Privacy Policy

1. Who we are

Returns Clerk is published by The Frolic App Pty Ltd (ABN 61 697 066 265), trading as Adderley Data, of Melbourne, Victoria, Australia. In this policy, ‘we’ and ‘us’ mean Adderley Data.

Returns Clerk is a returns portal for online stores built on Wix Stores. A store’s shoppers send return requests through a form on the store’s site, and the store owner approves, declines and refunds them in the Wix dashboard.

This policy covers the data Returns Clerk handles for the stores that install it, the email people send us, and these web pages.

2. Who decides what happens to the data

For shopper data in a store’s collections, the store owner decides what happens to it, and Returns Clerk processes it on the owner’s behalf. In privacy-law terms, the store is the controller and we are its processor.

We process that data only to the extent required to run the app. We never use it for marketing or for any purpose of our own.

If you are a shopper with a question about your return request or your data, contact the store you bought from. We will help the store answer.

For email you send us, and for these web pages, we decide what happens to the data.

3. What is collected

Return requests

When a shopper sends a return request, Returns Clerk adds an item to the store’s Return requests collection. Each item holds the fields below, named as they appear in the store’s CMS.

A return request holds no shopper name, email address, phone number or postal address, and no card or bank details. Wix also keeps its own system fields on every item, such as the item’s id and when it was created and last updated.

Order lookup attempts

Each time the returns form looks up an order, including when a request is sent, Returns Clerk adds three items to the store’s Order lookup attempts collection, one for each key below. If the lookup succeeds, it removes them straight away. If it fails, they stay and count towards the lookup limit.

The hashes are pseudonymous, not secret. Anyone who can read the collection and knows the salt could test guesses, for example by hashing an email address they already know and looking for a match.

Items more than 24 hours old are deleted by the app the next time the returns form is used.

What the app reads from Wix without keeping it

• When a shopper looks up an order: the order with the number entered, to compare the email address used at checkout and to list the items.
• When the store owner refunds a request: the order’s currency, what can still be refunded on it, its payment records (to check how it was paid), and Wix’s calculation of the refund.
• The store’s plan for the app, to apply its monthly allowance of requests; and, on the Returns page, the list of Wix apps on the site, to check that Wix Stores is installed.

What goes back to the shopper’s browser: the order number and the date it was placed; each item’s name, options and quantity, how many can still be returned, and Wix’s id for its order line; whether the store can take a new request; and the requests on that order, each with when it was made, its items, quantities and reasons, the shopper’s note, its status and the store’s note. No address, email address, phone number or payment details are sent to the browser.

Email to us

When you email apps@adderleydata.com, our email provider, Resend, receives and stores the message, with your email address and anything you include. We use it to answer you.

These web pages

These pages are hosted by Vercel. Vercel’s standard server logs may record your IP address, for security. The pages set no cookies, run no scripts and load nothing from any other site: the typeface is served from this site.

Nothing from the app or these pages is sent to an analytics service.

4. Permissions the app asks for

When a store owner installs Returns Clerk, Wix shows these permissions on a consent screen:

• Read basic information about the site: its name, language, currency and installed Wix apps. Returns Clerk uses this to read the store’s plan for the app and to check that Wix Stores is installed.
• Read orders: to find the order a shopper looks up, and to read an order’s payment records before a refund.
• Manage orders: to calculate and issue refunds, and to put refunded items back in stock.

If a later version needs another permission, Wix asks the store owner to approve it before it applies to their site.

5. How it is processed

Returns Clerk uses the data above only to run returns for the store that installed it:

• to find a shopper’s order, and show it only when the order number and the email address used at checkout both match;
• to record the shopper’s request, and show its status and the store’s note when the shopper looks up the order again;
• to show requests to the store owner on the Returns page, and record the owner’s decisions;
• to calculate refunds and send them to Wix on the owner’s instruction, then check that Wix recorded them;
• to refuse lookups after 5 failures in 15 minutes for the same order number, email address or visitor, until the 15 minutes have passed;
• to count the store’s requests each month against its plan’s allowance.

The app never holds or moves money. Wix’s payment systems move it, on the store owner’s instruction.

We don’t sell this data, use it for marketing or advertising, or combine it across stores.

6. Where it is stored, and for how long

Store data stays on the store’s own Wix site, in the two CMS collections described above. Wix creates them for the app when it is installed or updated, on sites that have the Wix CMS.

The app’s code runs on Wix’s own hosting. We run no database and keep no copy of store, order or shopper data anywhere else. The app writes no personal data to logs.

• Return requests stay in the store’s collection until the store owner deletes them. Section 9 covers uninstalling.
• Lookup attempts are removed straight away when a lookup succeeds. Those from failed lookups are deleted once they are more than 24 hours old, the next time the returns form is used.
• Email to us is kept in our Resend inbox while we need it to support you, and deleted once a support matter has been closed for two years. Ask us at any time to delete yours sooner.
• Vercel keeps its server logs for these pages under its own retention settings.

7. How it is secured

• Both collections are admin-only: every read and write of their items is limited to the site’s administrators. Shoppers never read them directly. The returns form goes through the app’s server code on Wix, which checks each request before it reads or writes anything.
• The form only answers requests that carry a valid Wix session for the store’s site. It shows an order only when the order number and the checkout email both match, and gives the same answer to a wrong number and a wrong email.
• Failed lookups are limited as described in section 5.
• Lookup records hold hashes, not the order numbers, email addresses or visitor ids themselves. The hashes are pseudonymous, not secret.
• Actions on the Returns page run with the store owner’s own Wix sign-in, so Wix checks their permissions.
• We run no external database, keep no copy of store data, and write no personal data to logs.

If we become aware of a breach affecting store data, we will notify Wix within 24 hours, as Wix’s developer terms require, and the affected store owners without undue delay.

8. Who it is disclosed to

We use three service providers, and no others:

• Wix, which hosts the app and the store data and handles billing;
• Resend, which receives and stores email sent to apps@adderleydata.com;
• Vercel, which hosts these three pages.

We give the data to no one else, unless the law requires us to. Wix bills store owners for paid plans, and we never receive card or bank details.

Wix, Resend and Vercel are based outside Australia, so data they hold may be stored overseas.

9. Your controls

Store owners

• See every request on the Returns page, and the items in both collections in the site’s CMS.
• Delete a request by deleting its item in the CMS. The support page explains how to do it safely.
• Uninstall the app. When it is uninstalled, Wix’s rules for app collections apply to its collections and their items. To be sure the items are gone, delete them in the CMS before you uninstall.
• Review the app’s permissions before installing, and approve any new one before it applies to the site.
• Ask us for help with a shopper’s request about their data, at apps@adderleydata.com.

Shoppers

• Contact the store you bought from about your return request or your data. The store decides what happens to it, and we help the store answer.

Anyone who emails us

• Ask us at apps@adderleydata.com what we hold about you, or to correct or delete it.

10. How we notify changes

When we change this policy, the effective date at the top changes. We announce material changes on this page and by email to stores that have contacted us. We keep no mailing list of the stores that use the app, so we can’t email every store.

If a change to the app needs a new permission, Wix asks each store owner to approve it before it applies to their site.

Changes so far

• 19 October 2026: first version.

11. Contact

Email apps@adderleydata.com. We aim to answer within one business day, Melbourne time.

The Frolic App Pty Ltd, ABN 61 697 066 265, trading as Adderley Data. Melbourne, Victoria, Australia.