Privacy Notice

Last Updated: January 2024
This Privacy Notice describes the privacy practices of Popout, Inc. d/b/a Shippo and its Affiliates (collectively, “Shippo,” “we,” “us,” or “our”) and our obligations regarding the collection, processing, and storing of certain information collected about our customers (“Customer,” “you,” or “your”) who use our sites, products, and services (collectively, our “Services”).
We at Shippo take the privacy of our Customers and their consumers very seriously, and we are committed to safeguarding that privacy by complying with applicable data privacy laws. This Notice (defined below) explains how Shippo processes personal data, which is data that can be used to identify, locate, or contact an individual either used alone or when combined with other personal or identifying information (“Personal Data”), or as otherwise defined in applicable data privacy laws.
We are the data controller if you are a Customer, and for certain processing activities if you are a consumer, for example including conducting analytics, improving our services, investigating crime. We are a data processor of consumer personal data when we are providing our services.  
By using or accessing the Services, you hereby acknowledge this Notice and any other policies that may be applicable, including but not limited to Shippo’s Terms of Use. This Notice is subject to change from time to time, and we posting any changes on this page.
If you have any questions or concerns about this Notice or our data privacy practices, please contact us using the contact information at the end of this Notice.
Country-specific data terms
In the event that a certain country’s data privacy laws may apply to your use of the Services, you must also read our country-specific addendums (each, a “Notice Addendum”). The term “Notice” shall include this Privacy Notice and any applicable Notice Addendums. The following are the Notice Addendums that comply with that country’s data privacy laws:
Types of personal data we collect and how it is collected
Shippo receives, processes, and stores any information you provide to us, as well as any information received or recorded automatically when using the Services or interacting with our third-party service providers (“Partners”).
We typically collect and process the following types of Personal Data:
Type When or Why it is Provided Information Included
Account Information Information provided to Shippo in order to register an account Name, email address, phone number, billing address, shipping address, third-party account login credentials (e.g. carrier or merchant platform account)
Contact Information Information provided to Shippo in order to communicate with you Name, email address, phone number, billing address, shipping address, email receipt confirmations
Device Information Information automatically recorded from your device IP address, geolocation data, device identification, feature requests, cookie information, browser information, page requests
Session Information Information recorded from your device Browsing behavior, page visits, clicks and cursor movements, searches on the Services, customer service interactions, and screen recordings.
Transaction Information Information provided to Shippo in order to authorize and complete transactions Name, email address, phone number, payment and billing information
Usage Data Information automatically recorded from your browser or the API IP address, geolocation data, device information, browser type, browser version, browser language, diagnostic data
Tracking Technologies Information automatically recorded from your browser or device, of the type typically provided through acceptance of cookies More information on Shippo’s Cookie Policy can be found in this Notice.
We do not knowingly collect or solicit Personal Data from anyone under the age of 13. If you are under 13, do not attempt to register for the Services or send to us any of your Personal Data. If we learn that we have collected Personal Data from an individual under the age of 13, we will delete that information as soon as possible. If you believe that an individual under the age of 13 may have provided Personal Data to Shippo, please contact us at privacy@shippo.com.
The purpose of collection
Shippo collects your Personal Data in connection with your use of the Services.
Personal Data is typically collected to do the following:
  • Provision of the Services: facilitating shipping, shipping insurance, creating labels, tracking shipments, address validation
  • Enable users to create a Shippo account and link third-party courier or marketplace accounts
  • Provide customer service and technical support
  • Personalize your Shippo experience
  • Conduct analytics on use of Shippo’s services, and develop and improve Shippo’s products and services
  • Aggregating and anonymising personal data, including for the purpose of conducting analytics and improving our services
  • Send direct marketing emails to business contacts
  • Advertise Shippo products and services to you on other sites (if you are a business contact, but not if you are a consumer)
