Privacy Policy

1. Introduction

Hello and welcome to Easyship!

Easyship (“Easyship”, “we” and “us”) take privacy of our users (“User”, “you”) very seriously and this privacy policy is designed to provide to our Users a better understanding of how information is collected, stored and used by Easyship (“Policy”). This Privacy Policy is legally binding between you (and your client, employer or another entity if you are acting on their behalf) as the user of the services of Easyship and Easyship and/or its affiliates.

By signing up for any of the services or products offered by Easyship (collectively, the “Services”), accessing our website at www.easyship.com (“Website”), creating and managing shipments through Easyship (“Shipment”), or receiving a Shipment, you acknowledge that you have read and understood this Policy and the information collection and handling practices outlined in it. The Policy describes in detail our policy and practices in respect of our collection, use and/or disclosure of information about you. We understand that your providing information online involves trust on your part. We have the highest regard for your privacy and personal information and realize that the success of Easyship depends on the trust you have in the way we handle your personal information.

If you do not agree to the terms of this Policy, you must immediately cease using the Website or our Services. The term “Personal Information” in this policy, is used to describe any information related to individuals or businesses. The term doesn’t include the name, business address, telephone number of an employee of an organization.

We reserve the right to occasionally update, revise, modify or amend this Policy. We encourage you to check back at this page regularly for any changes to our policy. If major changes are made to our policy we will post it on this page (www.easyship.com/legal/privacy) and inform you either by email or by a notification on your Easyship account. If you continue to use Easyship Services after these changes, you agree to the revised policy.

We will, in the best of our efforts, keep your Personal Information accurate and up-to-date with the most recent you provide to us. If you wish to have access to your Personal Information, provided that this is allowed by law, we will disclose your Personal Information to you.

2. How to keep your Personal Information secure?

Easyship is committed to use the best procedures, tools and techniques set by industry standards in order to guarantee the security of your Personal Information.

At the same time, since there is no method that guarantees 100% security in case of transmission of information over the internet, you are advised to keep your password safe and make sure to prevent any unauthorized access to your Easyship account and Personal Information. In case you use a third-party device to access your account, you shall log out once your session is finished.

We endeavor to protect your Personal Information and your account privacy, but unfortunately, we cannot guarantee complete security.

3. Purpose of Collection

In order to gain access to the features offered by the Website or our Services, it may be necessary for Users to provide us with Personal Information. It is your voluntary decision as to whether or not to provide the information as requested on the Website. However, if you do not provide such information and/or data, we may not be able to provide certain Services, and your use of the Website and our Services would be limited as a result. Easyship collects and processes Personal Information for the following purposes, on the lawful bases described in Section 3A below:

• Service delivery: creating and managing your account, generating labels, processing payments, providing customer support, and operating the Easyship platform and APIs.

• Transactional communications: account, shipment, billing, security, legal and policy-change notices via email, SMS, telephone and in-product notification.

• Marketing and sales outreach: sending you information about Easyship's products, features, offers, events, research and educational content via email, SMS, telephone (including AI-assisted or pre-recorded calls where lawful), in-app notifications and targeted advertising. Where required by applicable law (in particular for SMS and automated calls in certain jurisdictions), we rely on your prior consent; otherwise we rely on our legitimate interests in promoting our services to relevant business contacts. You can opt out at any time as described in Section 12A.

• Lead qualification and enrichment: enriching account and prospect records with data from third-party providers (firmographic, technographic and business-contact information such as job title, seniority, company size, industry, LinkedIn URL and business phone number) for the purposes of identifying, scoring, segmenting and contacting potential business customers in a business or professional capacity.

• Website-visitor identification: using third-party tools to identify the business associated with visitors to www.easyship.com (and related domains) based on IP address, device characteristics and browsing behaviour, and to enrich those records with publicly available business-contact information, for B2B sales and marketing purposes.

• Call and meeting recording: recording, transcribing and analysing telephone calls, video meetings and AI-agent conversations for training, quality assurance, coaching, dispute resolution and compliance.

• Product analytics and improvement: understanding how the Services are used to improve them, including aggregate and de-identified analytics.

• Security and fraud prevention: detecting, investigating and preventing fraud, abuse and security incidents.

