Privacy Policy

Account data: name, business name, email, phone, password hash, billing address, and tax identifiers.

Order data: products, quantities, prices, and the shipping details of your end customers (name, address, phone, email) supplied by you or your connected store.

Payment data: processed by our PCI-compliant payment providers. We store only the last four digits, card brand, and expiry — never full card numbers.

Usage data: IP address, device and browser type, pages viewed, referral source, timestamps, and diagnostic logs collected through cookies and similar technologies.

To create and secure accounts, process subscriptions, source products, and fulfill and track orders.

To provide support, prevent fraud and abuse, meet legal and tax obligations, and improve product features and performance.

To send service notices and, where permitted, marketing messages you can unsubscribe from at any time.

We rely on contract performance (providing the Services), legitimate interests (security, analytics, product improvement), consent (marketing cookies and emails), and legal obligation (tax, accounting, sanctions screening).

For end-customer shipping data, you are the controller and ShipEz acts as processor. We use that data only to fulfill your orders, handle returns, and comply with law, and we require the same standard from our suppliers and carriers.

We share data with suppliers, 3PL warehouses, and carriers to fulfill orders; with payment processors, analytics, email, and hosting providers acting on our instructions; with professional advisers; and with authorities where legally required.

We do not sell personal information. In a merger, acquisition, or asset sale, data may transfer to the successor entity under equivalent protection.

Because fulfillment is global, data may be transferred outside your country, including to the United States and Asia. Where required, we use Standard Contractual Clauses or other approved safeguards.

We keep account and order records for as long as your account is active and afterwards for the period required by tax, accounting, and dispute-resolution rules (typically up to 7 years). Diagnostic logs are retained for a shorter period.

We use encryption in transit, access controls, least-privilege permissions, audit logging, and regular reviews of vendors. No system is perfectly secure; notify us at security@shipez.co if you suspect a vulnerability or incident.

Depending on where you live, you may request access, correction, deletion, portability, restriction, or objection, and you may withdraw consent at any time. California residents may request disclosure of categories collected and opt out of sharing for cross-context behavioural advertising.

Submit requests to privacy@shipez.co. We respond within the timeframe required by applicable law and may need to verify your identity.

The Services are not directed to children under 16, and we do not knowingly collect their personal information.

We will post updates on this page and revise the date above. For privacy questions, contact privacy@shipez.co.