Privacy Policy

1. Introduction & Scope

SellerShipping LLC ("SellerShipping," "we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you:

• Visit our website at sellershipping.com
• Use our fulfillment, warehousing, and distribution services
• Access our customer portal and management tools
• Communicate with us via email, phone, or other channels

This Privacy Policy applies to all personal information processed by SellerShipping in connection with our services, including information collected from clients, their customers, suppliers, and website visitors. Our clients' customers (for example, marketplace buyers whose orders we ship) are covered in Sections 2.1, 4.4 and 5.1, where we act as a data processor on our client's behalf.

By using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your information as described herein.

2. Data Controller and Processor Roles

For the purposes of applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and Turkish Personal Data Protection Law (KVKK), SellerShipping LLC is the data controller for personal information about our clients, prospective clients, and website visitors (for example, account, billing, and contact information).

2.1 Marketplace Buyer and End-Customer Data

When our clients send us orders, either directly or by connecting a sales channel or marketplace (such as Shopify, Amazon, eBay, or Etsy), we process their customers' personal information (for example, a buyer's name and shipping address) solely as a data processor and service provider on behalf of the client (the seller), who remains the data controller. We process this data only to fulfill that client's orders, as described in Sections 4.4 and 5.1 and in our Data Handling & Processing Policy. Buyers who wish to exercise their privacy rights should contact the seller they purchased from; we will assist the seller in responding.

3. Legal Basis for Processing

We process your personal information only when we have a legal basis to do so under applicable data protection laws. Our legal bases for processing include:

• Contractual Necessity: Processing is necessary to perform our contract with you or to take steps at your request before entering into a contract (e.g., providing fulfillment services, processing orders)
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as improving our services, preventing fraud, and ensuring security (balanced against your rights and interests)
• Legal Obligation: Processing is necessary to comply with legal obligations, such as tax laws, accounting requirements, and responding to lawful requests from authorities
• Consent: You have given explicit consent for processing your personal information for specific purposes (e.g., marketing communications, cookies)

4. Information We Collect

We collect various types of information to provide and improve our services:

4.1 Personal Information

Information that identifies you personally, including:

• Contact Information: Name, email address, phone number, business address
• Account Information: Username, password, account preferences
• Billing Information: Billing address, tax identification numbers, and payment method details. Card payments are processed by Stripe; we do not store full payment card numbers
• Identity Verification: Government-issued ID, business registration documents (when required for account verification)
• Communication Data: Records of correspondence, support tickets, feedback

4.2 Business Information

Information related to your business operations and fulfillment activities:

• Company Details: Business name, EIN/Tax ID, business type, industry
• Inventory Data: Product information, SKUs, stock levels, descriptions
• Order Information: Order details, shipping addresses, customer names (processed as a data processor on behalf of our clients; see Section 2.1)
• Shipping Data: Carrier preferences, shipping methods, tracking information
• Financial Records: Invoices, payment history, transaction records

4.3 Automated Information Collection

Information automatically collected when you interact with our services:

• Device Information: IP address, browser type, device type, operating system
• Usage Data: Pages visited, features used, time spent, click patterns
• Cookies and Tracking: Session cookies, analytics cookies, preference cookies
• Log Data: Server logs, error reports, access times
• Location Data: General geographic location based on IP address

4.4 Marketplace Integration Data (including Etsy)

When a client connects a marketplace account to SellerShipping, the client authorizes the connection through the marketplace's official sign-in and consent screen (OAuth). We never ask for or store marketplace passwords. Through the marketplace's official API we access only the data needed to fulfill the client's orders:

• Order (receipt) numbers, order dates, and payment status
• Items ordered, SKUs, and quantities
• The buyer's name and shipping address
• The shipping method selected by the buyer

We also store the access tokens needed to keep the connection active, encrypted at rest.

Etsy: our Etsy integration requests only the transactions_r and transactions_w permissions needed to read paid orders and to send carrier and tracking details back to Etsy. We do not request access to listings, shop settings, buyer email addresses, or messages. See Section 4.4 of our Data Handling & Processing Policy for full details.

