), keyed by building, not by customer;
- the schedule for polling parcel tracking;
- an audit log of the actions the app took on each order, referenced by order number.
None of these tables contain a customer’s name, email address or full shipping address.
Canada Post lookups
To validate an address the app sends the address elements from the order to Canada Post’s address services and receives the matching building and unit information. Canada Post processes those requests under its own terms and privacy policy.
Customer emails
Confirmation messages are sent through Shopify’s own transactional email system using the store’s notification templates, so they arrive from the store, not from BurTech. The confirmation link the customer receives is signed and expires; it does not contain the address itself.
Data requests and deletion
The app implements Shopify’s mandatory privacy webhooks. When a store or a customer asks Shopify for their data, or asks for it to be deleted, the app responds automatically: it reports what it holds for that store (settings, audit entries and cached building data, none of which is personal data) and removes the store’s records when the store is redacted.
Contact
Questions about this policy: [email protected].