This Privacy Notice describes the privacy practices of Popout, Inc. d/b/a Shippo and its Affiliates (collectively, “Shippo,” “we,” “us,” or “our”) and our obligations regarding the collection, processing, and storing of certain information collected about our customers (“Customer,” “you,” or “your”) who use our sites, products, and services (collectively, our “Services”).
We at Shippo take the privacy of our Customers and their consumers very seriously, and we are committed to safeguarding that privacy by complying with applicable data privacy laws. This Notice (defined below) explains how Shippo processes personal data, which is data that can be used to identify, locate, or contact an individual either used alone or when combined with other personal or identifying information (“Personal Data”), or as otherwise defined in applicable data privacy laws.
We are the data controller if you are a Customer, and for certain processing activities if you are a consumer, for example including conducting analytics, improving our services, investigating crime. We are a data processor of consumer personal data when we are providing our services.
By using or accessing the Services, you hereby acknowledge this Notice and any other policies that may be applicable, including but not limited to Shippo’s
Terms of Use. This Notice is subject to change from time to time, and we posting any changes on this page.
If you have any questions or concerns about this Notice or our data privacy practices, please contact us using the contact information at the end of this Notice.
Country-specific data terms
In the event that a certain country’s data privacy laws may apply to your use of the Services, you must also read our country-specific addendums (each, a “Notice Addendum”). The term “Notice” shall include this Privacy Notice and any applicable Notice Addendums. The following are the Notice Addendums that comply with that country’s data privacy laws:
Types of personal data we collect and how it is collected
Shippo receives, processes, and stores any information you provide to us, as well as any information received or recorded automatically when using the Services or interacting with our third-party service providers (“Partners”).
We typically collect and process the following types of Personal Data:
Type |
When or Why it is Provided |
Information Included |
Account Information |
Information provided to Shippo in order to register an account
|
Name, email address, phone number, billing address, shipping address,
third-party account login credentials (e.g. carrier or merchant
platform account)
|
Contact Information |
Information provided to Shippo in order to communicate with you
|
Name, email address, phone number, billing address, shipping address,
email receipt confirmations
|
Device Information |
Information automatically recorded from your device
|
IP address, geolocation data, device identification, feature
requests, cookie information, browser information, page requests
|
Session Information |
Information recorded from your device
|
Browsing behavior, page visits, clicks and cursor movements, searches
on the Services, customer service interactions, and screen
recordings.
|
Transaction Information |
Information provided to Shippo in order to authorize and complete
transactions
|
Name, email address, phone number, payment and billing
information
|
Usage Data |
Information automatically recorded from your browser or the API
|
IP address, geolocation data, device information, browser type,
browser version, browser language, diagnostic data
|
Tracking Technologies |
Information automatically recorded from your browser or device, of
the type typically provided through acceptance of cookies
|
More information on Shippo’s Cookie Policy can be found in this Notice.
|
We do not knowingly collect or solicit Personal Data from anyone under the age of 13. If you are under 13, do not attempt to register for the Services or send to us any of your Personal Data. If we learn that we have collected Personal Data from an individual under the age of 13, we will delete that information as soon as possible. If you believe that an individual under the age of 13 may have provided Personal Data to Shippo, please contact us at
privacy@goshippo.com.
The purpose of collection
Shippo collects your Personal Data in connection with your use of the Services.
Personal Data is typically collected to do the following:
- Provision of the Services: facilitating shipping, shipping insurance, creating labels, tracking shipments, address validation
- Enable users to create a Shippo account and link third-party courier or marketplace accounts
- Provide customer service and technical support
- Personalize your Shippo experience
- Conduct analytics on use of Shippo’s services, and develop and improve Shippo’s products and services
- Aggregating and anonymising personal data, including for the purpose of conducting analytics and improving our services
- Send direct marketing emails to business contacts
- Advertise Shippo products and services to you on other sites (if you are a business contact, but not if you are a consumer)
- Keep records including to comply with laws, regulations, and policies
- Monitor, investigate, prevent and detect fraud, potential criminal activity, or breach of carrier regulations, and to prevent harm to Customer, Shippo and Shippo’s affiliates, and to third parties
With whom is personal data shared?