5. How We Use Your Information

We use your personal information for the following purposes:

• Service Delivery: To provide warehousing, fulfillment, FBA prep, and distribution services
• Order Processing: To receive, store, pick, pack, and ship orders on your behalf
• Account Management: To create and manage your account, process payments, and provide customer support
• Communication: To send service updates, billing statements, security alerts, and respond to inquiries
• Service Improvement: To analyze usage patterns, identify issues, and enhance our services
• Compliance: To comply with legal obligations, including tax reporting, customs documentation, and regulatory requirements
• Security: To detect and prevent fraud, unauthorized access, and other malicious activities
• Marketing: To send promotional communications about our services to clients and prospective clients (with your consent, where required). We never use our clients' end-customer or marketplace buyer data for marketing
• Analytics: To understand how our services are used and measure effectiveness

5.1 Use of Marketplace Buyer Data

Buyer data we receive from our clients or through a connected marketplace (including data accessed through the Etsy API) is used only to pick, pack, and ship that client's orders, to generate shipping labels, and to send carrier and tracking details back to the client's marketplace. In particular, we:

• Do not use buyer data for marketing, advertising, profiling, or training machine learning or AI models
• Do not sell or rent buyer data, or share it with advertising, analytics, or marketing platforms
• Share a buyer's name and shipping address only with the shipping carrier delivering the order (and store it with our hosting provider, AWS)
• Do not send order, shipping, or tracking messages to Etsy buyers. Etsy notifies the buyer when tracking details are added to the order. If there is a delivery issue, we contact our client (the seller)

6. Data Sharing and Disclosure

We may share your personal information with the following categories of recipients:

6.1 Service Providers and Business Partners

• Shipping Carriers: FedEx, UPS, USPS, Purolator, APC, EVRI, DPD, Estafeta, Paquet Express (Mexico), and other carriers to fulfill shipments (recipient name, shipping address, and package details only)
• Payment Processor: Stripe, to process client payments
• Cloud Services: Amazon Web Services (AWS) for hosting, data storage, and transactional email
• Website Analytics and Advertising: Google Analytics, Google Tag Manager, and Meta Pixel on our marketing website (website visitor data only)
• Business Productivity: Google Workspace, to process inquiries submitted through our website forms

Marketplace buyer and end-customer data is never shared with analytics, advertising, or marketing providers.

6.2 Legal and Compliance

We may disclose your information when required by law or to:

• Comply with legal obligations, court orders, subpoenas, or lawful government requests
• Enforce our Terms of Service and protect our legal rights
• Protect the safety and security of our services, employees, and users
• Prevent fraud, illegal activities, or security threats

6.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change and provide options regarding your information.

6.4 With Your Consent

We may share your information with third parties when you provide explicit consent for specific purposes.

7. International Data Transfers

SellerShipping operates primarily in the United States. If you are located in the European Economic Area (EEA), United Kingdom, Turkey, or other regions with data protection laws, your personal information may be transferred to and processed in the United States.

When transferring data internationally, we implement appropriate safeguards, including:

• Standard Contractual Clauses (SCCs): EU-approved model contracts for data transfers
• Adequacy Decisions: Relying on jurisdictions deemed adequate by regulatory authorities
• Data Protection Agreements: Binding agreements with service providers to ensure equivalent protection
• Your Consent: Obtaining explicit consent for transfers where required

By using our services, you acknowledge and consent to the transfer of your information to the United States and other countries where we operate.

8. Data Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Account Data: Retained for the duration of your account plus 90 days after account closure
• Order and Transaction Records: Retained for 7 years to comply with tax and accounting requirements (order numbers, SKUs, quantities, fees, and tracking numbers; marketplace buyer personal data is removed as described below)
• Marketplace Buyer Data (including Etsy): Buyer names, shipping addresses, and contact details are deleted 90 days after the order ships, or within 30 days after the client disconnects the integration, whichever comes first
• Communications: Retained for 3 years for customer service and dispute resolution
• Marketing Data: Retained until you withdraw consent or unsubscribe
• Website Logs: Retained for 12 months for security and analytics
• Legal Hold: Information subject to legal proceedings retained until resolution

After the retention period expires, we securely delete or anonymize your personal information in accordance with our data deletion procedures.