• Legal and regulatory compliance: meeting our obligations under applicable law, responding to lawful requests and protecting our and others' legal rights.

We will not use your Personal Information for materially new purposes without providing notice and, where required by law, obtaining your consent.

3a. Use of Automated Decision-Making Technology and AI.

Easyship uses automated decision-making technology — including algorithms, machine learning and AI models (collectively, "ADMT") — in connection with the Services. We use ADMT to: (i) prevent fraud, abuse and security incidents; (ii) triage customer-support enquiries and assist our customer-support agents; (iii) score and qualify sales leads; (iv) personalise marketing communications and product recommendations; (v) generate and deliver outbound calls, SMS and emails through AI-assisted voice agents and similar tools; and (vi) transcribe, summarise and analyse recorded calls and meetings for training, quality assurance and dispute resolution.

We do not use ADMT to make decisions that produce legal effects on you, or similarly significant effects, without preserving your right (where required by applicable law, including GDPR Article 22 and California's ADMT regulations) to obtain meaningful human review of the decision, express your point of view, and contest the decision.

Where Easyship engages service providers that use AI to deliver services to Easyship (including AI voice agents and enrichment providers), Easyship contractually requires those providers to process your Personal Information only for the purposes of providing services to Easyship and to comply with applicable data-protection laws. Easyship does not authorise these providers to use your Personal Information to develop their own general-purpose AI products or to train their general-purpose AI or machine-learning models for the benefit of third parties.

‍
4. What Personal Information of the senders do we collect and when?

Senders are Users, individuals authorized by a User to access such User’s account, and in general anybody who use our Services to ship items. In order to facilitate our provision of Services, we collect Personal Information from senders as follows:

• first and last name;
• company name;
• contact number;
• email address;
• physical address for billing and pickup; and
• credit card or PayPal details.

In the event that you are a sender of Easyship, Easyship shall collect the data in respect of the browser and device you access our Service with, your IP address, network connection, and the date and time of when you visit our Website. This information is used to improve our service and to provide you with relevant information of your account.

We collect the above Personal Information when you sign up for our Services, access our Services, activate our Services from a partner’s website, and at any time you update your Personal Information on your Easyship account.

5. What Personal Information about the recipient do we collect and when?

Easyship further collects Personal Information regarding the recipients of Shipments as follows:

• first and last name;
• company name;
• contact number;
• email address; and
• physical address.

We may share the above information with third-party companies that we use to provide our Service, including but not limited to couriers, shipping companies, and insurance companies, in order to ensure that the Shipment are correctly delivered to the recipients on a timely manner. We may also contact the recipients using the above information to notify and keep them updated regarding the information of Shipment (i.e. tracking number, courier company, and delivery status updates), to obtain feedbacks in respect of the courier service, suggestions for improvement of our Service, and any information that may facilitate the delivery of the Shipment.

The above information of recipients may be collected from senders when scheduling a Shipment, when a partner’s client uses our Services to ship, or when a recipient of Shipment contacts us to change any information regarding the delivery of the Shipment.

6. What Personal Information about Partners we collect and when?

Partners are individuals, or businesses that, have agreed to the Easyship terms of service on the following page of our Website www.easyship.com/terms (“Terms of Service”) and to join our partners program to combine efforts with us in:

• promoting and providing Easyship Services to their clients, users, visitors, or in general anyone in their community;
• referring clients to Easyship;
• integrating with our Website in providing our Services to their clients on their respective platforms; or
• developing applications using our Easyship API.

We may collect the following information about our partners and their clients:

• first and last name;
• company name;
• contact number;
• email address;
• physical address for billing and pickup; and
• credit card or PayPal details.

In addition to the categories already listed (name, company, contact number, email, physical address, payment details), Easyship may also collect or generate the following categories of Personal Information about senders, recipients and partners:

• Professional information: job title, seniority, department, business LinkedIn profile, business phone number, business email — collected directly or obtained from third-party enrichment providers.

• Firmographic and technographic information: company size, estimated revenue, industry, country, ecommerce platform and other technologies in use, marketplace presence — obtained from third-party providers.

• Online identifiers and device data: IP address, user-agent, device fingerprint, cookie IDs and similar identifiers used for website-visitor identification, analytics and security.