  • Keep records including to comply with laws, regulations, and policies
  • Monitor, investigate, prevent and detect fraud, potential criminal activity, or breach of carrier regulations, and to prevent harm to Customer, Shippo and Shippo’s affiliates, and to third parties
With whom is personal data shared?
Shippo may share Personal Data with the following entities:
Entity With Whom Data is Shared For What Purpose Data is Shared
Our Partners, Agents, and Advisors Shippo may share data with carriers, merchant platforms integrated with Shippo, and service providers, including to perform tasks on its behalf and to facilitate the provision of our services.
Third Parties in Connection with a Business Transfer In the course of its business, Shippo may enter into a business transfer transaction (such as a merger or acquisition, or investment process), or may otherwise go through a change in control, cessation of business activities, or bankruptcy. In these transactions or activities, Personal Data may be considered an asset which could be assessed, shared, bought, sold, or otherwise transferred to or acquired by another entity.
Third Parties in Connection with Investigations, Safety and Complying with Legal Obligations Shippo may access, read, preserve, or disclose any Personal Data that we believe is necessary in order to (1) comply with laws, regulations, or court orders or directions from regulators; (2) enforce or apply Shippo’s Terms of Use or other agreements; (3) protect the rights, property, or safety of Shippo, its employees, Customers, or others; (4) for the purpose of investigating potential criminal activity.
Advertising Partners Shippo may advertise its products and services to you on other sites – if you are a Customer (not a consumer) on other sites. You can choose for us not to share your information with other sites, in order to personalize those ads, by rejecting advertising cookies in your cookie settings.
Except as otherwise set forth in this section, Shippo does not share or sell any of your Personal Data in an identifiable form to anyone. We may, however, provide to a third party (a) de-identified Personal Data, or (b) aggregated usage data from the Services. De-identified or aggregated data is disclosed in a way that does not and cannot identify an individual.
Carrier Privacy Statements:
USPS Privacy Act Statement:  Your information will be used to facilitate the purchase of postage and to fulfill transactional reporting requirements for Postal Service postage systems. Collection is authorized by 39 U.S.C. 401, 403, and 404. Providing the information is voluntary, but if not provided, your transaction may not be processed. The Postal Service does not disclose your information to third parties without your consent, except to facilitate the transaction, to act on your behalf or request, or as legally required. This includes the following limited circumstances: to a congressional office on your behalf; to financial entities regarding financial transaction issues; to a US Postal Service auditor; to entities, including law enforcement, as required by law or in legal proceedings; and to contractors and other entities aiding us to fulfill the service (service providers). For more information regarding our privacy policies, visit www.usps.com/privacypolicy.
FedEx Privacy Statement: Participant acknowledges and agrees that their identity, contact information, account information and FedEx shipping information and data may be provided by FedEx to Alliance and by Alliance to FedEx. FedEx shall use the aforementioned information  in accordance with the FedEx Data Privacy Notice:
Personal data retention and protection
In certain cases, Shippo may retain Personal Data for as long as the account(s) related to the Personal Data remain active, or as may be necessary to comply with applicable laws, regulations, policies, or agreements. Subject to applicable law or regulation, you may request removal of your Personal Data by contacting us via the contact information set forth in this Notice.
Shippo puts in place certain technical and organizational measures to ensure that Personal Data is protected from unauthorized access, disclosure, use, modification, or destruction. We follow industry standard methods of protecting Personal Data in transit and at rest, and we ensure that our Partners also have adequate measures in place to protect Personal Data, pursuant to applicable laws and regulations. While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or other method of storage is 100% secure, and we cannot guarantee absolute security of your Personal Data.
INFORMATION FOR INTERNATIONAL USERS