Shippo may share Personal Data with the following entities:
Entity With Whom Data is Shared |
For What Purpose Data is Shared |
Our Partners, Agents, and Advisors |
Shippo may share data with carriers, merchant platforms integrated
with Shippo, and service providers, including to perform tasks on its
behalf and to facilitate the provision of our services.
|
Third Parties in Connection with a Business Transfer |
In the course of its business, Shippo may enter into a business
transfer transaction (such as a merger or acquisition, or investment
process), or may otherwise go through a change in control, cessation
of business activities, or bankruptcy. In these transactions or
activities, Personal Data may be considered an asset which could be
assessed, shared, bought, sold, or otherwise transferred to or
acquired by another entity.
|
Third Parties in Connection with Investigations, Safety and Complying
with Legal Obligations
|
Shippo may access, read, preserve, or disclose any Personal Data that
we believe is necessary in order to (1) comply with laws, regulations,
or court orders or directions from regulators; (2) enforce or apply
Shippo’s Terms of Use or other agreements; (3) protect the rights,
property, or safety of Shippo, its employees, Customers, or others;
(4) for the purpose of investigating potential criminal
activity.
|
Advertising Partners |
Shippo may advertise its products and services to you on other sites
– if you are a Customer (not a consumer) on other sites. You can
choose for us not to share your information with other sites, in order
to personalize those ads, by rejecting advertising cookies in your
cookie settings.
|
Except as otherwise set forth in this section, Shippo does not share or sell any of your Personal Data in an identifiable form to anyone. We may, however, provide to a third party (a) de-identified Personal Data, or (b) aggregated usage data from the Services. De-identified or aggregated data is disclosed in a way that does not and cannot identify an individual.
Carrier Privacy Statements:
USPS Privacy Act Statement: Your information will be used to facilitate the purchase of postage and to fulfill transactional reporting requirements for Postal Service postage systems. Collection is authorized by 39 U.S.C. 401, 403, and 404. Providing the information is voluntary, but if not provided, your transaction may not be processed. The Postal Service does not disclose your information to third parties without your consent, except to facilitate the transaction, to act on your behalf or request, or as legally required. This includes the following limited circumstances: to a congressional office on your behalf; to financial entities regarding financial transaction issues; to a US Postal Service auditor; to entities, including law enforcement, as required by law or in legal proceedings; and to contractors and other entities aiding us to fulfill the service (service providers). For more information regarding our privacy policies, visit
www.usps.com/privacypolicy.
FedEx Privacy Statement: Participant acknowledges and agrees that their identity, contact information, account information and FedEx shipping information and data may be provided by FedEx to Alliance and by Alliance to FedEx. FedEx shall use the aforementioned information in accordance with the FedEx Data Privacy Notice:
Personal data retention and protection
In certain cases, Shippo may retain Personal Data for as long as the account(s) related to the Personal Data remain active, or as may be necessary to comply with applicable laws, regulations, policies, or agreements. Subject to applicable law or regulation, you may request removal of your Personal Data by contacting us via the contact information set forth in this Notice.
Shippo puts in place certain technical and organizational measures to ensure that Personal Data is protected from unauthorized access, disclosure, use, modification, or destruction. We follow industry standard methods of protecting Personal Data in transit and at rest, and we ensure that our Partners also have adequate measures in place to protect Personal Data, pursuant to applicable laws and regulations. While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or other method of storage is 100% secure, and we cannot guarantee absolute security of your Personal Data.
