Privacy Policy

ShipBundle (“we,” “our,” or “us”) is committed to protecting your privacy and handling your personal information with transparency, fairness, and care. This Privacy Policy explains how we collect, use, disclose, and protect your information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and the EU General Data Protection Regulation (GDPR).

1. Information We Collect

We collect the minimum data needed to provide and improve our services:

• Account Information: name, email address, company name, and authentication credentials.
• Business & Operational Data: orders, product details, fulfillment events, and related data processed through our platform.
• Usage Data: browser type, IP address, device identifiers, and site interactions for analytics, fraud detection, and performance optimization.
• Communications: messages and support requests you send to us.

We do not collect sensitive personal data unless required for a specific feature and only with your consent.

2. How We Use Your Information

We process data for legitimate purposes:

• Provide, maintain, and improve the ShipBundle platform and related services.
• Authenticate users, detect and prevent unauthorized access, and protect against fraud or abuse.
• Communicate about service updates, account notices, and customer support requests.
• Analyze usage and improve product performance and reliability.
• Comply with legal obligations and enforce our Terms of Service.

We rely on contract performance, legal obligation, legitimate interest, or consent depending on the processing purpose.

3. Data Sharing and Disclosure

We do not sell or rent personal data. We share information only with trusted third-party processors that help operate our platform (cloud hosting, email delivery, analytics, and support).

All processors are bound by strict data processing agreements requiring confidentiality, security, and compliance with GDPR and PIPEDA. We may also disclose limited data when required by law or to protect our legal rights.

4. Security and Data Retention

We protect your information with:

• Encryption in transit and at rest.
• Access controls and multi-factor authentication.
• Continuous monitoring and vulnerability management.

We retain personal data only as long as needed for the purposes in this policy or as required by law. When data is no longer needed, it is securely deleted or anonymized.

5. International Data Transfers

When data is transferred outside your jurisdiction (for example, to cloud providers in the U.S.), we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your data (subject to legal or contractual limits).
• Withdraw consent for processing where applicable.
• Request data portability and information about automated decision-making.

To exercise these rights, contact us at privacy@shipbundle.com. We will respond within applicable legal timeframes.

7. Cookies and Tracking

We use cookies and similar technologies for authentication, security, and analytics. You can manage cookie preferences through your browser settings.

8. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact our Privacy Officer:

• Email: privacy@shipbundle.com

If you are in the EU or UK and are not satisfied with our response, you may lodge a complaint with your local data protection authority.

9. Policy Updates

We may update this Privacy Policy periodically. When we do, we will revise the “Last Updated” date above and notify users of significant changes via email or our website.