In general. We operate globally and may transfer, store, and/or process your information to or with other entities within the Shippo family of companies or other third parties such as trusted service providers and partners in locations around the world (including the United States) for the purposes described in this Privacy Policy. Wherever your information is transferred, stored or processed by us, we take reasonable steps to protect your information in accordance with this Privacy Policy and applicable laws. These measures may include implementing Standard Contractual Clauses to govern the transfer of your information, or other means recognized by applicable laws. By providing us with your information, you acknowledge any such transfer, storage, or processing.
If you have any concerns or complaints about our data processing activities, we urge you to first try to resolve such issues directly with us. However, if applicable, you may make a complaint to the data protection supervisory authority in the country where you are based, or seek a remedy through local courts if you believe your rights have been breached.
Data Privacy Framework Certification. Shippo complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) (collectively, the “DPF”) as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of “personal data” (as defined under the laws of the European Economic Area (“EEA”)), UK, and Switzerland, as applicable) that Shippo receives from the EEA, UK, and Switzerland. We have certified to the Department of Commerce that we adhere to the DPF Principles and Supplemental Principles with respect to personal data transferred to us in reliance on the DPF. Shippo is subject to the investigatory and enforcement powers of the Federal Trade Commission in the case of any failure to comply with the DPF.
If you are an EEA, UK, or Swiss citizen you may be able to exercise certain choices under the DPF regarding how some of your personal data is used and disclosed, and may access, correct or delete certain personal data by following the instructions in the “Data Subject Requests” section of this Privacy Policy.
When we receive personal data under the DPF and then transfer it to a third-party acting as our agent on our behalf, we may have certain responsibility under the DPF if both (a) the agent processes the personal data in a manner inconsistent with the DPF and (b) we are responsible for the event giving rise to the damage.
In compliance with the DPF Principles, Shippo commits to resolve complaints about your privacy and our collection or use of your personal data (without charge to you). EEA, UK, and Swiss individuals with inquiries or complaints regarding this Privacy Policy should first contact us at privacy@shippo.com. We will respond to any complaints as soon as possible and within 45 days. If you have any unresolved privacy or data use complaints that we have not addressed satisfactorily, please contact, free of charge, our dispute resolution provider, the Better Business Bureau (“BBB”), at https://bbbprograms.org/programs/all-programs/dpf-consumers. In certain conditions, if your DPF complaint has not been resolved after raising it with us following the BBB procedure above and taking certain other steps, you may be able to invoke binding arbitration through a DPF panel, in accordance with the DPF at https://www.dataprivacyframework.gov/s/article/How-to-Submit-a-Complaint-Relating-to-a-Participating-Organization-s-Compliance-with-the-DPF-Principles-dpf.
If there is any conflict between this Privacy Policy and the DPF Principles, the DPF Principles shall govern. To learn more about the DPF program, and to view our certifications, please visit https://www.dataprivacyframework.gov/s/participant-search.
Disclosure of personal data
Disclosure to law enforcement: If required by law or in response to valid requests by public authorities, Shippo may be required to disclose your Personal Data.
Disclosure pursuant to legal requirements: Shippo may disclose your Personal Data in the good faith belief that such disclosure is necessary to (i) comply with a legal obligation, (ii) protect against legal liability, (iii) protect the personal safety of users or the general public, (iv) protect and defend Shippo’s rights or property, or (v) prevent or investigate possible wrongdoing in connection with the Services.
Our use of cookies
Our use of cookies is governed by the Shippo Cookie Policy.
Unsubscribe from marketing communications
You may receive emails and phone calls from Shippo with news, product updates, event announcements and other communications. If you do not wish to receive emails or phone calls from us (except for emails related to the completion of your registration, correction of user data, change of password, and other similar communications essential to your transactions through the Services), you can opt out at any time by: (i) clicking this unsubscribe link or in an email you receive from us; (ii) emailing us at support@shippo.com; or (iii) verbally communicating your decision to opt-out during a phone call you receive from us.
Data subject requests
Submit your Data Subject Request directly via Our Online Form. Alternatively you may send a Data Subject Request to privacy@shippo.com.
Shippo contact information
You may contact us with any questions, concerns, or complaints regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – Privacy
2261 Market St., STE 5603
San Francisco, CA 94114