Data transfer
Shippo is headquartered in the United States, so any information we collect about you will be processed in the United States. By using the Services, you acknowledge your personal information may be processed in the United States. Shippo provides for appropriate safeguards under applicable data protection law, including by entering into standard data protection clauses in the European Economic Area and in the United Kingdom where required.
Shippo does not rely on the Privacy Shield but continues to keep the commitments below that we made when we self-certified to the EU-US Privacy Shield Framework. Shippo complies with the EU-U.S. Privacy Shield Framework (“Privacy Shield”) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of Personal Information from European Union member countries. Shippo has certified that it adheres to the Privacy Shield Principles of Notice, Choice, Accountability for Onward Transfer, Security, Data Integrity and Purpose Limitation, Access, and Recourse, Enforcement and Liability. To learn more about the Privacy Shield program, see the US Department of Commerce’s Privacy Shield website located at https://www.privacyshield.gov. To view our certification on the Privacy Shield list, please visit
https://www.privacyshield.gov/list.In compliance with the EU-U.S. Privacy Shield Principles, we commit to resolve complaints about your privacy and our collection or use of your Personal Information. Individuals located within the EEA with inquiries or complaints regarding this Privacy Notice should first contact Shippo at:
Shippo Privacy Office:
731 Market Street, Suite 200
San Francisco, CA 94103
You must provide current, complete and accurate payment and billing information for your account. You must properly update all information to keep your account current, complete, and accurate (for example you must notify us of a change in billing address, credit card number, or credit card expiration date). Changes to such information may be made at https://app.goshippo.com/billing. Failure to keep such payment method details current and accurate may result in Shippo’s failure to collect applicable fees, and may result in the suspension or termination of your access to the Services.
We will investigate and attempt to resolve any complaints or disputes regarding the use or disclosure of personal data within 45 days of receiving your complaint. Shippo has further committed to refer unresolved privacy complaints under the EU-U.S. Privacy Shield Principles BBB EU PRIVACY SHIELD, a non-profit alternative dispute resolution provider located in the United States and operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit
www.bbb.org/EU-privacy-shield/for-eu-consumers/ for more information and to file a complaint.
Under certain limited circumstances, individuals in the EEA may invoke binding Privacy Shield arbitration before a Privacy Shield Panel as a last resort if all other forms of dispute resolution (discussed above) have been unsuccessful. To learn more about this method of resolution and its availability to you, please visit
https://www.privacyshield.gov/. Shippo is subject to the jurisdiction and enforcement authority of the U.S. Federal Trade Commission for purposes of Privacy Shield enforcement. Please note that Shippo is required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Disclosure of personal data
Disclosure to law enforcement: If required by law or in response to valid requests by public authorities, Shippo may be required to disclose your Personal Data.
Disclosure pursuant to legal requirements: Shippo may disclose your Personal Data in the good faith belief that such disclosure is necessary to (i) comply with a legal obligation, (ii) protect against legal liability, (iii) protect the personal safety of users or the general public, (iv) protect and defend Shippo’s rights or property, or (v) prevent or investigate possible wrongdoing in connection with the Services.
Our use of cookies
Unsubscribe from marketing communications
You may receive emails and phone calls from Shippo with news, product updates, event announcements and other communications. If you do not wish to receive emails or phone calls from us (except for emails related to the completion of your registration, correction of user data, change of password, and other similar communications essential to your transactions through the Services), you can opt out at any time by: (i) clicking this
unsubscribe link or in an email you receive from us; (ii) emailing us at
support@goshippo.com; or (iii) verbally communicating your decision to opt-out during a phone call you receive from us.
Data subject requests
Submit your Data Subject Request directly via
Our Online Form. Alternatively you may send a Data Subject Request to privacy@goshippo.com.
