Customs Ready privacy policy

Last updated 21 October 2026

Customs Ready is a Shopify app made by Worklea Services ("we", "us"). It scans a store's products for variants that are missing an HS code, a country of origin or a weight, and lets the merchant fill them in, in bulk. This policy explains what data the app uses when a store installs it, why, and what happens to that data.

Our terms of service include a data processing agreement that sets out how we handle this data on your behalf.

Data the app accesses

When a merchant installs Customs Ready, Shopify lets the app read the following through Shopify's API:

Products and collections: product and variant titles, SKUs, vendors, product types, which collections products are in, and whether each variant requires shipping, so the app can list and filter the variants that need customs data.
Inventory items: each variant's HS code, country of origin and weight, so the app can find what's missing and, when the merchant confirms a fix, update those three fields.
Store information: the store's myshopify.com address and whether it is a development store, to connect the app to the right store and handle billing.

Customs Ready does not request or read customers' names, email addresses, phone numbers or shipping addresses.

Data the app stores

Access credentials: the store's address and the access token Shopify issues to the app, so the app can act on the store's behalf. These are kept in our database.
Latest scan results: for each variant that ships, its product and variant title, SKU, vendor, product type, collections, HS code, country of origin and weight, as of the latest scan. Each new scan replaces the previous one. These are kept in our database so the merchant can filter and fix them quickly.
Change history: for every value the app changes, the variant's name, the field, the old and new value, and when it was changed. This lets the merchant undo a batch of changes and lets the app count the Free plan's monthly fixes. It is kept in our database.
Server logs: technical logs that may include the store address, kept for troubleshooting.

Only the product data listed above is copied into our database. Orders, customers, prices, stock levels and product descriptions are not read or stored.

How we use data

Only to provide the app: to show which variants are missing customs data, to apply the fixes the merchant confirms, to undo them on request, and to count fixes for the Free plan's monthly limit. We do not sell data, use it for advertising, or share it with third parties, except the services we need to run the app:

Shopify, which provides the store data and handles billing for paid plans.
Our hosting provider, whose servers run the app and store the data described above.

Payments

Paid plans are charged by Shopify on the merchant's Shopify invoice. We never see or store card details.

Retention and deletion

When a store uninstalls Customs Ready, its access credentials, scan results and change history are deleted from our database.
When Shopify asks us to delete a store's data, which it does 48 hours after uninstall, we delete anything remaining for that store.
Requests from Shopify to delete or report data about a specific customer are answered promptly. Since the app doesn't store customers' personal information, there is normally nothing to delete or report.
Server logs are capped in size and the oldest entries are deleted automatically.

Security

The app is served only over HTTPS. Requests from Shopify are checked to confirm they really come from Shopify. Access credentials are encrypted (AES-256) before they are stored, on a server with restricted access.

Your rights

Merchants and their customers can ask what data we hold about them, and ask us to correct or delete it, by emailing support@worklea.org. Customers of a store may also contact the store directly.

Changes

If we change how the app uses data, we'll update this page and the date at the top.

Contact

Worklea Services, support@worklea.org