Privacy Policy

ParcelPanel ("we", "us", or "our") provides order tracking, returns & exchanges, and shipping protection services to merchant customers ("Merchants") to enhance their store operations and improve their consumers' post-purchase experience. This Privacy Policy is designed to help you understand how we collect, use, and share your personal information and to help you understand and exercise your privacy rights.

This Privacy Policy applies to personal information we collect and process through our website, mobile applications, APIs, and related services (collectively, the "Services").

This Policy does not apply to data that Merchants collect and process independently about their own customers ("Merchant Data").

Merchants are solely responsible for ensuring their own privacy practices comply with applicable laws and regulations regarding the collection, use, and protection of Merchant Data.

For questions about how a Merchant handles your personal data, please contact them directly.

The categories of personal information we collect depend on how you interact with our Services and the requirements of applicable laws. We collect information you provide directly, data automatically generated through your use of the Services, and information obtained from third-party sources, as detailed below.

We may collect the following personal information that you provide to us:

• Merchant Account Creation. When creating a merchant account, we collect your name, email address, phone number, and company name.

• Service Purchases. For orders placed through our Services, we collect transaction details (e.g., subscription plan type) and billing address. Please note that payments for the services are processed via Shopify, and we do not directly collect or store payment credentials. Payment processing is securely handled by Shopify's payment providers, in compliance with applicable security standards.

• Communications. When requesting product information, subscribing to our blog, booking a demo, and seeking customer support, we may collect your name, email, phone number, or mailing address.

• Surveys and Beta Testing. Participation in surveys, beta tests, or promotional activities may require providing feedback or contact details.

We may automatically collect certain personal information when you use our Services, including:

• Automatic Data Collection. We may collect certain information automatically when you use the Services. This information may include your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile advertising and other unique identifiers, details about your browser, operating system or device, location information (including inferred location based off of your IP address), Internet service provider, mobile carrier, pages that you visit before, during and after using the Services, actions that you take while using the Services, information about the links you click, information about how you interact with the Services, including the frequency and duration of your activities, and other information about how you use the Services. Information we collect may be associated with accounts and other devices.

• Cookies, Pixel Tags/WebBeacons, and Other Technologies. We, as well as third parties that provide content, advertising, or other functionality on our Services, may use cookies, pixel tags, local storage, and other technologies ("Technologies") to automatically collect information through your use of our Services. See Section 3 for details on types, purposes, and control options.

• Third Party Services and Organizations. We may obtain information about you from third-party services and organizations to enhance our records and provide relevant products and services. For example, if you access our Services through third-party applications, such as the Shopify app store, we may collect information based on the permissions you have granted through your privacy settings. We may also obtain your email address or other personal information from third-party services if you have authorized them to share such data with us.

As stated earlier, this Privacy Policy does not apply to or govern the processing of personal information by ParcelPanel on behalf of Merchants via the Merchant Services. However, for the sake of transparency, we provide the following examples to illustrate how we may process personal information on behalf of Merchants when providing our Services:

• Tracking and Order Status. When consumers make a purchase from one of our Merchants and are the recipients of a package, they may receive a link to ParcelPanel's tracking page to check their order status. Through our order tracking services, we may collect and process information including the consumer's name and contact information, order details (such as order number, purchase date, and items purchased), shipping information (including delivery address, carrier details, tracking numbers, and delivery status updates), and last-mile carrier information and tracking data. This information is primarily provided to us by the Merchant or their shipping carriers and is subject to the Merchant's privacy policy. We process this data solely to provide tracking visibility and delivery status updates to both Merchants and their customers.

• Returns Management. When Merchants utilize our returns and exchange services, we may process personal information related to the return process, including the consumer's name and contact details, original order information, return reason and requested resolution (refund, exchange, store credit, etc.), return shipping address and tracking information, and return status updates. This information is shared with us by the Merchant specifically to facilitate and manage the return process. Our processing of this data is limited to providing return management services as requested by the Merchant.

We use cookies and similar technologies to enhance your experience, analyze service usage, and deliver relevant content. Below is a detailed explanation of our practices:

• Cookies. These are small text files placed on your device to enable essential functions like user authentication and session management. For example, cookies allow you to stay logged in while navigating our Services. You may also opt out by blocking cookies from the Website. Visit All About Cookies for step-by-step guides.

• Web Beacons (Pixels). Tiny code snippets embedded in web pages or emails that help us understand engagement metrics, such as whether an email was opened or a page was viewed.

• Log Files. Automatically record technical details during your visits, including IP address, browser type, referring pages, and timestamps.

• Analytics. We may use Technologies and other third-party tools to process analytics information on our Services. Some of our analytics partners include:

  • Google Analytics. For more information, please visit Google Analytics' Privacy Policy. To opt out of this feature by installing the Google Analytics Opt-Out Tool.

  • HubSpot. For more information about HubSpot, please visit HubSpot's Privacy Policy.

  • Social Media Platforms. Our Services may include social media buttons, such as LinkedIn, and interactive features like the "share" button. These features may collect your IP address, the page you're visiting on our site, and may set cookies to ensure proper functionality. Your interactions with these features are subject to the privacy policies of the respective third-party platforms.