Shippo contact information
You may contact us with any questions, concerns, or complaints regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – Privacy
731 Market Street, Suite 200
San Francisco, CA 94103
NOTICE ADDENDUM: CALIFORNIA PRIVACY NOTICE (CALIFORNIA/UNITED STATES)
Updated January 2023
California Personal Information. Depending on your online and offline interactions with us, Shippo may collect and process the following categories of personal information (“California Personal Information”):
- Identifiers, including contact details such as name, address, telephone number, email address;
- Payment information, including credit card information;
- Internet or other electronic network activity information, including your interactions with our Sites;
- Audio, electronic, visual or similar information, if you engage in a call with our customer service or user research teams; and
- Geolocation data, including general mobile network information.
Certain California Personal Information that Shippo collects about you may be considered Sensitive Personal Information within the meaning of California Privacy Law, including: credit card information (for billing and transactional purposes in connection with providing products and services). Shippo only uses and discloses Sensitive Personal Information as necessary in connection with the performance of services and the provision of goods, compliance with federal, state, or local laws, and as otherwise permitted by California Privacy Law.
Sources. Shippo generally sources the categories of California Personal Information identified above directly from you or your organization, platforms that partner with us (for instance, merchant platforms that host your website and integrate with us for shipping services), third party reference agencies, and social media networks.
Purposes of use. Shippo uses California Personal Information for:
Business purposes, including:
- Negotiating, concluding and performing contracts with Customers (including the provision of shipping services and advice);
- Managing Shippo accounts and records;
- Negotiating, concluding and performing contracts with Vendors;
- Communicating with Individuals that are, or who represent, Customers, Vendors or Web Users related to transactions;
- Operating the Shippo website, including the use of analytics software;
- Facilitating the security of Shippo sites, websites and other assets;
- Legal and regulatory compliance and internal control evaluations and audits (including where conducted by Shippo’s internal and external audit service providers);
- Obtaining legal advice, including for legal proceedings and litigation and also in connection with the sale, purchase or merger of a business;
- To provide the products, information and services you request;
- For credit or fraud prevention purposes;
- To provide you with effective customer service;
- To provide you with a personalized experience when you use our Sites;
- To contact you with information and notices related to your use of our Sites;
- To improve the content, functionality and usability of our Sites;
- To improve our products and services; and
- For any other purpose identified in an applicable Privacy Notice or other agreement between Shippo and you.
Commercial purposes, including:
- Advertising, marketing, and public relations (including direct marketing);
- Market research and competitor analysis;
- To display personalized advertising when you visit a third party website;
- To contact you with special offers and other information we believe will be of interest to you;
- To invite you to participate in surveys and provide feedback to us;
- To better understand your product needs; and
- To improve our marketing and promotional efforts.
Disclosure of California Personal Information.
We may disclose the categories of California Personal Information described above for the business purposes described above to:
- Third party service providers that perform data processing activities on our behalf, and subject to appropriate privacy and security obligations;
- Customers, carriers, and intermediaries in connection with the performance of transactions;
- Government and other authorities as required by law;
- Potential purchasers and other parties in connection with the sale, purchase or merger of a business; and
- Others to the extent necessary to comply with applicable law and as otherwise permitted under California Privacy Law.
We may disclose Identifiers, Internet or other electronic network activity information, and Geolocation data for the commercial purposes described above to:
- Third party service providers;
- Social media and ad networks.
Retention of California Personal Information. Shippo retains your California Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained. Shippo establishes policies and procedures for the retention of records for an appropriate duration, including retention schedules for categories of records. Retention categories may include records which contain California Personal Information, including identifiers, customer records information, commercial information, professional information. The length of time California Personal Information is retained will vary depending on the retention period of the category in which such Personal Information is contained. When establishing retention duration for retention categories, Shippo takes into consideration various criteria, including tax and legal requirements for the retention of records, issues related to the exercise or defense of legal claims, and legitimate business needs.