NOTICE ADDENDUM: CALIFORNIA PRIVACY NOTICE (CALIFORNIA/UNITED STATES)

Updated January 2023
California Personal Information. Depending on your online and offline interactions with us, Shippo may collect and process the following categories of personal information (“California Personal Information”):
  • Identifiers, including contact details such as name, address, telephone number, email address;
  • Payment information, including credit card information;
  • Internet or other electronic network activity information, including your interactions with our Sites;
  • Audio, electronic, visual or similar information, if you engage in a call with our customer service or user research teams; and
  • Geolocation data, including general mobile network information.
Certain California Personal Information that Shippo collects about you may be considered Sensitive Personal Information within the meaning of California Privacy Law, including: credit card information (for billing and transactional purposes in connection with providing products and services). Shippo only uses and discloses Sensitive Personal Information as necessary in connection with the performance of services and the provision of goods, compliance with federal, state, or local laws, and as otherwise permitted by California Privacy Law.
Sources. Shippo generally sources the categories of California Personal Information identified above directly from you or your organization, platforms that partner with us (for instance, merchant platforms that host your website and integrate with us for shipping services), third party reference agencies, and social media networks.
Purposes of use. Shippo uses California Personal Information for:
  • Business purposes, including:
    • Negotiating, concluding and performing contracts with Customers (including the provision of shipping services and advice);
    • Managing Shippo accounts and records;
    • Negotiating, concluding and performing contracts with Vendors;
    • Communicating with Individuals that are, or who represent, Customers, Vendors or Web Users related to transactions;
    • Operating the Shippo website, including the use of analytics software;
    • Facilitating the security of Shippo sites, websites and other assets;
    • Legal and regulatory compliance and internal control evaluations and audits (including where conducted by Shippo’s internal and external audit service providers);
    • Obtaining legal advice, including for legal proceedings and litigation and also in connection with the sale, purchase or merger of a business;
    • To provide the products, information and services you request;
    • For credit or fraud prevention purposes;
    • To provide you with effective customer service;
    • To provide you with a personalized experience when you use our Sites;  
    • To contact you with information and notices related to your use of our Sites;
    • To improve the content, functionality and usability of our Sites;
    • To improve our products and services; and
    • For any other purpose identified in an applicable Privacy Notice or other agreement between Shippo and you.
  • Commercial purposes, including:
    • Advertising, marketing, and public relations (including direct marketing);
    • Market research and competitor analysis;
    • To display personalized advertising when you visit a third party website;
    • To contact you with special offers and other information we believe will be of interest to you;
    • To invite you to participate in surveys and provide feedback to us;
    • To better understand your product needs; and
    • To improve our marketing and promotional efforts.
Disclosure of California Personal Information.
  • We may disclose the categories of California Personal Information described above for the business purposes described above to:
    • Third party service providers that perform data processing activities on our behalf, and subject to appropriate privacy and security obligations;
    • Customers, carriers, and intermediaries in connection with the performance of transactions;
    • Government and other authorities as required by law;
    • Potential purchasers and other parties in connection with the sale, purchase or merger of a business; and
    • Others to the extent necessary to comply with applicable law and as otherwise permitted under California Privacy Law.
  • We may disclose Identifiers, Internet or other electronic network activity information, and Geolocation data for the commercial purposes described above to:
    • Third party service providers;
    • Social media and ad networks.
Retention of California Personal Information. Shippo retains your California Personal Information for as long as needed or permitted in light of the purpose(s) for which it was obtained. Shippo establishes policies and procedures for the retention of records for an appropriate duration, including retention schedules for categories of records. Retention categories may include records which contain California Personal Information, including identifiers, customer records information, commercial information, professional information. The length of time California Personal Information is retained will vary depending on the retention period of the category in which such Personal Information is contained. When establishing retention duration for retention categories, Shippo takes into consideration various criteria, including tax and legal requirements for the retention of records, issues related to the exercise or defense of legal claims, and legitimate business needs.
Your Rights. Subject to certain exceptions detailed in California Privacy Law, as a California resident, you have the right to request: (i) deletion of your California Personal Information; (ii) correction of inaccurate California Personal Information; (iii) the right to know/ access the categories of California Personal Information that we collect about you, including the specific pieces of California Personal Information; (iv) the categories of California Personal Information disclosed for a business purpose; and (v) information about the categories of California Personal Information about you that we have shared (as such term is defined under California Privacy Law) and the categories of third parties to whom the California Personal Information was shared.
Exercising Your Rights. If you are a California resident and wish to request the exercise of these rights as detailed above, please submit your Data Subject Request directly via Our Online Form or email privacy@shippo.com or call us toll free at 1-855-953-3706.  When submitting your request, please include the specific nature of your request, referencing “Your California Privacy Rights,” as well as your first and last name, email address, and zip code or mailing address. Shippo may apply any exceptions or other conditions available under law when responding to correction, deletion, or other requests. Shippo will generally fulfill requests for access, correction, and deletion within 45 days of receiving a valid request. Shippo may extend the response time by another 45 days by notifying the individual of the time extension.
Do Not Track Signals. We do not currently respond to web browser “do not track” signals or other mechanisms that indicate your preference for not having information collected over time and across different Web sites or digital apps following your visit to one of our Sites. We will not discriminate against you by offering you different pricing or products, or by providing you with a different level or quality of products, based solely upon this request.
Authorized Agents. To the extent that you elect to designate an authorized agent to make a request on your behalf, they must provide appropriate documentation including written signed permission from you, proof of your identity, and verification of their identity; or a valid, designated power of attorney as defined under the California Probate Code.
This California Privacy Notice explains how Shippo collects and processes personal information about California residents who are customers, suppliers, or other business contacts and/or who visit the Shippo website, web applications, or APIs (collectively, our “Site(s)”) that display or link to this California Privacy Notice.  
This California Privacy Notice explains how Shippo collects and processes personal information about California residents who are customers, suppliers, or other business contacts and/or who visit the Shippo website, web applications, or APIs (collectively, our “Site(s)”) that display or link to this California Privacy Notice.  

