Terms of service — PickPick Pickup & Payments
Last updated: 2026-10-15
These terms apply to every Shopify store (“merchant”, “you”) that installs PickPick Pickup & Payments (“the app”). By installing or using the app you accept them, including the data processing agreement in section “Data processing agreement”.
Who provides the app
The app is provided by OWM (OUX Works Merchandising B.V., Dutch Chamber of Commerce (KvK) number 98654896, VAT number NL868586584B01, Rijder 1B10, 1507 DP Zaandam, Netherlands) (“we”, “us”). Contact: support@pickpick.nl.
The service
- Pickup points from MyParcel (PostNL, bpost, DPD) offered as shipping rates through a Shopify carrier service, using your own MyParcel account and API key.
- The chosen pickup point and, once fulfilled, the tracking number written onto the order as note attributes, and shown in thank-you and order status blocks.
- Rules to rename, hide or reorder payment methods at checkout, and an optional reordering of shipping options.
We may change or improve the app. The app depends on Shopify, MyParcel and the carriers; when they change or are unavailable, parts of the app may stop working. If pickup points cannot be loaded, the app returns no pickup rates and your regular shipping rates keep working.
Your responsibilities
- You need a MyParcel account and accept MyParcel’s and the carriers’ own terms; shipments and labels are created outside the app.
- If you enter a Google Maps API key, you are responsible for that key and Google’s terms.
- You check that the shipping rates, pickup points and payment rules shown at checkout are correct for your store.
- You inform your buyers in your own privacy policy that pickup points are looked up through MyParcel (and that a map from Google is shown, if enabled).
- You keep your Shopify and MyParcel credentials secret.
Fees
The app is free of charge. We charge no fees for it, through Shopify or otherwise.
If we introduce paid features later, we announce them in advance, and they apply only if you choose them yourself, for example by approving the charge in Shopify. We never start billing you automatically.
Costs of MyParcel, the carriers, Google (for your Google Maps key) and Shopify itself are between you and those parties.
Warranty and liability
The app is a free service, provided “as is” and “as available”. We do our best to keep it available and correct, but give no warranty that it works without interruption or errors, or that it is fit for your purpose.
As far as the law permits, we are not liable for any damage arising from or related to the app or its use, including in any case: lost sales, turnover or profit; errors or outages at MyParcel or the carriers; wrong or unavailable pickup points; problems with the delivery or collection of shipments; incorrect data from third parties such as Shopify, MyParcel, the carriers or Google; and indirect or consequential damage.
This exclusion does not apply to damage caused by intent or deliberate recklessness of our management, nor to liability that mandatory law does not allow to be excluded or limited.
You indemnify us against claims of third parties, including your buyers, that arise from your use of the app in breach of these terms or of the law. This does not apply to the extent the claim is caused by our intent or deliberate recklessness.
Term and termination
You can stop using the app at any time by uninstalling it. We delete your data as described in the data processing agreement below. We may suspend the app for a store that misuses it or breaches these terms.
Changes to these terms
We announce material changes to merchants before they take effect. Continuing to use the app after that date means you accept the new terms.
Governing law and disputes
These terms and the use of the app are governed by Dutch law. Disputes are submitted to the competent court in the district where we are established, the District Court of North Holland (Rechtbank Noord-Holland), unless mandatory law designates another court.
Data processing agreement
This section is the agreement under article 28 of the General Data Protection Regulation (GDPR) between you (controller) and OWM (processor). It applies to the personal data we process for you through the app.
| Item | Agreement |
|---|---|
| Subject and purpose | Looking up carrier pickup points near a buyer’s shipping address, writing the chosen pickup point and tracking data onto your Shopify orders, and applying your payment rules at checkout. |
| Data subjects | Your buyers (customers at checkout). |
| Categories of personal data | Country, postcode and house number of the checkout shipping address (processed in memory, sent to MyParcel, not stored). Order ID and tracking number/URL (read from Shopify and written back onto the order, not stored by us; the order status page shows the tracking number as a barcode that the app generates itself, without storing the number). The distance between that address and the pickup points offered (stored encrypted, not linked to a buyer or an order, deleted after 180 days). No special categories of data. |
| Duration | As long as the app is installed, plus the deletion period below. |
| Instructions | We process the data only on your documented instructions, which are these terms and the settings you choose in the app, unless EU or member-state law requires otherwise; we tell you if we believe an instruction breaks the law. |
| Confidentiality | Everyone who can access the data is bound to confidentiality. |
| Security (art. 32) | HTTPS for all traffic; AES-256-GCM encryption at rest of access tokens, API keys, the per-store rate-request token and stored pickup data with a key kept outside the database; Shopify webhook signatures verified; a per-store secret on rate requests; server access limited to the operator; no buyer data stored. |
| Sub-processors | You authorise these sub-processors: Hetzner Online GmbH (hosting, Germany), MyParcel (pickup point lookups, the Netherlands) and Google (Maps Static API, only if you enter a Google Maps key). We tell you before adding or replacing a sub-processor, so you can object, and we bind each one to obligations equivalent to these. |
| Transfers outside the EEA | Hosting and MyParcel are in the EU. Google may process data outside the EEA under its own transfer safeguards. |
| Assistance | We help you respond to data subject requests, with security, breach notifications, data protection impact assessments and prior consultations, as far as the nature of the processing allows. Buyer requests reach us through Shopify’s customers/data_request and customers/redact webhooks; since we store no data about individual buyers, there is normally nothing to return or erase. |
| Personal data breaches | We notify you without undue delay after becoming aware of a breach that affects your data, with the information you need to meet your own obligations. |
| End of processing | When you uninstall the app, we delete your access tokens at once and all other data within about 48 hours, when Shopify sends the shop/redact request. The only copies are database copies we make on the same server before an update; they are deleted automatically after 14 days, so your data is gone from them at the latest 14 days after it is deleted from the database. Server logs hold no buyer data (see the privacy policy). We keep nothing longer unless the law requires it. |
| Audits | We make available the information needed to show compliance with article 28 and allow and contribute to reasonable audits, on request to support@pickpick.nl. |
The privacy policy at https://app.pickpick.nl/privacy lists exactly what the app stores and processes.
Contact
OWM (OUX Works Merchandising B.V., Dutch Chamber of Commerce (KvK) number 98654896, VAT number NL868586584B01, Rijder 1B10, 1507 DP Zaandam, Netherlands) — support@pickpick.nl