Your Rights. Subject to certain exceptions detailed in California Privacy Law, as a California resident, you have the right to request: (i) deletion of your California Personal Information; (ii) correction of inaccurate California Personal Information; (iii) the right to know/ access the categories of California Personal Information that we collect about you, including the specific pieces of California Personal Information; (iv) the categories of California Personal Information disclosed for a business purpose; and (v) information about the categories of California Personal Information about you that we have shared (as such term is defined under California Privacy Law) and the categories of third parties to whom the California Personal Information was shared.
Exercising Your Rights. If you are a California resident and wish to request the exercise of these rights as detailed above, please submit your Data Subject Request directly via
Our Online Form or email privacy@goshippo.com or call us toll free at 1-855-953-3706. When submitting your request, please include the specific nature of your request, referencing “Your California Privacy Rights,” as well as your first and last name, email address, and zip code or mailing address. Shippo may apply any exceptions or other conditions available under law when responding to correction, deletion, or other requests. Shippo will generally fulfill requests for access, correction, and deletion within 45 days of receiving a valid request. Shippo may extend the response time by another 45 days by notifying the individual of the time extension.
Do Not Track Signals. We do not currently respond to web browser “do not track” signals or other mechanisms that indicate your preference for not having information collected over time and across different Web sites or digital apps following your visit to one of our Sites. We will not discriminate against you by offering you different pricing or products, or by providing you with a different level or quality of products, based solely upon this request.
Authorized Agents. To the extent that you elect to designate an authorized agent to make a request on your behalf, they must provide appropriate documentation including written signed permission from you, proof of your identity, and verification of their identity; or a valid, designated power of attorney as defined under the California Probate Code.
This California Privacy Notice explains how Shippo collects and processes personal information about California residents who are customers, suppliers, or other business contacts and/or who visit the Shippo website, web applications, or APIs (collectively, our “Site(s)”) that display or link to this California Privacy Notice.
This California Privacy Notice explains how Shippo collects and processes personal information about California residents who are customers, suppliers, or other business contacts and/or who visit the Shippo website, web applications, or APIs (collectively, our “Site(s)”) that display or link to this California Privacy Notice.
NOTICE ADDENDUM: PRIVACY ACT 1988 AND AUSTRALIAN PRIVACY PRINCIPLES GUIDELINES (AUSTRALIA)
This Notice Addendum applies only to situations in which the Privacy Act 1988 and the Australian Privacy Principles Guidelines (collectively, the “APA”) governs Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data. This Addendum is hereby incorporated by reference into the Notice as of the “Last Updated” date set forth above.
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International transfers
Shippo processes your Personal Data within the United States, so we and our Partners will transfer Personal Data outside of Australia. Any Personal Data transfer subject to APA will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
Your Right |
What it Means |
Right to Access |
You have the right to view and request copies of your Personal
Data.
|
Right to Rectification |
You have the right to request that any outdated or inaccurate
Personal Data be updated or corrected.
|
Right to Erasure |
You have the right to request that your Personal Data be deleted.
Please note, however, that this is not an absolute right and may be
subject to certain exemptions.
|
Right to Opt-Out of Processing |
You have the right to opt-out of the processing of some or all of
your Personal Data.
|
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – APA Request
731 Market Street, Suite 200
San Francisco, CA 94103
By Email:
Data subject requests
NOTICE ADDENDUM: GENERAL DATA PROTECTION LAW (BRAZIL)
This Notice Addendum applies only to situations in which the General Data Protection Law (the Lei Geral de Proteção de Dados or “LGPD”) governs Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data. This Addendum is hereby incorporated by reference into the Notice as of the “Last Updated” date set forth above.
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, so we and our Partners will transfer Personal Data outside of Brazil. Any Personal Data transfer subject to LGPD will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within Brazil, or your Personal Data is otherwise subject to LGPD, then you have the following rights in regard to your Personal Data:
Your Right |
What it Means |
Right to Access |
You have the right to view and request copies of your Personal
Data.
|
Right to Rectification |
You have the right to request that any outdated or inaccurate
Personal Data be updated or corrected.
|
Right to Erasure |
You have the right to request that your Personal Data be deleted.