• Communications content: contents and recordings/transcripts of calls, video meetings, in-product chats and emails between you and Easyship (or its AI agents).

• Consent and preference data: marketing channel preferences, opt-out status, suppression flags, timestamps and source of consent.

Sensitive Personal Information (as defined under CCPA/CPRA) and Special Category Data (as defined under GDPR/UK GDPR) are not knowingly collected or used by Easyship for marketing or enrichment purposes. Where any Personal Information collected through call or video-meeting recordings might constitute Sensitive Personal Information under California law, you may request that Easyship limit its use as described in Section 12.

Mobile telephone number, SMS opt-in / consent data and call-recording transcripts are not shared with third parties or affiliates for those third parties' independent marketing or promotional purposes. They are used only by Easyship and its service providers acting under written contract for service delivery, transactional communications, quality assurance and the marketing activities that lawfully apply to you.

Easyship processes the business-contact and firmographic information listed above on the basis of its legitimate interests in promoting Easyship's services to relevant business contacts (consistent with Recital 47 of the GDPR and equivalent provisions of the UK GDPR and other applicable laws). This processing is limited to information used in a business or professional capacity, is balanced against your rights and interests, and is subject to your right to object at any time as described in Section 12.

‍

6A. Sources of Personal Information.

Easyship obtains Personal Information from the following categories of sources, in each case in accordance with this Privacy Policy and the Easyship Terms of Service:

• Directly from you, when you sign up, use the Services or contact us.

• From your devices and browsers, when you visit our Website or use the Services.

• From your authorised users, partners, integrations and the recipients of your shipments.

• From third-party data providers and publicly available sources (including B2B contact databases, business directories, technographic providers, visitor-identification tools, social networks and verification services), used for sales, marketing and lead scoring.

• From Easyship's service providers (for example, payment processors, identity verifiers and fraud-prevention partners).

‍

6B. Disclosures for business purposes.

Easyship discloses Personal Information to the following categories of third parties for business purposes: (i) carriers, customs brokers and fulfilment partners (to provide the Services); (ii) payment processors and tax authorities; (iii) cloud, hosting and infrastructure providers; (iv) CRM, email, SMS and AI voice / dialler providers used to deliver marketing, sales and customer communications, including Transactional Communications; (v) data enrichment, visitor-identification and email-validation providers; (vi) professional advisers and auditors; (vii) regulators, law enforcement and courts where required by law; and (viii) parties to a corporate transaction (merger, acquisition, financing or insolvency).

Easyship does not "sell" Personal Information for money. To the extent that Easyship's use of third-party enrichment, visitor-identification or cross-context behavioural advertising tools constitutes a "sale" or "sharing" of Personal Information under the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA), you may exercise your right to opt out by emailing privacy@easyship.com with the subject line "Do Not Sell or Share".

‍
7. Cookies and other tracking technologies

Easyship and its service providers use cookies, pixels, SDKs, server logs and similar technologies (collectively, "Tracking Technologies") on the Website and within the Services. These Tracking Technologies fall into the following categories: strictly necessary, performance / analytics, functional, marketing / targeting, and visitor-identification.

Visitor-identification tools (for example, RB2B and similar) match IP addresses, device characteristics and behavioural signals against third-party databases to identify the business — and, where available, the individual business contacts — associated with visits to the Website. Easyship uses this information for B2B sales and marketing outreach as further described in Section 3.

Where required by applicable law (including the EU/UK ePrivacy regime, the German TTDSG, French Article 82 of the Data Protection Act, and California CCPA/CPRA for "sharing"), non-essential Tracking Technologies — including visitor-identification, marketing and analytics cookies — are loaded only after you give consent through the Easyship cookie banner. You can change your preferences at any time via the cookie settings link in the Website footer or by emailing privacy@easyship.com.

A current list of the Tracking Technologies used by Easyship is available at www.easyship.com/legal/data-usage-and-cookies.

‍
8. How Easyship uses Personal Information

Easyship uses your Personal Information only for the purposes set out in this Privacy Policy and on the lawful bases described herein. Easyship does not sell your Personal Information for money, and Easyship does not share Personal Information with third parties so that those third parties may market their own products or services to you independently of Easyship.