NOTICE ADDENDUM: PRIVACY ACT 1988 AND AUSTRALIAN PRIVACY PRINCIPLES GUIDELINES (AUSTRALIA)

This Notice Addendum applies only to situations in which the Privacy Act 1988 and the Australian Privacy Principles Guidelines (collectively, the “APA”) governs Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data. This Addendum is hereby incorporated by reference into the Notice as of the “Last Updated” date set forth above.
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International transfers
Shippo processes your Personal Data within the United States, so we and our Partners will transfer Personal Data outside of Australia. Any Personal Data transfer subject to APA will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
Your Right What it Means
Right to Access You have the right to view and request copies of your Personal Data.
Right to Rectification You have the right to request that any outdated or inaccurate Personal Data be updated or corrected.
Right to Erasure You have the right to request that your Personal Data be deleted. Please note, however, that this is not an absolute right and may be subject to certain exemptions.
Right to Opt-Out of Processing You have the right to opt-out of the processing of some or all of your Personal Data.
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department - APA Request 
2261 Market St., STE 5603
San Francisco, CA 94114
Data subject requests
Submit your Data Subject Request directly via Our Online Form or send a Data Subject Request to privacy@shippo.com.

NOTICE ADDENDUM: GENERAL DATA PROTECTION LAW (BRAZIL)

This Notice Addendum applies only to situations in which the General Data Protection Law (the Lei Geral de Proteção de Dados or “LGPD”) governs Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data. This Addendum is hereby incorporated by reference into the Notice as of the “Last Updated” date set forth above.
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, so we and our Partners will transfer Personal Data outside of Brazil. Any Personal Data transfer subject to LGPD will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within Brazil, or your Personal Data is otherwise subject to LGPD, then you have the following rights in regard to your Personal Data:
Your Right What it Means
Right to Access You have the right to view and request copies of your Personal Data.
Right to Rectification You have the right to request that any outdated or inaccurate Personal Data be updated or corrected.
Right to Erasure You have the right to request that your Personal Data be deleted. Please note, however, that this is not an absolute right and may be subject to certain exemptions.
Right to Data Portability You have the right to request that your Personal Data be transferred to another data controller or provided directly to you. Personal Data must be provided in a machine-readable electronic format.
Right to Object to Automated Processing You have the right to object to decisions made with your Personal Data solely based on automated decision-making or profiling.
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department - LGPD Request
2261 Market St., STE 5603
San Francisco, CA 94114
Data subject requests
Submit your Data Subject Request directly via Our Online Form or send a Data Subject Request to privacy@shippo.com.

