Dostly Terms of Service

Effective from 19 October 2026

1. Provider

Dostly is provided by Marek Pluta, sole trader registered in CEIDG, Tax ID (NIP) 6772488720, ul. Zamknięta 10 lok. 1.5, 30-554 Kraków, hello@marekpluta.com. These terms govern the use of the app by Shopify merchants (Art. 8 of the Polish Act on Providing Services by Electronic Means).

2. The service

Dostly lets buyers choose a parcel locker or pickup point (in the cart, before checkout, after payment and, on the Pro plan, as a checkout rate), saves the choice on the order and lets the merchant create shipments on its own carrier account. Optionally, it sends the buyer one reminder to choose a point and passes the point to Base. Current features and plan prices are listed in the Shopify App Store.

You need a Shopify store and an up-to-date browser; points as checkout rates require the Pro plan and carrier-calculated shipping in Shopify, and creating shipments requires your own carrier account. The app adds a theme extension for choosing a point, a post-purchase block, order admin extensions, a function matching delivery methods to the choice, on the Pro plan a carrier service, and order attributes, a note and tags with the point, and uses them only for the described features. Supplying unlawful content to the app is prohibited. The main risk is someone taking over your Shopify login or keys entered in the app, e.g. through phishing: enter them only in the app's admin, I never ask for them by email.

By turning on reminders, the merchant instructs and authorises me to send, on its behalf, one email to the buyer of each order that has no pickup point chosen, with the store's name as the sender and the store's address for replies. I do not contact buyers for any other purpose.

3. Agreement and fees

The app is intended only for businesses, and by installing it the merchant declares that it acts in the course of its business. The agreement is concluded when the app is installed. By installing or using the app, the merchant accepts these terms, including the data processing agreement in section 6. The merchant may terminate it at any time by uninstalling the app; I may terminate it with 14 days' notice, or immediately if the merchant seriously breaches these terms. Shopify charges the fees under its own rules, and no fees accrue after uninstalling. The merchant pays carriers for shipments under its own agreement.

4. Liability

I am solely responsible for the app. Shopify is not a party to this agreement, is not liable for any fault in the app or any harm that may result from its installation or use, and cannot provide assistance with installing or using the app unless Shopify expressly states otherwise. Any liability that may arise from the merchant's access to or use of the app, including its development, use, marketing, distribution, access and support, and my access to, use, distribution or storage of store and customer data, rests solely with me, and not with Shopify, on the terms and within the limits set out below.

I take care to keep the app working, but I do not guarantee continuous availability and I am not responsible for Shopify, carriers or Base, for parcel delivery or for pickup point lists provided by carriers. My liability to the merchant is limited to actual loss and to the app fee for the last billing period, except for intentional damage and where the law prohibits such a limit. The merchant is responsible for its store settings and shipping rates and checks the shipment data and cash on delivery amount before creating a shipment. To the extent permitted by law, the merchant indemnifies me against third-party claims, including buyers' claims, and reimburses my documented costs, including legal costs and administrative fines, incurred as a result of its use of the app in breach of the law or of these terms, in particular a lack of legal basis for the processing or failure to inform buyers.

5. Complaints

I accept complaints at hello@marekpluta.com and reply within 30 days.

6. Data processing agreement

This section is a data processing agreement under Art. 28(3) GDPR. The merchant is the controller of the data of its buyers and store visitors and entrusts me with processing it. Purpose: finding and saving a pickup point, creating a shipment on the merchant's carrier account, reminding the buyer to choose a point and passing the point to Base. Nature: reading, saving and transferring data within the features the merchant turns on. Types of data: the buyer's name, delivery address, phone and email, postal code, optionally the device location, the chosen point, order number and cash on delivery amount; details in the privacy policy. Duration: for as long as the app is used. I am the processor and I:

• process the data only on the merchant's documented instructions, which are the installation, settings and actions in the app, including the transfer to a third country described in the policy; I immediately inform the merchant of an instruction that I believe infringes the law, and if EU or Polish law requires other processing from me, I inform the merchant before it starts unless that law prohibits it;
• give access to the data only to persons bound by confidentiality and apply the measures of Art. 32 GDPR: encrypted connections, encryption of stored keys to carrier and Base accounts, encrypted backups, and server login with keys only, no passwords;
• use the sub-processors listed in the privacy policy (OVHcloud and Cloudflare), which the merchant authorises; I bind them by the same obligations and am fully liable for them, inform the merchant of an intended change at least 14 days before it takes effect, and the merchant may object by terminating the agreement; carriers and Base, to which I send data on the merchant's instructions, and the map provider, from which the buyer's browser loads the map directly, are not my sub-processors;
• assist the merchant with buyers' rights and with the obligations of Art. 32 to 36 GDPR, taking into account the nature of the processing and the information available to me;
• notify the merchant of a personal data breach without undue delay, within 72 hours of becoming aware of it at the latest;
• delete the data within 30 days after the agreement ends at the latest, unless the law requires keeping it, and if the merchant chooses return before uninstalling, provide a copy of it; backups expire within 16 days at the latest, and buyer data remains in Shopify anyway;
• make available the information needed to demonstrate compliance and allow the merchant or an auditor it mandates to carry out audits, including inspections, at an agreed date, at most once a year and at the merchant's cost, except after a personal data breach or at the request of a supervisory authority.

The merchant gives instructions and has the rights set out in this section, and is responsible for the legal basis of the processing and for informing buyers.

7. Changes and final provisions

I notify merchants of changes to these terms at least 7 days in advance; a merchant who does not accept a change may uninstall the app. The agreement is governed by Polish law, and disputes are resolved by the court competent for the provider's place of residence. The English version is a translation; the Polish version prevails in case of discrepancy.