Please note, however, that this is not an absolute right and may be
subject to certain exemptions.
|
Right to Data Portability |
You have the right to request that your Personal Data be transferred
to another data controller or provided directly to you. Personal Data
must be provided in a machine-readable electronic format.
|
Right to Object to Automated Processing |
You have the right to object to decisions made with your Personal
Data solely based on automated decision-making or profiling.
|
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – LGPD Request
731 Market Street, Suite 200
San Francisco, CA 94103
By Email:
Data subject requests
NOTICE ADDENDUM: PERSONAL INFORMATION PROTECTION AND ELECTRONIC DOCUMENTS ACT (CANADA)
This Notice Addendum applies only to situations in which the Personal Information Protection and Electronic Documents Act (“PIPEDA”), or other provincial legislation deemed substantially similar to PIPEDA, govern Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data. This Addendum is hereby incorporated by reference into the Notice as of the “Last Updated” date set forth above.
PLEASE NOTE THAT THIS NOTICE ADDENDUM DOES NOT APPLY TO SHIPPO’S HANDLING OR PROCESSING OF PERSONAL DATA IN THE HUMAN RESOURCES CONTEXT.
International Transfers
Shippo processes your Personal Data within the United States, so we and our Partners will transfer Personal Data outside of Canada. Any Personal Data transfer subject PIPEDA will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within Canada, or your Personal Data is otherwise subject to PIPEDA, then you have the following rights in regard to your Personal Data:
Your Right |
What it Means |
Right to Access |
You have the right to view and request copies of your Personal
Data.
|
Right to Rectification |
You have the right to request that any outdated or inaccurate
Personal Data be updated or corrected.
|
Right to Erasure |
You have the right to request that your Personal Data be deleted.
Please note, however, that this is not an absolute right and may be
subject to certain exemptions.
|
Right to Opt-Out of Processing |
You have the right to opt-out of the processing of some or all of
your Personal Data.
|
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – PIPEDA Request
731 Market Street, Suite 200
San Francisco, CA 94103
Data subject requests
NOTICE ADDENDUM: PERSONAL INFORMATION PROTECTION LAW (CHINA)
This Notice Addendum applies only to situations in which the Personal Information Protection Law (“PIPL”) governs Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data. This Addendum is hereby incorporated by reference into the Notice as of the “Last Updated” date set forth above.
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, so we and our Partners will transfer Personal Data outside of China. Any Personal Data transfer subject to the PIPL will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within China, or your Personal Data is otherwise subject to the PIPL, then you have the following rights in regard to your Personal Data:
Your Right |
What it Means |
Right to be Informed |
You have the right to be informed about the collection and use of
your Personal Data.
|
Right to Access |
You have the right to view and request copies of your Personal
Data.
|
Right to Rectification |
You have the right to request that any outdated or inaccurate
Personal Data be updated or corrected.
|
Right to Erasure |
You have the right to request that your Personal Data be deleted.
Please note, however, that this is not an absolute right and may be
subject to certain exemptions.
|
Right to Data Portability |
You have the right to request that your Personal Data be transferred
to another data controller or provided directly to you. Personal Data
must be provided in a machine-readable electronic format.
|
Right to Opt-Out of Processing |
You have the right to opt-out of the processing of some or all of
your Personal Data.
|
Right to Object to Automated Processing |
You have the right to object to decisions made with your Personal
Data solely based on automated decision-making or profiling.
|
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – PIPL Request
731 Market Street, Suite 200
San Francisco, CA 94103
By Email:
Data subject requests
NOTICE ADDENDUM: GENERAL DATA PROTECTION REGULATION (EUROPEAN UNION & UNITED KINGDOM)
This Notice Addendum applies only to situations in which the General Data Protection Regulation (“GDPR”) and United Kingdom General Data Protection Regulation (“UK GDPR”) govern Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data. This Addendum is hereby incorporated by reference into the Notice as of the “Last Updated” date set forth above.