Easyship's use of third-party tools for analytics, advertising, lead enrichment and visitor identification is described in Sections 3, 6B and 7. To the extent that any such use constitutes a "sale" or "sharing" of Personal Information under California law, you may opt out as described in Section 12.

9. Sharing Personal Information with third parties

At all times, the sharing of any information collected by Easyship shall be done in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) and may be transferred as set out herein:

Easyship works with third parties to provide our Services to our shippers, users and we may share Personal information with them to guarantee the fulfillment of our Services. Examples of third-party companies are our listed couriers, shipping companies, insurance companies, payment providers and customer communication tools. We may also receive Personal Information from our partners and third parties. In all instances, only necessary Personal Information fields will be shared.

Sometimes we may also be required to share Personal Information with third parties to comply with legal requirements or to respond to requests by public authorities, including to meet national security or other requirements. Personal information may be shared with third parties to prevent or investigate activities that are suspected to be illegal, fraudulent or in violation of the law or of our Terms of Service. Personal Information may be shared with accounting firms if required for purposes of auditing by the law.

Personal Information may be shared with a company that acquires our business, whether through acquisition, merger, or any other similar transaction.

In the event that Easyship is required to share your Personal Information with third parties for purposes other than those described in this section, we may request for your approval prior to sharing such information.

In the context of an onward transfer Easyship has responsibility for the processing of personal information it receives under the Data Privacy Framework and subsequently transfers to a third party acting as an agent on its behalf. Easyship shall remain liable under the Principles if its agent processes such personal information in a manner inconsistent with the Data Privacy Framework Principles, unless the organization proves that it is not responsible for the event giving rise to the damage.

In addition to the courier, insurance, payment and customer-communication providers already disclosed, Easyship shares Personal Information with the categories of third parties listed in Section 6B (Disclosures for business purposes). Where Personal Information is transferred outside its country of origin, transfers are made under appropriate safeguards (such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum, the EU–U.S. and UK–U.S. Data Privacy Framework, or other lawful transfer mechanisms) and are governed by Easyship's Data Processing Agreement, available at www.easyship.com/legal/dpa.

Easyship requires its service providers, sub-processors and AI agent vendors, by written contract, to: (i) process Personal Information only on documented instructions; (ii) maintain appropriate technical and organisational security; (iii) honour opt-out, suppression and deletion requests received via any channel — through automated, real-time suppression for electronic channels where reasonably practicable, and in any event within ten (10) business days, or such shorter period as applicable law requires; and (iv) assist Easyship with data-subject rights requests.

9A. Data retention

Easyship retains Personal Information only for as long as is necessary to fulfil the purposes for which it was collected, including to provide the Services, satisfy legal, accounting and reporting requirements, and resolve disputes. As a general guide:

• Account data: for the lifetime of the account, plus seven (7) years after closure (to satisfy tax, customs and commercial-law record-keeping).

• Shipment data: for the lifetime of the shipment record, plus seven (7) years.

• Marketing and prospect data: until you opt out, after which suppression-only records are retained indefinitely to honour your opt-out.

• Call recordings and transcripts: typically 24 months from the date of the call, or longer where required to investigate a dispute or comply with a legal hold.

• Visitor-identification data: typically 12 months from the date of last activity.

Specific retention periods may vary by jurisdiction and are documented in Easyship's internal Records Retention Schedule. Where local law requires shorter retention, that shorter period applies.

10. Security

The security of Users’ personal information is important to Easyship. Easyship will strive to ensure that any and all personal information will be protected against unauthorized access. Easyship has implemented the appropriate electronic and managerial measures in order to safeguard, protect and secure Users’ personal information.

All personal information and data provided by our Users are only accessible by the authorized personnel of Easyship or its authorized third parties, and such personnel shall be instructed to observe the terms of this Policy when accessing such personal information and data. Users may rest assured that their personal information and data will only be kept for as long as is necessary to fulfill the purpose for which it is collected, unless Users request Easyship to cease to hold the same or terminate his/her membership account with Easyship. Such requests may render Easyship unable to further provide its services, information and/or promotional materials for your benefit in the future.