We classify our use of tracking technologies into three categories:

• Essential Technologies. These technologies are necessary for the basic functionality of our Services. They help ensure security, prevent fraud, and allow you to access core features. Disabling these technologies may affect your ability to use essential functions of our Services.

• Performance-Related Technologies. These technologies help us evaluate the performance of our Services, such as tracking user behavior and analyzing traffic patterns. This helps us understand how our Services are used and improve user experience. You can opt out of these technologies through your browser settings or third-party tools.

• Functionality-Related Technologies. These technologies enhance your experience by remembering your preferences and providing personalized features. For example, they allow us to identify you when you sign into our Services or keep track of past apps you've viewed.

We use your personal information for a variety of business purposes, including:

We use your information to fulfill our contract with you or the Merchant on whose behalf you use the Services, such as:

• Managing your account information and preferences within the ParcelPanel platform;

• Providing access to our tracking, analytics, and order management features;

• Processing and displaying shipping and delivery information, including last-mile carrier data;

• Facilitating returns and exchanges management for Merchants and their customers;

• Sending order status updates and delivery notifications via email;

• Responding to questions, comments, and other requests;

• Answering requests for customer or technical support.

We use your information for various administrative purposes, such as:

• Pursuing legitimate interests, such as direct marketing, research and development, network and information security, and fraud prevention;

• Measuring interest and engagement in our Services;

• Improving and upgrading our tracking and return management Services;

• Developing new features for our post-purchase experience solutions;

• Ensuring internal quality control and performance of our systems;

• Authenticating and verifying Merchant identities;

• Carrying out audits related to interactions, transactions, and compliance activities;

• Communicating with you about your account, activities on our Services, and Privacy Policy changes;

• Analyzing shipping carrier performance and delivery time statistics;

• Preventing and prosecuting potentially prohibited or illegal activities;

• Enforcing our agreements and terms of service;

• Complying with our legal obligations, particularly related to e-commerce and regulations.

We may use personal information to tailor and provide you with content and information about our Services. We may provide you with these materials as permitted by applicable law.

If you have any questions about our marketing practices or if you would like to opt out of the use of your personal information for marketing purposes, you may adjust your preferences in your account settings or follow the unsubscribe instructions provided in any marketing communication you receive.

We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.

We may use personal information and other data about you to create de-identified and/or aggregated information, such as de-identified delivery performance metrics, information about the devices from which you access our Services, or other analyses we create.

If we create or receive de-identified information, we will not attempt to re-identify such information, unless permitted by, or required to comply with, applicable laws. De-identified and/or aggregated information is not personal information, and we may use and disclose such information in a number of ways, including research, internal analysis, analytics, improving our tracking Services, and any other legally permissible purposes.

We disclose your information to third parties for a variety of business purposes, including to provide our Services, to protect us or others, as described below.

• Merchants. In cases where you use our Services on behalf of our Merchants (e.g., your employer), our Merchants may access information associated with your use of the Services, including usage data, and the contents of the communications and files associated with your account. Please note that your information may also be subject to our Merchant's privacy policy. We are not responsible for the privacy or security practices of our Merchants.

• Service Providers. We may share your personal information with our third-party service providers who use that information to help us provide our Services. This includes service providers that provide us with IT support, hosting, payment processing, customer service, and related services.

• Business Partners. We may share your personal information with business partners to provide you with a product or service you have requested. We may also share your personal information with business partners with whom we jointly offer products or services, such as integrated e-commerce platforms, review management systems, and other complementary services.

• Affiliates. We may share your personal information with our company affiliates for purposes consistent with this Privacy Policy.

• APIs/SDKs. We may use third-party Application Program Interfaces ("APIs") and software development kits ("SDKs") as part of the functionality of our Services. Your use of such APIs and SDKs is subject to this Privacy Policy.

We may access, preserve, and disclose any information we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement, national security requests, and legal process, such as a court order or subpoena; protect your, our, or others' rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.

We are committed to protecting the security of your personal data. ParcelPanel maintains physical, electronic, and procedural safeguards to protect the confidentiality and security of information transmitted to us. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure. When we transmit highly confidential data (such as a credit card number or password) over the Internet, we protect it through the use of encryption.

However, no method of transmission over the Internet, or method of electronic storage, is one hundred percent secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

We retain the personal information we collect only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, as well as to comply with legal obligations, resolve disputes, and enforce our agreements. Your personal data will be stored for the duration of your use of our Services, and as required to:

• Fulfill the purposes for which it was collected.

• Resolve any disputes or legal claims.

• Conduct necessary audits and business operations.

• Pursue legitimate business interests.

• Ensure compliance with applicable laws and regulations.

To determine the appropriate retention period for personal information, we consider applicable legal requirements, the amount, nature, and sensitivity of the data, potential risk factors, the purposes for which we process your information, and whether we can achieve those purposes through other means.