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, so we and our Partners will transfer Personal Data outside of the European Economic Area (“EEA”) or the United Kingdom (“UK“). Any Personal Data transfer subject to the GDPR and UK GDPR will include the applicable appropriate safeguards to protect such Personal Data. You can contact us, using the details set out at the end of this notice, to ask for more information about our transfer safeguards.
Legal basis
We must have a legal reason, called a ‘lawful basis’ for each way in which we use your personal information. We explain each of our legal bases below:
Consent:
We may use your personal information to send you promotional or marketing content if you have consented (where required by law). (In some circumstances, we may send direct marketing based on our legitimate interests instead (see below).)
You can opt-out of further marketing at any time by selecting the opt-out link at the end of all our emails or other correspondence to you.
We also rely on consent for some of our cookies (see our
Cookie Notice for more detail).
Contract:
We use your personal information if it is necessary to perform a contract you have with us (for example, our
Terms of Use), or if you have asked us to take specific steps before entering that contract. We may send you service updates based on your contract with us (for example, about payments for our Services).
Administering, improving and expanding our Platform and services
personalizing your Shippo experience
improving and expanding our Services, fixing technical issues, and improving security
analyzing how users interact with the Services, including aggregating Customers’ data or asking for feedback
Marketing & advertising
sending direct marketing to an organisation you work for or provide services to.
measuring or understanding the effectiveness of advertising we serve to you and others and delivering relevant advertising to you (including when you visit other websites).
Fulfilling agreements with other organisations
complying with any agreement we may have with an organisation you work for or provide services to.
enforcing or applying our terms or other agreements with you or with an organisation you work for or provide services to.
Protecting rights
protecting rights or security of Shippo, its employees, customers or others
investigating potential criminal activity
We also rely on consent for some of our cookies (see our
Cookie Notice for more detail).
In each case, these legitimate interests are only valid if they are not outweighed by your rights and interests.
Legal obligation:
We may need to process your personal information to comply with our legal obligations, including under applicable UK law, and/or any court orders. This may include compliance with know-your-client and anti-money laundering rules.
Your rights regarding personal data
If you are located within the EU or UK, or your Personal Data is otherwise subject to the GDPR or UK GDPR, then you have the following rights in regard to your Personal Data:
Your Right |
What it Means |
Right to be Informed |
You have the right to be informed about the collection and use of
your Personal Data.
|
Right to Access |
You have the right to view and request copies of your Personal
Data.
|
Right to Rectification |
You have the right to request that any outdated or inaccurate
Personal Data be updated or corrected.
|
Right to Erasure |
You have the right to request that your Personal Data be deleted.
Please note, however, that this is not an absolute right and may be
subject to certain exemptions.
|
Right to Restrict Processing |
You have the right to request that the processing of your Personal
Data be restricted or suppressed.
|
Right to Object |
You have the right to object to the processing of your Personal
Data.
|
Right to Data Portability |
You have the right to request that your Personal Data be transferred
to another data controller or provided directly to you. Personal Data
must be provided in a machine-readable electronic format.
|
Right to Object to Automated Processing |
You have the right to object to decisions made with your Personal
Data solely based on automated decision-making or profiling.
|
Right to Withdraw Consent |
You have the right to withdraw consent previously given to process
your Personal Data.
|
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – GDPR/UK GDPR Request
731 Market Street, Suite 200
San Francisco, CA 94103
By Email:
Data subject requests
NOTICE ADDENDUM: COLORADO PRIVACY ACT (COLORADO/UNITED STATES)
This Notice Addendum applies only to situations in which the Colorado Privacy Act (“CoPA”) govern Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, but we or our Partners may transfer Personal Data outside of the country. Nevertheless, any Personal Data transfer subject to the CoPA will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within Colorado, or your Personal Data is otherwise subject to the CoPA, then you have the following rights in regard to your Personal Data:
Your Right |
What it Means |
Right to be Informed |
You have the right to be informed about the collection and use of
your Personal Data.
|
Right to Access |
You have the right to view and request copies of your Personal
Data.
|
Right to Rectification |
You have the right to request that any outdated or inaccurate
Personal Data be updated or corrected.
|
Right to Erasure |
You have the right to request that your Personal Data be deleted.
