Privacy Policy

Last updated: March 20, 2026

1. Data Controller

ShipLulu ("we", "us", "our") operates the website shiplulu.com and the seller dashboard at app.shiplulu.com. We are the data controller for personal data collected through our website and services.

Contact: privacy@shiplulu.com

2. What Data We Collect

2.1 Account data

When you register, we collect your email address, name, and password (hashed). This is necessary to provide our service (legal basis: contract performance).

2.2 Fulfillment data

To fulfill orders on your behalf, we process your customers' shipping information: name, address, phone number, and order details. We process this data as a data processor on your behalf (see our Data Processing Agreement).

2.3 Billing data

We record your transactions, balance, and payment references. We do not store credit card numbers — payments are processed through third-party providers (bank transfer, PayPal).

2.4 Website analytics

We use Plausible Analytics, a privacy-focused analytics tool that does not use cookies and does not collect personal data. We track page views, referral sources, and country-level location only.

2.5 Contact form

If you contact us, we collect your name, email, and message content to respond to your inquiry.

3. How We Use Your Data

• To provide and maintain our fulfillment service
• To process your orders and manage your inventory
• To communicate with you about your account and service updates
• To generate invoices and manage billing
• To improve our service based on aggregated, anonymized usage patterns

4. Legal Basis for Processing (GDPR)

• Contract performance: Processing your account data and fulfillment data is necessary to provide our service.
• Legitimate interest: Website analytics and service improvement, where our interest does not override your rights.
• Legal obligation: Retaining billing records as required by applicable tax and commercial law.

5. Data Sharing

We share personal data only with:

• Shipping carriers: Name and address of your customers, as necessary to deliver packages.
• Payment processors: Transaction references for payment reconciliation.
• Platform integrations: Order and tracking data synced to your Shopify/WooCommerce store (at your direction).

We do not sell personal data. We do not share data with advertising networks.

6. International Data Transfers

Our warehouse and primary systems are located in China. Your data may be transferred to and processed in China. We implement appropriate safeguards including encryption in transit and at rest, access controls, and our Data Processing Agreement which includes Standard Contractual Clauses where applicable.

7. Data Retention

• Account data: Retained while your account is active, plus 12 months after deletion.
• Fulfillment data (customer addresses): Retained for 90 days after order delivery, then anonymized.
• Billing records: Retained for 7 years as required by commercial law.
• Contact form submissions: Retained for 12 months.

8. Your Rights

Under GDPR and applicable law, you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate data.
• Erasure: Request deletion of your data (subject to legal retention requirements).
• Data portability: Receive your data in a machine-readable format.
• Object: Object to processing based on legitimate interest.
• Restrict: Request restriction of processing in certain circumstances.

To exercise any of these rights, email privacy@shiplulu.com. We will respond within 30 days.

9. Cookies

Our website does not use cookies for analytics or tracking. We use a single cookie to store your language preference if you change it from the default. This is a strictly necessary cookie and does not require consent.

10. Children

Our service is not directed to individuals under 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this policy from time to time. We will notify registered users by email of significant changes. The "last updated" date at the top indicates the latest revision.

12. Contact

For privacy-related inquiries:
Email: privacy@shiplulu.com