---
title: Policy
description: Retrieve a list of a shop's policies, such as their refund policy, privacy policy, or terms of service.
api_version: 2025-10
api_name: admin-rest
api_type: rest
source_url:
  html: https://shopify.dev/docs/api/admin-rest/latest/resources/policy
  md: https://shopify.dev/docs/api/admin-rest/latest/resources/policy.md
---

![](https://shopify.dev/images/logos/GraphQL.svg)![](https://shopify.dev/images/logos/GraphQL-dark.svg)

The REST Admin API is a legacy API as of October 1, 2024. Starting April 1, 2025, all new public apps must be built exclusively with the [GraphQL Admin API](https://shopify.dev/docs/api/admin-graphql). For details and migration steps, visit our [migration guide](https://shopify.dev/docs/apps/build/graphql/migrate).

# Policy

You can use the Policy resource to access the policies that a merchant has configured for their shop, such as their refund and privacy policies.

Only the shop owner can edit this information from the Shopify admin. The Policy resource lets you only retrieve information about a shop's policies.

\#

## Endpoints

* [get](https://shopify.dev/docs/api/admin-rest/latest/resources/policy#get-policies)

  [/admin/api/latest/policies.​json](https://shopify.dev/docs/api/admin-rest/latest/resources/policy#get-policies)

  Retrieves a list of the shop's policies

  [![](https://shopify.dev/images/logos/GraphQL.svg)![](https://shopify.dev/images/logos/GraphQL-dark.svg)](https://shopify.dev/docs/api/admin-graphql/latest/queries/shop?example=retrieves-a-list-of-the-shops-policies)

  [shop](https://shopify.dev/docs/api/admin-graphql/latest/queries/shop?example=retrieves-a-list-of-the-shops-policies)

***

## The Policy resource

### Properties

***

title

->

[![](https://shopify.dev/images/logos/GraphQL.svg)![](https://shopify.dev/images/logos/GraphQL-dark.svg)](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.title)

[title](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.title)

The name of the policy.

***

body

->

[![](https://shopify.dev/images/logos/GraphQL.svg)![](https://shopify.dev/images/logos/GraphQL-dark.svg)](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.body)

[body](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.body)

A description of the policy.

***

url

->

[![](https://shopify.dev/images/logos/GraphQL.svg)![](https://shopify.dev/images/logos/GraphQL-dark.svg)](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.url)

[url](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.url)

The public URL of the policy.

***

created\_at

->

[![](https://shopify.dev/images/logos/GraphQL.svg)![](https://shopify.dev/images/logos/GraphQL-dark.svg)](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.createdAt)

[createdAt](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.createdAt)

The date and time ([ISO 8601 format](https://en.wikipedia.org/wiki/ISO_8601)) when the policy was created.

***

updated\_at

->

[![](https://shopify.dev/images/logos/GraphQL.svg)![](https://shopify.dev/images/logos/GraphQL-dark.svg)](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.updatedAt)

[updatedAt](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.updatedAt)

The date and time ([ISO 8601 format](https://en.wikipedia.org/wiki/ISO_8601)) when the policy was last modified.

***

handle

->

[![](https://shopify.dev/images/logos/GraphQL.svg)![](https://shopify.dev/images/logos/GraphQL-dark.svg)](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.type)

[type](https://shopify.dev/docs/api/admin-graphql/latest/objects/ShopPolicy#field-ShopPolicy.fields.type)

A unique identifer for the policy used to build the policy's URL.

***

{}

## The Policy resource

```json
{
  "title": {
    "title": "Refund Policy"
  },
  "body": {
    "body": "You have 30 days to get a refund"
  },
  "url": {
    "url": "https://jsmith.myshopify.com/548380009/policies/878590288"
  },
  "created_at": {
    "created_at": "2012-02-15T15:12:21-05:00"
  },
  "updated_at": {
    "updated_at": "2012-08-24T14:01:47-04:00"
  },
  "handle": {
    "handle": "terms-of-service"
  }
}
```

***

## getRetrieves a list of the shop's policies

[![](https://shopify.dev/images/logos/GraphQL.svg)![](https://shopify.dev/images/logos/GraphQL-dark.svg)](https://shopify.dev/docs/api/admin-graphql/latest/queries/shop?example=retrieves-a-list-of-the-shops-policies)

[shop](https://shopify.dev/docs/api/admin-graphql/latest/queries/shop?example=retrieves-a-list-of-the-shops-policies)

Retrieves a list of the shop's policies

### Parameters

***

api\_version

string

required

***

### Examples

Retrieve a list of the shop's policies

get

## /admin/api/2025-10/policies.​json

```bash
curl -X GET "https://your-development-store.myshopify.com/admin/api/2025-10/policies.json" \
-H "X-Shopify-Access-Token: {access_token}"
```

{}

## Response

JSON

```json
HTTP/1.1 200 OK
{
  "policies": [
    {
      "body": "You have 30 days to get a refund",
      "created_at": "2025-10-01T14:57:28-04:00",
      "updated_at": "2025-10-01T14:57:28-04:00",
      "handle": "refund-policy",
      "title": "Refund policy",
      "url": "https://jsmith.myshopify.com/548380009/policies/997884056"
    }
  ]
}
```

### examples

* #### Retrieve a list of the shop's policies

  #####

  ```curl
  curl -X GET "https://your-development-store.myshopify.com/admin/api/2025-10/policies.json" \
  -H "X-Shopify-Access-Token: {access_token}"
  ```

  #####

  ```remix
  await admin.rest.resources.Policy.all({
    session: session,
  });
  ```

  #####

  ```ruby
  # Session is activated via Authentication
  test_session = ShopifyAPI::Context.active_session

  ShopifyAPI::Policy.all(
    session: test_session,
  )
  ```

  #####

  ```node
  // Session is built by the OAuth process

  await shopify.rest.Policy.all({
    session: session,
  });
  ```

  #### response

  ```json
  HTTP/1.1 200 OK{"policies":[{"body":"You have 30 days to get a refund","created_at":"2025-10-01T14:57:28-04:00","updated_at":"2025-10-01T14:57:28-04:00","handle":"refund-policy","title":"Refund policy","url":"https://jsmith.myshopify.com/548380009/policies/997884056"}]}
  ```