Legal
The Dress Rental App Privacy Policy
Last updated: 29 July 2026
This policy applies to merchants who use The Dress Rental App (the "App") on Shopify, and to the customer data the App processes on their behalf for rental bookings, try-on appointments and related features. The App is provided by Dress Hire Websites.
Information we collect
From Shopify
- Store domain and identifiers
- Order data related to rentals
- Customer name, email, phone and address
- Product, variant and inventory data
- Webhook events
From merchants
- Store name, logo and business details
- Booking and delivery rules
- Pricing and insurance settings
- Manual bookings and staff notes
- Try-on configuration
From customers, through storefront and booking flows
- Name, email and phone
- Delivery and billing address
- Instagram handle
- Booking notes
- Booking and appointment dates
- Identification images, when the merchant enables this
Technical information
- App usage and configuration events
- Server and error logs
- Webhook payloads
- Support communications
How we use information
- Create and manage rental bookings and try-on appointments
- Sync with Shopify orders and refunds
- Manage delivery, return and booking workflows
- Calculate availability and inventory
- Send booking communications
- Provide support and troubleshoot problems
- Comply with legal obligations
The App does not sell customer personal data, use it for cross-context behavioural advertising, or use personal data to profile or score customers.
Data retention
| Data | Retained for |
|---|---|
| Staged bookings and ID uploads that were never completed | 48 hours |
| ID uploads for completed bookings | 30 days after the rental ends |
| Personal fields on completed, cancelled or refunded bookings | 730 days after the rental ends |
| Personal fields on past try-on appointments | 180 days after the appointment |
| Access audit logs | 400 days |
Customer data is redacted when Shopify sends a customer-redaction request, and store data is deleted when Shopify sends a shop-erasure request after the App is uninstalled. The App may keep non-identifying operational and financial booking records after personal fields have been redacted.
Security
- HTTPS/TLS encryption in transit
- AES-256 encryption at rest for the database
- Need-to-know internal access
- Strong authentication and multi-factor requirements
- Logging of protected-data access (without recording customer field values)
- Automated retention and environment-separation controls
- Handling of Shopify privacy compliance webhooks
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Service providers
- Render: application hosting and managed PostgreSQL database
- Resend: delivery of booking and notification emails
International transfers
Our service providers and infrastructure may process data in countries other than the merchant's or customer's country, including the United States.
Your rights
Depending on applicable law, individuals may request access to, correction of, or deletion of their personal data, or object to its processing. Customers of Shopify stores can make requests through Shopify's processes; the App is configured to respond to Shopify privacy compliance webhooks.
Merchant responsibilities
Merchants are responsible for having a lawful basis to collect customer data, giving customers any required notices and obtaining consents, configuring the App in a compliant way, and publishing their own privacy policy and customer terms.
Children's privacy
The App is intended for business use by merchants. We do not knowingly design the App to collect personal data directly from children.
Contact
Questions about this policy: dresshirewebsites@gmail.com