This Appendix forms part of Zippendo's Data Processing Agreement (Danish Datatilsynet standard contractual clauses, Article 28(3) GDPR). It corresponds to Appendix A in the published DPA template.
A.1 Purpose of processing
The Customer uses Zippendo's platform to manage shipping and logistics operations. Zippendo processes personal data on the Customer's behalf for the following purposes:
- Importing, consolidating, and managing the Customer's order and shipment data from e-commerce platforms, APIs, or manual entry interfaces.
- Facilitating logistics workflows, including carrier booking, label generation, customs documentation, tracking, and pickup orchestration.
- Providing tracking updates and recording transit events.
- Managing printing configurations and local print clients.
- Executing automated shipping rules and conditional routing instructions configured by the Customer.
- Forwarding order and shipping events to external destinations and integrations authorized and configured by the Customer.
- Migrating historical shipping records from third-party platforms utilizing customer-provided data sources.
- Providing operational support, diagnostic assistance, and platform troubleshooting, including time-limited support impersonation when requested by the Customer or required to resolve service issues.
- Performing platform diagnostics, billing verification, and statistical aggregation to monitor platform performance and integration stability, and providing optional AI-powered text assistance and query resolution features when activated by the Customer.
A.2 Nature of the processing
Processing operations include:
- Collection, structured ingestion, hosting, database organization, and retrieval of customer and order data.
- Automated processing and validation of shipment attributes (including address geocoding and structural validation).
- Automated generation, rendering, and secure storage of shipping labels, barcodes, and customs documentation.
- Transmission of shipment, booking, and consignment data to third-party carriers selected and activated by the Customer.
- Transmission of webhook events and data packets to third-party services and APIs configured by the Customer.
- Secure, automated background processing, scheduled pruning, and systematic deletion of data in accordance with the retention schedules.
- Anonymization and statistical aggregation of technical telemetry and platform metrics to monitor integration stability.
A.3 Types of personal data
The Customer may submit personal data to the Services. The categories of personal data processed include:
- Identity and Contact Details: Full names, email addresses, telephone numbers, and company names.
- Logistics and Delivery Data: Sender, recipient, billing, pickup, and return addresses.
- Order and Shipment Metadata: Order references, line-item details (including product descriptions, SKUs, and pricing), tracking numbers, carrier status, and timestamps.
- Customs and Trade Identifiers: Regulatory identifiers (e.g., EORI, IOSS, VOEC, and tax registration numbers), commodity descriptions, tariff codes, and country-of-origin details.
- Generated Documents: Digital shipping labels, commercial invoices, and customs documents containing embedded names, addresses, and reference numbers.
- Unstructured Content: Free-text fields, including order notes, delivery instructions, and interactive assistant chat histories, which may incidentally contain personal data.
- Technical Access Log Data: Access metadata, including IP addresses, user agents, API request parameters, and platform activity logs.
- Application and Diagnostic Logs: System diagnostic logs capturing platform requests, responses, system events, and API interactions unconditionally across the platform infrastructure to ensure system security, maintain operational performance, diagnose errors, and support troubleshooting. These logs may transiently capture shipment metadata (including consignee names, delivery addresses, and tracking identifiers) and are automatically deleted or overwritten on a rolling 14-day retention cycle.
Special-Category and Sensitive Data: The platform is not intended for, and must not be used to process, special categories of personal data (Article 9 GDPR) or data relating to criminal convictions and offences (Article 10 GDPR). The Customer is responsible for ensuring that no such sensitive data is submitted to the platform.
A.4 Categories of data subjects
The categories of data subjects whose data is processed under this Agreement include:
- Customer Users: Employees, contractors, and authorized representatives of the Customer's business organization.
- Consignees and End-Recipients: Individuals receiving physical shipments, packages, or deliveries managed through the platform.
- Senders and Pickup Contacts: Warehouse, dispatch, office, or return contact persons designated by the Customer.
- E-commerce Customers: Individuals whose transactional details are imported from the Customer's integrated sales channels.
A.5 Duration of processing and retention
During the agreement: Processing continues for as long as the Customer maintains an active subscription to the Services and the Data Processing Agreement is in effect.
Platform Retention (Active Subscription): Operational shipment and imported order data is retained on the platform to maintain performance and is automatically deleted in accordance with the Customer's active subscription tier:
- Free Plan: 30 days
- Standard Plan: 60 days
- Growth Plan: 180 days
- Pro Plan: 365 days
- Enterprise Plan: 365 days (unless otherwise agreed in writing)
Post-Termination Deletion: Upon termination of the Services or deletion of the Customer's organization account, Zippendo shall hard-delete all personal data from active production environments within 14 days. Database backup archives, which are maintained solely for disaster recovery and system integrity purposes, are automatically overwritten in accordance with Zippendo's standard backup retention cycles, and in any event within a maximum of 30 days. Anonymized and aggregated platform performance statistics containing no personal data or customer-identifiable metadata are retained post-termination for billing verification and system diagnostics.
A.6 Processing locations
Primary processing locations, databases, and application hosting environments are located within secure, enterprise-grade cloud data centers in the European Union (EU) / European Economic Area (EEA), as specified in Appendix B and the public subprocessor list.