NOTICE ADDENDUM: PERSONAL INFORMATION PROTECTION AND ELECTRONIC DOCUMENTS ACT (CANADA)

This Notice Addendum applies only to situations in which the Personal Information Protection and Electronic Documents Act (“PIPEDA”), or other provincial legislation deemed substantially similar to PIPEDA, govern Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data. This Addendum is hereby incorporated by reference into the Notice as of the “Last Updated” date set forth above.
PLEASE NOTE THAT THIS NOTICE ADDENDUM DOES NOT APPLY TO SHIPPO’S HANDLING OR PROCESSING OF PERSONAL DATA IN THE HUMAN RESOURCES CONTEXT.
International Transfers
Shippo processes your Personal Data within the United States, so we and our Partners will transfer Personal Data outside of Canada. Any Personal Data transfer subject PIPEDA will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within Canada, or your Personal Data is otherwise subject to PIPEDA, then you have the following rights in regard to your Personal Data:
Your Right What it Means
Right to Access You have the right to view and request copies of your Personal Data.
Right to Rectification You have the right to request that any outdated or inaccurate Personal Data be updated or corrected.
Right to Erasure You have the right to request that your Personal Data be deleted. Please note, however, that this is not an absolute right and may be subject to certain exemptions.
Right to Opt-Out of Processing You have the right to opt-out of the processing of some or all of your Personal Data.
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – PIPEDA Request
2261 Market St., STE 5603
San Francisco, CA 94114
Data subject requests
Submit your Data Subject Request directly via Our Online Form or send a Data Subject Request to privacy@shippo.com.

NOTICE ADDENDUM: PERSONAL INFORMATION PROTECTION LAW (CHINA)

This Notice Addendum applies only to situations in which the Personal Information Protection Law (“PIPL”) governs Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data. This Addendum is hereby incorporated by reference into the Notice as of the “Last Updated” date set forth above.
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, so we and our Partners will transfer Personal Data outside of China. Any Personal Data transfer subject to the PIPL will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within China, or your Personal Data is otherwise subject to the PIPL, then you have the following rights in regard to your Personal Data:
Your Right What it Means
Right to be Informed You have the right to be informed about the collection and use of your Personal Data. 
Right to Access You have the right to view and request copies of your Personal Data.
Right to Rectification You have the right to request that any outdated or inaccurate Personal Data be updated or corrected.
Right to Erasure You have the right to request that your Personal Data be deleted. Please note, however, that this is not an absolute right and may be subject to certain exemptions.
Right to Data Portability You have the right to request that your Personal Data be transferred to another data controller or provided directly to you. Personal Data must be provided in a machine-readable electronic format.
Right to Opt-Out of Processing You have the right to opt-out of the processing of some or all of your Personal Data.
Right to Object to Automated Processing You have the right to object to decisions made with your Personal Data solely based on automated decision-making or profiling.
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – PIPL Request
2261 Market St., STE 5603
San Francisco, CA 94114
Data subject requests
Submit your Data Subject Request directly via Our Online Form or send a Data Subject Request to privacy@shippo.com.

NOTICE ADDENDUM: GENERAL DATA PROTECTION REGULATION (EUROPEAN UNION & UNITED KINGDOM)

