Last updated: 20 September 2026
Holdfast Order Limits & MOQ (“the app”) is provided by Tungomedia, J. Grootendorststraat 22, 5321EX, Hedel, The Netherlands. This policy explains what the app stores, why, and for how long.
The app stores almost nothing. Your order limit rules are saved inside your own Shopify store, not on our servers. We keep only what is needed to connect the app to your store. We do not store your customers’ personal data, and we do not sell or share data with anyone for advertising.
Your store’s address and access token. When you install the app, Shopify gives us a token that lets the app act on your behalf. We store this together with your .myshopify.com domain. Without it the app cannot load. This is the only data we keep on our own infrastructure.
If you create a rule that applies only to customers with a particular tag, then when a customer reaches the checkout, Shopify’s validation function checks whether that customer carries the tag you named.
This check happens inside Shopify’s own infrastructure, as part of processing the checkout. The function receives only whether the tag is present — true or false — and uses the answer to decide whether the rule applies. Nothing is written down, sent anywhere, or retained. The function has no network access and no storage of its own.
If you never create a rule based on customer tags, this check does not happen at all.
We process your store’s domain and access token to perform the contract between us: you install the app so that it can manage your order limits, and it cannot do that without them. Under the GDPR this is Article 6(1)(b).
For merchants in the EU and the UK, you are the data controller for your store’s data and we act as your processor.
We use no analytics, advertising or tracking services in the app, and we do not sell data to anyone.
Your store’s domain and access token are deleted when you uninstall the app. Shopify notifies us of the uninstall and the record is removed. Shopify also sends a follow-up deletion request 48 hours after an uninstall, which we honour as a second pass.
Your rules stay in your own store, in the metafield they were saved to, as your data. Removing the app removes them along with it, which is why the app offers a CSV export on every plan.
You can ask us what we hold about your store, ask for it to be corrected, or ask for it to be deleted. Uninstalling the app does the last one automatically. To ask anything else, write to support@tungomedia.nl and we will reply within two working days.
If you are in the EU or the UK and are not satisfied with our answer, you can complain to your national data protection authority. In the Netherlands this is the Autoriteit Persoonsgegevens.
If one of your customers asks you what data this app holds about them, the answer is none. If you receive a formal data request or deletion request, Shopify forwards it to us automatically and we confirm that we hold nothing for that customer.
If this policy changes in a way that affects what we store or why, we will update the date at the top of this page and say what changed on the app’s App Store listing. We cannot email you about it: as described above, we do not hold your email address.
Tungomedia
J. Grootendorststraat 22, 5321EX, Hedel
support@tungomedia.nl