This policy explains how Zippendo ApS (CVR 46636058, Æbeløgade 26, 1. 2, 8000 Aarhus C, Denmark — "Zippendo", "we", "us") processes personal data when you visit our website, create an account, or use the Zippendo platform as a user of one of our business customers.
Contact for privacy matters: [email protected]
1. Two roles — read this first
Zippendo processes personal data in two distinct roles:
| Role | What it covers | Governing document |
|---|---|---|
| Data processor | Order, shipment, and recipient data our business customers submit to the platform (e.g. the name and address of a parcel recipient) | Our Data Processing Agreement with the customer. The customer is the data controller — direct requests about that data to the shop or business you ordered from |
| Data controller | Your Zippendo user account, billing, support, and our website | This policy |
If you received a parcel from a business that uses Zippendo and want your data corrected or deleted, contact that business — they control the data, and we assist them under our DPA.
2. Data we process as controller
2.1 Account data
When you create an account or are invited to an organisation: name, email address, password (stored as a salted hash), organisation membership and role.
If you sign in with Google, we receive your Google profile ID, email, name, and profile picture URL from Google. Google is an independent controller for the sign-in service.
2.2 Billing data
For the organisation you belong to: company name, VAT number, billing address, billing email, contact phone number. Subscription billing, invoicing, payment processing, and the customer billing portal run through our billing provider Stripe (Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland), which also sends billing emails (receipts, payment reminders) on our behalf. Payment card details are entered directly on Stripe's hosted checkout and portal pages and never touch our servers. Stripe may engage Stripe, Inc. (USA) as a sub-processor; those transfers are safeguarded by the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework. For statutory bookkeeping, invoice records are also processed by our accounting provider Visma e-conomic A/S (Denmark; EU hosting). In our own systems we store the billing details listed above and Stripe reference IDs — never card details.
If your organisation subscribed through the Shopify App Store, subscription charges are billed by Shopify under Shopify's own terms, and Shopify acts as an independent controller for that billing.
2.3 Communication and support
Emails you send to [email protected], and feedback you submit in the product.
2.4 Technical data
Our websites and API are served through Cloudflare's edge network, which inspects incoming requests (including your IP address and technical request headers) to filter automated traffic and protect the platform against abuse and cyber threats.
IP address and browser (user agent) associated with your login sessions; server logs; error reports collected when something goes wrong. Our server logs record the API requests made from your account and the responses we return, so that we can operate the platform and investigate faults for you; credentials are removed from these records, and the records are deleted after 14 days. We also record operational events on our own servers — an order imported, a shipment sent — to monitor, improve and develop the service.
Where you have consented (see section 6), we additionally collect analytics and session replays in your browser — recordings of how the interface was used, with all form inputs masked and recipient details blocked. All of this is processed in the EU by PostHog, which identifies you by an internal account identifier, never your name or email address. Records are labelled with the name of the organisation whose account you are using, so that we can understand how each business customer uses the platform.
2.5 Transactional email
We send account and operational emails (verification, invitations, billing notices, and occasional service announcements from our team) via Resend (processed in the EU, AWS eu-west-1, Ireland).
2.6 Newsletter and marketing email
If you sign up for updates on our website, we store your email address and any profile details you provide with our email provider Resend and use them to send you news about Zippendo (legal basis: consent, Art. 6(1)(a)). You can unsubscribe at any time via the link in each email, and we will stop sending you marketing email.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing your account and the platform | Art. 6(1)(b) — contract |
| Billing and subscription management | Art. 6(1)(b) — contract; Art. 6(1)(c) — legal obligation (bookkeeping) |
| Transactional email (verification, invitations, billing) | Art. 6(1)(b) — contract |
| Security, abuse prevention, service operation and fault investigation, and server-side analytics used to monitor, improve and develop the platform | Art. 6(1)(f) — legitimate interest in running, securing, improving and developing the service |
| Analytics, session replay and error reports collected in your browser | Art. 6(1)(a) — consent, withdrawable at any time |
| Support and feedback handling | Art. 6(1)(f) — legitimate interest in supporting users |
| Newsletter (website signup) | Art. 6(1)(a) — consent, withdrawable at any time |
| Compliance with legal obligations | Art. 6(1)(c) |
We do not sell personal data. We do not use your account data for advertising or profiling.