Please note, however, that this is not an absolute right and may be
subject to certain exemptions.
|
Right to Data Portability |
You have the right to request that your Personal Data be transferred
to another data controller or provided directly to you. Personal Data
must be provided in a machine-readable electronic format.
|
Right to Opt-Out of Processing |
You have the right to opt-out of the processing of some or all of
your Personal Data.
|
Right to Object to Automated Processing |
You have the right to object to decisions made with your Personal
Data solely based on automated decision-making or profiling.
|
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – CoPA Request
731 Market Street, Suite 200
San Francisco, CA 94103
By Email:
Data subject requests
NOTICE ADDENDUM: UTAH CONSUMER PRIVACY ACT (UTAH/UNITED STATES)
This Notice Addendum applies only to situations in which the Utah Consumer Privacy Act (“UCPA”) govern Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, but we or our Partners may transfer Personal Data outside of the country. Nevertheless, any Personal Data transfer subject to the UCPA will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within Utah, or your Personal Data is otherwise subject to the UCPA, then you have the following rights in regard to your Personal Data:
Your Right |
What it Means |
Right to be Informed |
You have the right to be informed about the collection and use of
your Personal Data.
|
Right to Access |
You have the right to view and request copies of your Personal
Data.
|
Right to Rectification |
You have the right to request that any outdated or inaccurate
Personal Data be updated or corrected.
|
Right to Erasure |
You have the right to request that your Personal Data be deleted.
Please note, however, that this is not an absolute right and may be
subject to certain exemptions.
|
Right to Data Portability |
You have the right to request that your Personal Data be transferred
to another data controller or provided directly to you. Personal Data
must be provided in a machine-readable electronic format.
|
Right to Opt-Out of Processing |
You have the right to opt-out of the processing of some or all of
your Personal Data.
|
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – UCPA Request
731 Market Street, Suite 200
San Francisco, CA 94103
Data subject requests
NOTICE ADDENDUM: VIRGINIA’S CONSUMER DATA PROTECTION ACT (VIRGINIA/UNITED STATES)
This Notice Addendum applies only to situations in which Virginia’s Consumer Data Protection Act (“VCDPA”) govern Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, but we or our Partners may transfer Personal Data outside of the country. Nevertheless, any Personal Data transfer subject to the VCDPA will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within Virginia, or your Personal Data is otherwise subject to the VCDPA, then you have the following rights in regard to your Personal Data:
Your Right |
What it Means |
Right to be Informed |
You have the right to be informed about the collection and use of
your Personal Data.
|
Right to Access |
You have the right to view and request copies of your Personal
Data.
|
Right to Rectification |
You have the right to request that any outdated or inaccurate
Personal Data be updated or corrected.
|
Right to Erasure |
You have the right to request that your Personal Data be deleted.
Please note, however, that this is not an absolute right and may be
subject to certain exemptions.
|
Right to Data Portability |
You have the right to request that your Personal Data be transferred
to another data controller or provided directly to you. Personal Data
must be provided in a machine-readable electronic format.
|
Right to Opt-Out of Processing |
You have the right to opt-out of the processing of some or all of
your Personal Data.
|
Right to Object to Automated Processing |
You have the right to object to decisions made with your Personal
Data solely based on automated decision-making or profiling.
|
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
By Email:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – VCDPA Request
731 Market Street, Suite 200
San Francisco, CA 94103
By Email:
Data subject requests