9. Your Privacy Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal information:

9.1 GDPR Rights (EEA and UK Residents)

• Right to Access: Request a copy of your personal information we hold
• Right to Rectification: Correct inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information ("right to be forgotten")
• Right to Restrict Processing: Limit how we process your information
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

9.2 CCPA Rights (California Residents)

• Right to Know: Request disclosure of personal information collected, used, and shared
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

9.3 KVKK Rights (Turkey Residents)

• Right to learn whether personal data is processed
• Right to request information if data has been processed
• Right to learn the purpose of processing and its usage
• Right to know third parties to whom data is transferred domestically or abroad
• Right to request correction of incomplete or inaccurate data
• Right to request deletion or destruction of data under certain conditions
• Right to request notification of corrections, deletions, or destructions to third parties
• Right to object to adverse consequences due to automated processing
• Right to claim compensation for damages

9.4 Disconnecting a Marketplace Integration

Clients can disconnect a marketplace integration at any time from their SellerShipping account, or by revoking SellerShipping's access in their marketplace account settings (for Etsy, in your Etsy account settings). When an integration is disconnected, we immediately stop accessing the marketplace, delete the stored access tokens, and delete the related buyer personal data within 30 days.

9.5 Exercising Your Rights

To exercise any of these rights, please contact us at:

• Email: privacy@sellershipping.com
• Phone: +1 (201) 417-0888
• Mail: 39 Montclair Ave, Little Falls, NJ 07424

We will respond to your request within 30 days (or as required by applicable law). We may request additional information to verify your identity before processing your request.

10. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website and collect information about how you use our services.

10.1 Types of Cookies We Use

• Essential Cookies: Necessary for website functionality, authentication, and security
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how visitors use our website (Google Analytics)
• Marketing Cookies: Track effectiveness of advertising campaigns on our marketing website (Meta Pixel, with consent)

10.2 Managing Cookies

You can control cookies through your browser settings:

• Block all cookies
• Accept only first-party cookies
• Delete cookies after each session

Note that blocking certain cookies may affect website functionality and your ability to use some features.

10.3 Third-Party Analytics and Advertising

We use the following third-party services on our marketing website only:

• Google Analytics and Google Tag Manager: Web analytics services (Privacy Policy)
• Meta Pixel: Advertising measurement (Privacy Policy)

11. Security Measures

We implement comprehensive security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction.

11.1 Technical Security

• Encryption: TLS/SSL encryption for data in transit
• Data Storage: Encrypted databases and secure cloud infrastructure
• Access Controls: Role-based access with multi-factor authentication
• Monitoring: 24/7 security monitoring and intrusion detection
• Firewalls: Network firewalls and security protocols

11.2 Physical Security

• Secured warehouse facilities with access control systems
• Video surveillance and alarm systems
• Background checks for employees with data access
• Visitor management and escort protocols

11.3 Organizational Security

• Regular security training for employees
• Confidentiality agreements and data protection policies
• Incident response and breach notification procedures
• Regular security audits and assessments

11.4 Data Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will:

• Notify affected individuals within 72 hours (as required by GDPR)
• Report to relevant data protection authorities
• Provide information about the breach, its impact, and remedial actions
• Offer assistance and support to affected individuals
• For data accessed through the Etsy API, notify Etsy (dpo@etsy.com) and the affected seller no later than 24 hours after discovering the breach

12. Children's Privacy

Our services are not directed to children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@sellershipping.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you via email or through a prominent notice on our website
• Obtain your consent if required by applicable data protection laws

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

14.1 EU and UK Residents

EU and UK residents may send GDPR or UK GDPR inquiries directly to our Data Protection Officer at dpo@sellershipping.com.

14.2 Supervisory Authorities

You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence, place of work, or place of alleged infringement if you believe our processing of your personal information violates applicable law.