4. Recipients
We share controller-side personal data only with:
- Cloudflare, Inc. (USA / Global Edge) — reverse proxy, content delivery, Web Application Firewall (WAF), and bot protection (including Cloudflare Turnstile) for our websites, application, and API
- Hetzner Online GmbH (Germany) — hosting
- Neon, Inc. (database, AWS Frankfurt, Germany)
- Stripe Payments Europe, Limited (Ireland) — subscription billing, invoicing, payment processing, customer billing portal, and billing emails (our data processor for billing data; may engage Stripe, Inc. (USA) as a sub-processor under the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework)
- Visma e-conomic A/S (Denmark) — statutory bookkeeping of invoice records (our data processor for accounting data; EU hosting)
- Resend, Inc. (EU) — transactional email
- PostHog, Inc. (PostHog Cloud EU, Frankfurt) — product analytics, session replay, error tracking, and application logs
- Google — only if you use Google sign-in (independent controller)
- European Commission VIES Service — VAT number validation for EU business customer signups
- Brønnøysund Register Centre (Brønnøysundregistrene, Norway) — organisation number validation for Norwegian business customer signups
- Mapbox, Inc. (USA; under the EU Standard Contractual Clauses and the EU-U.S. Data Privacy Framework) — address suggestions while you enter your business address at signup, and a check that the address exists
- Public authorities where required by law
The full list of parties that process customer platform data on our behalf is published at zippendo.com/legal/subprocessor-list.
5. Retention
- Account data: kept while your account exists. When your account or your organisation is deleted, data is hard-deleted from production within 14 days; database backup copies are automatically overwritten in accordance with our standard backup retention cycles, within 30 days.
- Billing records: retained for up to 5 years after the end of the financial year, as required by the Danish Bookkeeping Act.
- Support emails: retained as long as needed to handle the matter and for a reasonable period thereafter.
- Session replays: deleted after 30 days.
- Application logs: deleted after 14 days.
- Analytics and error events: retained for as long as we operate our analytics project. These records are pseudonymous — identified by an internal account identifier, never your name or email address.
- Platform data processed for business customers: per the plan-based retention schedule in our DPA (30–365 days depending on plan).
6. Cookies
Strictly necessary and functional cookies — authentication/session cookies (httpOnly, secure), a language-preference cookie, and the record of your consent choice — are set without consent. Interface preferences such as sidebar state are stored locally in your browser.
Everything else is set only after you consent, on both our website (zippendo.com) and in the application (app.zippendo.com). This includes the browser analytics and session replay described in section 2.4, and the marketing tags loaded via Google Tag Manager on the website. Each site shows its own banner, and you can withdraw consent at any time. Purposes and durations are listed in our Cookie Policy.
7. Your rights
You have the right to access, rectify, erase, restrict, and receive a copy (portability) of your personal data, and to object to processing based on legitimate interest.
Write to [email protected]. We respond within one month.
If your request concerns parcel/order data processed on behalf of a business customer, we will refer you to the responsible business (the data controller) and assist them per our DPA.
8. International transfers
Our core infrastructure is in the EU (Germany, Ireland). Where a service provider processes data in the United States (see the subprocessor list), transfers rely on the EU-US Data Privacy Framework and/or EU Standard Contractual Clauses as stated in the provider's data processing agreement.
9. Complaints
You may lodge a complaint with the Danish Data Protection Agency:
Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark — [email protected] — +45 33 19 32 00 — www.datatilsynet.dk
10. Changes
We may update this policy from time to time. The current version is always available at this page; material changes will be announced in the product or by email.