Once the data is no longer needed for these purposes, we will securely delete or anonymize your information in accordance with legal requirements. In some circumstances, we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

Residents of the ("UK") and the European Economic Area ("EEA") are provided certain privacy rights under the UK and EU General Data Protection Regulations ("GDPR"). If you are located in Switzerland, the Swiss Federal Data Protection Act applies to our processing of personal data.

If you are a resident of the European Economic Area ("EEA") or the United Kingdom ("UK"), we process your personal data in accordance with the General Data Protection Regulation ("GDPR") under the following legal bases:

• Consent: When you have explicitly agreed to the processing of your personal data for specific purposes, such as receiving marketing communications. You have the right to withdraw your consent at any time.

• Legitimate interest: We process your data to support our legitimate business interests, which include providing and improving our tracking and returns services, enhancing user experience on our platform, communicating service updates, offering customer support, conducting market analysis, ensuring security of our systems, and operating our business efficiently.

• Contract fulfillment: We process your data when necessary to fulfill our contractual obligations to you, including providing our order tracking, returns services, managing subscription plans, and processing payments.

• Legal obligation: We process your data when necessary to comply with applicable laws, regulations, and legal requirements, including tax reporting and responding to legal requests from authorities.

If you are a resident of the European Economic Area (EEA), you have certain rights regarding your personal data under the General Data Protection Regulation (GDPR), including:

• Right to access. You can request a copy of the personal data we hold about you.

• Right to rectification. You can request correction of inaccurate or incomplete personal data.

• Right to erasure. You can request deletion of your personal data in certain circumstances.

• Right to restrict processing. You can request the limitation of processing of your personal data.

• Right to data portability. You can request transfer of your personal data to you or another service provider in a structured, commonly used, machine-readable format.

• Right to object. You can object to our processing of your personal data based on legitimate interests or for direct marketing.

• Right to withdraw consent. Where we rely on your consent to process your personal data, you can withdraw this consent at any time.

• Right to not be subject to automated decision-making. You can request not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

To exercise your rights, please contact us through the contact information below.

When you use our Services, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where data protection laws may differ from those in your country. These countries include the United States, Canada, where some of our servers and service providers are located.

To ensure adequate protection of your data, we implement the following safeguards:

• Standard Contractual Clauses ("SCCs 2021") as approved by the European Commission

• UK International Data Transfer Addendum, where applicable

• Other legally approved transfer mechanisms under GDPR

• Regular assessments of data protection laws in countries where your data may be transferred

• Ensuring our partners and service providers maintain adequate data protection measures

By using our services or providing us with any information, you consent to such transfer, storage, and processing. If you have any questions about the international transfer of your personal data, please contact us using the contact information provided below.

If you have concerns about how we handle your personal data, we encourage you to contact us first at [email protected], so we can resolve your issue. You also have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement of data protection laws has occurred.

The privacy choices you may have about your personal information are determined by applicable law and are described below.

If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or Services you have requested. We may also send you certain non-promotional communications regarding our Services or updates to our Terms or this Privacy Policy, which you cannot opt out of.

Do Not Track ("DNT") is a privacy preference that users can set in certain web browsers. Please note that, at this time, we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.

You may stop or restrict the placement of Technologies on your device or remove them by adjusting your preferences as your browser or device permits. However, if you adjust your preferences, our Services may not work properly. Please note that cookie-based opt-outs are not effective on mobile applications. You may opt out of personalized advertisements on some mobile applications by following the instructions for Android, iOS, and others.

The online advertising industry provides websites from which you may opt out of receiving targeted ads from data partners and advertising partners that participate in self-regulatory programs. You can learn more about targeted advertising and consumer choice by visiting the Network Advertising Initiative, the Digital Advertising Alliance, the European Digital Advertising Alliance, and the Digital Advertising Alliance of Canada.

Please note you must separately opt out in each browser and on each device.

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.

You have the right to:

• Withdraw your consent at any time

• Request access to or deletion of your personal data

To exercise these rights, please contact us through the contact information below.

We may update this Policy periodically to reflect changes in our practices or legal requirements.

Our Services are not directed to children under the age of 18, and we do not knowingly collect personal information from them. If you are under 18, please do not provide any personal information through our Services.

If you are a parent or guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at [email protected]. Upon verification, we will take prompt action to delete the data, unless we are legally required to retain it.

Merchants using our Services are responsible for ensuring that their customers are not under the age of 18 and must comply with all applicable child privacy laws.

In no event shall ParcelPanel be liable for any consequential damages, even if we knew or should have known of the possibility thereof. These limitations shall apply to the fullest extent permitted by law. In some jurisdictions, some of the foregoing limitations may not apply.

Our Website may contain links to other websites. A link to a third party's website does not mean that we endorse it or that we are affiliated with it. We do not exercise control over third-party websites. You access such third-party websites or content at your own risk. You should always read the privacy policy of a third-party website before providing any information to the website.

ParcelPanel shall regularly review the sufficiency of this Privacy Policy. We reserve the right to modify and change the Privacy Policy at any time. Any changes to this policy will be published on the Platform.

If you have any questions about this Privacy Policy, please contact us at [email protected].