Wiggle Room Privacy Policy
Last updated: October 11, 2026
Wiggle Room: Order Editing ("Wiggle Room" or "the app") is provided by Duskford Digital, a trade name of SAB Ventures LLC ("we", "us"), 30 N Gould St, STE R, Sheridan, WY 82801, USA. You can contact us at support@duskforddigital.com.
This policy explains what personal information the app processes when a Shopify merchant installs it, and when that merchant's customers use it to change their orders.
Our role
- Merchant information: we decide how it is used.
- Information about the merchant's customers: we process it on the merchant's behalf, only to provide the app. The merchant controls it. Customers with questions about their data should contact the store first. We help the store respond.
What we collect
From merchants, when the app is installed
- Store details from Shopify: the store's domain, time zone and currency.
- Access credentials: the access credentials Shopify issues so the app can work with the store.
- App settings: the edit window, which changes are allowed, refund preferences, and the store's plan.
About the merchant's customers, when they change an order
When a customer signs in to the store's customer account and chooses Edit order, the app reads that order from Shopify to check what can be changed. For each change, we keep a record of:
- who and which order: the customer's and the order's Shopify IDs, and the order number;
- what changed: the shipping address before and after (name, company, address and phone), the items and quantities before and after, amounts charged or refunded, and the refund reference;
- when the change was made.
We do not collect or store payment card details. Payments, invoices and refunds are handled by Shopify and the store's payment provider.
How we use it
- To let customers make the changes the merchant allows, and to apply those changes in Shopify.
- To show customers the exact charge or refund before they confirm, and to create invoices or refunds through Shopify.
- To keep a record of each edit for the merchant: a staff note, tags and, where needed, a line in the order note in Shopify, plus our edit records.
- If the merchant has turned automatic refunds off, to pass a customer's cancellation request to the merchant (as a tag and a line in the order note) instead of cancelling.
- To apply the merchant's plan limits. Plans are billed by Shopify.
- To provide support, keep the app secure, and meet legal obligations.
We do not sell personal information. We do not use it for advertising. We do not make automated decisions about anyone that have legal or similarly significant effects.
Who we share it with
We share information only with the service providers needed to run the app, and only for that purpose:
- Shopify: the platform the app runs on, and billing.
- Vercel: application hosting.
- Neon: database hosting.
We may also disclose information when the law requires it, or as part of a merger or sale of the business. In that case the commitments in this policy continue to apply.
Where it is stored
Information is stored with our providers in the United States. Where data from the EU, the UK or elsewhere is transferred to the US, we rely on appropriate safeguards, such as our providers' standard contractual clauses.
How long we keep it
- Customer edit records are kept while the app is installed, so the merchant can see each order's edit history. Shipping address details in edit records are deleted after 90 days; the rest of the record (what kind of change, amounts and dates) stays. They are deleted:
- when Shopify tells us a customer's data must be deleted (a customer redaction request);
- when the store's data is deleted after the app is uninstalled, about 48 hours after uninstall.
- Merchant information is kept while the app is installed and deleted when the store's data is deleted after uninstall.
Security
We protect the information we hold:
- encryption in transit (HTTPS) and at rest, including backups;
- access to production systems limited to the owner, with strong, unique passwords and two-factor authentication;
- any direct access to production data is logged, and the log is reviewed monthly;
- a written security incident response process.
Your rights
- Merchants can ask to access, correct, export or delete their information by emailing support@duskforddigital.com.
- Customers should contact the store. The store can send us their request through Shopify. When it does, the merchant can view and copy that customer's edit records on the app's Customer data requests page, and we will help the store respond within the time the law requires.
- Depending on where you live (for example under the GDPR, the UK GDPR or California law), you may have rights to:
- access, correct and delete your information;
- object to or restrict processing;
- data portability;
- not be discriminated against for using these rights. We do not sell or share personal information for cross-context behavioral advertising.
Children
The app is not directed to children under 16, and we do not knowingly collect their information.
Changes
If this policy changes, we will update the date above. If the change is significant, we will tell merchants by email or in the app.
Contact
Duskford Digital (SAB Ventures LLC), 30 N Gould St, STE R, Sheridan, WY 82801, USA. support@duskforddigital.com