The Website allows Users to make payment for their Shipments by way of Paypal or other third party checkout options. In the event that Users choose to use Paypal or a third-party checkout option to make payments, its respective privacy statement and security practices shall apply to information collected via the transaction. Easyship encourages our Users to read the Privacy Policy of Paypal or such third party site prior to providing any information regarding payment.

Easyship follows generally accepted industry standards to protect the personal information and data submitted by Users to the Website, both during transmission and once Easyship receives it. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while Easyship strives to protect Users’ personal information and data against unauthorized access, Easyship cannot guarantee its absolute security.

11. Jurisdiction and Cross-Border Transfer

As Easyship provides Services to Users on a global scale, Users acknowledge that Personal Information may be stored and processed in any country where Easyship operates and/or engages third party companies in providing services as set out herein. Easyship may transfer Personal Information to countries including the United States, Singapore, and such other countries as may be from time to time determined by Easyship, of which the data protection rules may be different from the country of domicile of the User. Easyship endeavours to take necessary measures to ensure that any transfer of Personal Information complies with the applicable data protection laws and the Personal Information remains protected to the standards as described in this Policy. In certain circumstances, courts, law enforcement agencies, regulatory agencies or security authorities in those other countries may be entitled to access your Personal Information.

12. Access to your Personal Information

Easyship extends the personal data rights as outlined in the GDPR to all users. Easyship allows you to view, update or delete many of your Personal Information, such as username, password, personal first and last name, company name, email address, physical address, phone number, and payment information, from your account settings.

If you wish to access or remove any Personal Information that are not available from the account settings, have any questions about our Policy, or if you wish to make a complaint about our collection, use, or disclosure of your information under this Policy, please contact our Data Protection Officer at dpo@easyship.com. We will use our reasonable endeavors to address any request or question you may have as soon as possible.

Easyship abides by all requirements of EU Regulation 2016/679 (“GDPR”). Check here how Easyship is GDPR compliant.

Easyship and our subsidiary GoSincro Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Easyship has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Easyship has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) Program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Easyship commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.

The Federal Trade Commission has jurisdiction over Easyship’s compliance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

In accordance with our commitment to safeguarding your data privacy, we want to ensure that you are aware of your rights under the Data Privacy Framework (DPF). In certain circumstances, individuals have the option to invoke binding arbitration as stipulated in Annex I of the DPF Principles. If you wish to initiate binding arbitration, please notify us by delivering a formal notice to Easyhip (dpo@easyship.com) and follow the prescribed procedures and conditions outlined in Annex I of the Principles. We are obligated to adhere to the terms specified in Annex I once an individual has properly invoked the binding arbitration process. Your privacy and rights remain paramount to us, and we are dedicated to upholding the DPF Principles to protect your data.

As stated in this policy, your personal information is kept strictly confidential and will not be shared or sold to third parties except as necessary to deliver our services. In the event Easyship will need to share information outside of our normal services, we will offer individuals the opportunity to choose (opt-out) whether their Personal Information is (a) to be disclosed to a third party acting as a controller, or (b) to be used for a purpose that is materially different from the purpose for which it was originally collected or subsequently authorized by the individual. Requests to opt out of such uses or disclosures of Personal Information should be sent to dpo@easyship.com with the subject line: “Opt Out” from the email address they used upon registration. For sensitive personal information, Easyship will give individuals the opportunity to affirmatively and explicitly consent (opt-in) to the disclosure of their Sensitive Personal Information to (a) a third party acting as a controller or (b) the use of the information for a purpose other than the purpose for which it was originally collected or subsequently authorized by the individual. Easyship will provide individuals with reasonable (especially clear and conspicuous, readily available) mechanisms to exercise their choices.

Subject to applicable law, you have the right to: (i) access the Personal Information Easyship holds about you; (ii) request correction of inaccurate Personal Information; (iii) request deletion or erasure; (iv) restrict or object to certain processing; (v) data portability; (vi) withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal; and (vii) lodge a complaint with your local data-protection authority (in the UK, the Information Commissioner's Office; in the EU, your national DPA; in Brazil, ANPD; in Hong Kong, the PCPD).