This Notice Addendum applies only to situations in which the General Data Protection Regulation (“GDPR”) and United Kingdom General Data Protection Regulation (“UK GDPR”) govern Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data. This Addendum is hereby incorporated by reference into the Notice as of the “Last Updated” date set forth above.
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, so we and our Partners will transfer Personal Data outside of the European Economic Area (“EEA”) or the United Kingdom (“UK“). Any Personal Data transfer subject to the GDPR and UK GDPR will include the applicable appropriate safeguards to protect such Personal Data. You can contact us, using the details set out at the end of this notice, to ask for more information about our transfer safeguards.
Legal basis
We must have a legal reason, called a ‘lawful basis’ for each way in which we use your personal information. We explain each of our legal bases below:
Consent:
  • We may use your personal information to send you promotional or marketing content if you have consented (where required by law). (In some circumstances, we may send direct marketing based on our legitimate interests instead (see below).)
  • You can opt-out of further marketing at any time by selecting the opt-out link at the end of all our emails or other correspondence to you.
  • We also rely on consent for some of our cookies (see our Cookie Notice for more detail).
Contract:
  • We use your personal information if it is necessary to perform a contract you have with us (for example, our Terms of Use), or if you have asked us to take specific steps before entering that contract. We may send you service updates based on your contract with us (for example, about payments for our Services).
Legitimate interests:
  • We may use your personal information if it is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests. Our legitimate interests include:
Administering, improving and expanding our Platform and services
  • personalizing your Shippo experience
  • improving and expanding our Services, fixing technical issues, and improving security
  • analyzing how users interact with the Services, including aggregating Customers’ data or asking for feedback
Marketing & advertising
  • sending direct marketing to an organisation you work for or provide services to.
  • measuring or understanding the effectiveness of advertising we serve to you and others and delivering relevant advertising to you (including when you visit other websites).
Fulfilling agreements with other organisations
  • complying with any agreement we may have with an organisation you work for or provide services to.
  • enforcing or applying our terms or other agreements with you or with an organisation you work for or provide services to.
Protecting rights
  • protecting rights or security of Shippo, its employees, customers or others
  • investigating potential criminal activity
  • We also rely on consent for some of our cookies (see our Cookie Notice for more detail).
In each case, these legitimate interests are only valid if they are not outweighed by your rights and interests.
Legal obligation:
  • We may need to process your personal information to comply with our legal obligations, including under applicable UK law, and/or any court orders. This may include compliance with know-your-client and anti-money laundering rules.
Your rights regarding personal data
If you are located within the EU or UK, or your Personal Data is otherwise subject to the GDPR or UK GDPR, then you have the following rights in regard to your Personal Data:
Your Right What it Means
Right to be Informed You have the right to be informed about the collection and use of your Personal Data. 
Right to Access You have the right to view and request copies of your Personal Data.
Right to Rectification You have the right to request that any outdated or inaccurate Personal Data be updated or corrected.
Right to Erasure You have the right to request that your Personal Data be deleted. Please note, however, that this is not an absolute right and may be subject to certain exemptions.
Right to Restrict Processing You have the right to request that the processing of your Personal Data be restricted or suppressed.
Right to Object You have the right to object to the processing of your Personal Data.
Right to Data Portability You have the right to request that your Personal Data be transferred to another data controller or provided directly to you. Personal Data must be provided in a machine-readable electronic format.
Right to Object to Automated Processing You have the right to object to decisions made with your Personal Data solely based on automated decision-making or profiling.
Right to Withdraw Consent You have the right to withdraw consent previously given to process your Personal Data.
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – GDPR/UK GDPR Request
2261 Market St., STE 5603
San Francisco, CA 94114
Data subject requests
Submit your Data Subject Request directly via Our Online Form or send a Data Subject Request to privacy@shippo.com.

NOTICE ADDENDUM: COLORADO PRIVACY ACT (COLORADO/UNITED STATES)

This Notice Addendum applies only to situations in which the Colorado Privacy Act (“CoPA”) govern Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, but we or our Partners may transfer Personal Data outside of the country. Nevertheless, any Personal Data transfer subject to the CoPA will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within Colorado, or your Personal Data is otherwise subject to the CoPA, then you have the following rights in regard to your Personal Data:
Your Right What it Means
Right to be Informed You have the right to be informed about the collection and use of your Personal Data. 
Right to Access You have the right to view and request copies of your Personal Data.
Right to Rectification You have the right to request that any outdated or inaccurate Personal Data be updated or corrected.
Right to Erasure You have the right to request that your Personal Data be deleted. Please note, however, that this is not an absolute right and may be subject to certain exemptions.
Right to Data Portability You have the right to request that your Personal Data be transferred to another data controller or provided directly to you. Personal Data must be provided in a machine-readable electronic format.
Right to Opt-Out of Processing You have the right to opt-out of the processing of some or all of your Personal Data.
Right to Object to Automated Processing You have the right to object to decisions made with your Personal Data solely based on automated decision-making or profiling.
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – CoPA Request
2261 Market St., STE 5603
San Francisco, CA 94114
Data subject requests
Submit your Data Subject Request directly via Our Online Form or send a Data Subject Request to privacy@shippo.com.

