Privacy Policy

This Privacy Policy explains how Pack3D LTD ("Pack3D", "we", "us") collects, uses, and protects personal data in connection with our website at pack3d.com, our logistics platform at app.pack3d.com, and our associated services. We comply with the UK GDPR and the Data Protection Act 2018.

1. Data Controller

2. Data We Collect

2.1 Information you provide directly

• Contact information (name, email, phone, job title, company)
• Account credentials (username and hashed password)
• Communication content when you contact us
• Business information provided during onboarding

2.2 Information collected automatically

• Technical data (IP address, browser type, device identifiers)
• Usage data (pages visited, features accessed, referring URLs)
• Log data generated by API requests
• Cookie and tracking technology data (see Section 9)

2.3 Information received from third parties

• Order and consignment data submitted by merchant clients
• Carrier and logistics telemetry data
• Identity verification data where required for compliance

3. How We Use Your Data

• To provide, operate, and maintain the Pack3D platform
• To process and fulfil orders submitted through our logistics network
• To authenticate users and maintain account security
• To communicate about your account, orders, and service updates
• To respond to enquiries and provide customer support
• To send relevant marketing communications (where lawfully permitted)
• To analyse usage patterns and improve our Services
• To detect, investigate, and prevent fraudulent activity
• To comply with our legal obligations

4. Lawful Basis for Processing

• Contract: Processing necessary to perform or prepare a contract with you.
• Legitimate interests: Operating a secure platform, fraud prevention, and improving our services, where not overridden by your rights.
• Legal obligation: Compliance with applicable law including tax and regulatory obligations.
• Consent: For direct marketing or non-essential cookies — withdrawable at any time without affecting prior processing.

5. Sharing & Disclosure

We do not sell your personal data. We may share it with: service providers (cloud, email, analytics, payments) under data processing agreements; carrier and logistics partners; professional advisers; regulatory and law enforcement authorities where required by law; and acquirers in connection with a business transfer.

6. International Data Transfers

Where we transfer personal data outside the UK or EEA, we ensure appropriate safeguards via UK International Data Transfer Agreements (IDTAs) or EU Standard Contractual Clauses. A list of subprocessors is available on request.

7. Data Retention

• Account data: duration of account plus up to 7 years after closure (statutory accounting obligations)
• Order and shipment records: 7 years for tax and audit purposes
• Marketing records: until unsubscribe plus a suppression period
• API access logs: maximum 90 days for security monitoring

8. Your Rights

Under UK GDPR you have rights of: access; rectification; erasure; restriction of processing; data portability; objection; and protections regarding automated decision-making. To exercise any right contact privacy@pack3d.com. You may also complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Cookies & Tracking Technologies

We use strictly necessary cookies (required for site function), analytics cookies (subject to your consent), and preference cookies. You can manage preferences via our cookie banner or browser settings. Disabling certain cookies may impair functionality.

10. Security

We implement technical and organisational security measures including TLS 1.3 transport encryption, OAuth 2.0 authentication, role-based access controls, and regular security assessments. No method of transmission or storage is 100% secure.

11. Children

Our Services are directed at businesses and individuals aged 18 or over. We do not knowingly collect data from children under 13. If you believe we have done so inadvertently, contact privacy@pack3d.com immediately.

12. Changes to this Policy

We may update this Privacy Policy periodically. Material changes will be reflected in the "Last updated" date above and, where appropriate, notified by email. We encourage you to review this Policy regularly.

13. Contact Us