Privacy Policy
Last updated: 6th January, 2026
Split2Ship (“Split2Ship”, “we”, “our”, or “us”) provides a Shopify application that enables merchants to collect a partial payment upfront and the remaining balance via Cash on Delivery (“COD”), along with customer verification and checkout optimization features (the “App”).
This Privacy Policy describes how personal data is processed in connection with the App.
1. Roles & Data Ownership
- Merchants are the Data Controllers of all customer personal data processed through the App.
- Split2Ship acts solely as a Data Processor, processing data strictly on merchant instructions.
- Split2Ship does not determine the purpose or means of customer data collection.
Merchants remain fully responsible for compliance with all applicable data protection and consumer laws.
2. Data We Process
2.1 Merchant Data
We may collect and process:
- Store name, store URL, and Shopify identifiers
- Merchant contact details
- App configuration and usage logs
2.2 Customer Data (Processed on Merchant’s Behalf)
Depending on merchant configuration, the App may process:
- Phone number (for OTP-based verification)
- Shipping address (for address auto-fill)
- Name and order identifiers
- Partial payment, COD balance, and verification metadata
Split2Ship does not independently collect customer data and does not use customer data outside App functionality.
3. Purpose of Processing
Data is processed exclusively to:
- Enable partial payment and COD flows
- Verify customer phone numbers via OTP
- Pre-fill addresses to reduce checkout friction
- Reduce fake or high-risk COD orders
- Maintain audit logs and operational integrity
- Comply with legal obligations
Split2Ship does not use customer data for advertising or resale.
4. OTP, SMS & Third-Party Dependencies
The App relies on third-party services including:
- SMS and OTP providers
- Shopify APIs
- Infrastructure and hosting providers
Important disclaimers:
- OTP delivery is not guaranteed
- Delays, failures, or non-delivery may occur
- Telecom, network, or provider outages are outside our control
OTP verification is a risk-reduction tool, not a guarantee of order authenticity or delivery success.
5. Merchant Obligations (Critical)
Merchants are solely responsible for:
- Deciding when partial payment or COD is shown
- Configuring rules, thresholds, exclusions, and conditions
- Clearly communicating payment structure to customers
- Obtaining lawful customer consent where required
- Managing refunds, disputes, cancellations, and chargebacks
- Consequences arising from misconfiguration or misuse
Split2Ship does not validate merchant business practices or customer communications.
6. Data Storage & Security
We apply reasonable administrative, technical, and organizational safeguards, including:
- Encrypted data transmission
- Access controls and internal restrictions
- Secure hosting environments
Data is retained only for as long as required to provide the App or meet legal obligations.
7. Data Sharing
Data may be shared:
- With sub-processors strictly necessary to operate the App
- To comply with lawful government or regulatory requests
- In connection with a corporate transaction (merger, acquisition, asset sale)
We do not permit sub-processors to use data for independent purposes.
8. GDPR (EEA Users)
For customers in the EEA:Merchants act as Data Controllers
- Split2Ship acts as a Data Processor
Split2Ship supports controller obligations relating to:
- Data access, correction, and deletion
- Data portability where applicable
- Security incident notifications
All processing occurs on documented merchant instructions.
9. India DPDP Act, 2023
For customers in India:
- Personal data is processed in accordance with the Digital Personal Data Protection Act, 2023
- Split2Ship processes data only for specified, lawful purposes
- Merchants are responsible for consent collection and customer notices
10. Availability, Downtime & Feature Changes
- The App is provided on an “as is” and “as available” basis
- No uptime or availability guarantees are provided
- Features may be modified, suspended, or discontinued without notice
- Dependency failures (SMS, OTP, Shopify APIs) may impact functionality
Merchants must not rely on the App as their sole checkout, fraud, or verification system.
11. International Data Transfers
Data may be processed or stored outside the merchant’s jurisdiction. Appropriate safeguards are applied where required by law.
12. Children’s Data
The App is not intended for individuals under 18 years of age. We do not knowingly process children’s data.
13. Policy Updates
This Privacy Policy may be updated periodically. Continued use of the App after updates constitutes acceptance of the revised policy.
14. Contact
For privacy-related inquiries:
Email: support@split2ship.comCompany: Split2ShipWebsite: www.split2ship.com