NOTICE ADDENDUM: UTAH CONSUMER PRIVACY ACT (UTAH/UNITED STATES)

This Notice Addendum applies only to situations in which the Utah Consumer Privacy Act (“UCPA”) govern Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, but we or our Partners may transfer Personal Data outside of the country. Nevertheless, any Personal Data transfer subject to the UCPA will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within Utah, or your Personal Data is otherwise subject to the UCPA, then you have the following rights in regard to your Personal Data:
Your Right What it Means
Right to be Informed You have the right to be informed about the collection and use of your Personal Data. 
Right to Access You have the right to view and request copies of your Personal Data.
Right to Rectification You have the right to request that any outdated or inaccurate Personal Data be updated or corrected.
Right to Erasure You have the right to request that your Personal Data be deleted. Please note, however, that this is not an absolute right and may be subject to certain exemptions.
Right to Data Portability You have the right to request that your Personal Data be transferred to another data controller or provided directly to you. Personal Data must be provided in a machine-readable electronic format.
Right to Opt-Out of Processing You have the right to opt-out of the processing of some or all of your Personal Data.
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – UCPA Request
2261 Market St., STE 5603
San Francisco, CA 94114
Data subject requests
Submit your Data Subject Request directly via Our Online Form or send a Data Subject Request to privacy@shippo.com.

NOTICE ADDENDUM: VIRGINIA’S CONSUMER DATA PROTECTION ACT (VIRGINIA/UNITED STATES)

This Notice Addendum applies only to situations in which Virginia’s Consumer Data Protection Act (“VCDPA”) govern Shippo’s processing of your Personal Data. If this Notice Addendum applies to how Shippo processes your Personal Data, please read its provisions carefully because it provides important information about your rights regarding your Personal Data
Please note that this notice addendum does not apply to shippo’s handling or processing of personal data in the human resources context.
International Transfers
Shippo processes your Personal Data within the United States, but we or our Partners may transfer Personal Data outside of the country. Nevertheless, any Personal Data transfer subject to the VCDPA will include the applicable appropriate safeguards to protect such Personal Data.
Your rights regarding personal data
If you are located within Virginia, or your Personal Data is otherwise subject to the VCDPA, then you have the following rights in regard to your Personal Data:
Your Right What it Means
Right to be Informed You have the right to be informed about the collection and use of your Personal Data. 
Right to Access You have the right to view and request copies of your Personal Data.
Right to Rectification You have the right to request that any outdated or inaccurate Personal Data be updated or corrected.
Right to Erasure You have the right to request that your Personal Data be deleted. Please note, however, that this is not an absolute right and may be subject to certain exemptions.
Right to Data Portability You have the right to request that your Personal Data be transferred to another data controller or provided directly to you. Personal Data must be provided in a machine-readable electronic format.
Right to Opt-Out of Processing You have the right to opt-out of the processing of some or all of your Personal Data.
Right to Object to Automated Processing You have the right to object to decisions made with your Personal Data solely based on automated decision-making or profiling.
Shippo contact information for requests under this notice addendum
You may contact us with any questions or concerns regarding our privacy policies and practices using any of the following methods:
By Mail:
Popout, Inc. d/b/a/ Shippo
ATTN: Legal Department – VCDPA Request
2261 Market St., STE 5603
San Francisco, CA 94114
Data subject requests
Submit your Data Subject Request directly via Our Online Form or send a Data Subject Request to privacy@shippo.com.

Get Started Today

Everything you need for professional-grade shipping + deep discounts from top carriers.

Get started