Residents of California additionally have the right under the CCPA/CPRA to: (a) know the categories and specific pieces of Personal Information Easyship collects, the sources, business purposes and recipients; (b) request deletion; (c) request correction; (d) opt out of the "sale" or "sharing" of Personal Information; (e) limit the use of Sensitive Personal Information; and (f) not be discriminated against for exercising these rights. To exercise (d) or (e), use the "Do Not Sell or Share My Personal Information" and "Limit the Use of My Sensitive Personal Information" links in the Website footer, or email privacy@easyship.com.

To exercise any right, contact privacy@easyship.com. Easyship may need to verify your identity. Easyship will respond within the period required by applicable law (typically 30 days under the GDPR/UK GDPR; 45 days under the CCPA/CPRA, extendable once by a further 45 days where reasonably necessary).

For users in Brazil, this section provides additional details regarding Easyship’s privacy practices required under Brazil’s General Data Protection Law (Lei Geral de Proteção de Dados - LGPD).

This session applies to the processing of personal data subject to the General Data Protection Law (Law nº 13.709 / 18), namely: (a) when the treatment operation is carried out in Brazil; (b) when the processing activity is aimed at offering or providing goods or services or the processing of data from individuals located in Brazil; or (c) when the personal data object of the treatment has been collected in Brazil.

1. Responsible for the processing of personal data and transfers

Easyship is the controller of the personal data collected in connection with the use of Easyship services in Brazil.

1. Data Supervisor contact

The Easyship Data Protection Officer in Brazil can be reached via email dpo@easyship.com

1. Bases for processing

Easyship collects and uses personal data only when there are legal grounds for doing so. This includes processing personal data: (i) to provide the services and offer the requested resources; (ii) based on the consent of the holder; (iii) for the fulfillment of a legal or regulatory obligation; (iv) for the regular exercise of rights in judicial, administrative or arbitral proceedings; (v) for the protection of life or physical safety of the user or third party; (vi) to serve the legitimate interests of Easyship or third party; (vii) for security and fraud prevention and (viii) for credit protection.

1. Data subject's rights

In the processing of personal data subject to the General Data Protection Law, the holders have the following rights:

• Confirmation of the existence of personal data processing by Easyship;
• Access to personal data processed by Easyship;
• Correction or updating of personal data in the Easyship database;
• Anonymizing, blocking or deleting unnecessary, excessive or processed data in non-compliance with the provisions of the LGPD;
• Data portability;
• Elimination of personal data processed with consent;
• Information about personal data shared by Easyship with third parties;
• Information about the possibility of not providing consent for the processing of data personal effects and the consequences of denial;
• revocation of consent;
• Opposition to the treatment carried out based on one of the hypotheses of exemption from consent, in case of non-compliance with the provisions of the LGPD;
• Automated decision review.

To exercise your rights above, please contact dpo@easyship.com.

12A. Communications preferences.

Independently of the data-subject rights in Section 12, you can manage how Easyship contacts you at any time:

• Email: click "unsubscribe" in any marketing email; reply STOP to any sales email that does not contain an unsubscribe link; contact our support team; or update preferences in your account settings.

• SMS: reply STOP to any marketing SMS.

• Telephone (including AI-assisted calls): tell the caller during the call to stop contacting you (including telling an AI agent "stop", "do not contact me", "opt me out" or similar); or email privacy@easyship.com.

• All marketing: email privacy@easyship.com with the subject line "Opt Out – Marketing".

Opting out of marketing does not stop service-related Transactional Communications (for example, shipment status, billing, security and policy notices), which Easyship sends while your account is active. Easyship and its service providers will action opt-out requests through automated, real-time suppression for electronic channels (email, SMS, in-product) where reasonably practicable and in any event within ten (10) business days (or such shorter period as applicable law requires).

13. What happen to your Personal Information when you terminate working with us?

In case your account is terminated or you cease using our Services, we will keep record of your Personal Information in accordance with our Privacy Policy or as permitted by law.

You can find more information about how Easyship is compliant to the GDPR, how Easyship processes your data, and how Easyship is certified for the Data Privacy Framework (DPF) for both the EU-US and the UK Extension to the EU-US, and the Swiss-US Frameworks through the below links:

• Easyship & GDPR
• Easyship Data Processing Agreement

‍