Effective Date: March 21, 2026

Ship Zone Inc. (“Ship Zone,” “we,” “us,” or “our”) respects the privacy of our Customers, merchants, sellers, users, Shipment recipients, consignees, website visitors, business contacts, and other individuals whose Personal Information may be processed through our Services.

This Privacy Policy (“Policy”) describes how Ship Zone collects, receives, accesses, uses, processes, stores, safeguards, shares, transfers, retains, and deletes Personal Information in connection with our websites, applications, shipping platform, APIs, e-commerce integrations, marketplace integrations, parcel shipping, freight, ocean freight, logistics-management Services, customer support, and related services (“Services”).

This Policy should be read together with our Terms of Service and, where applicable, our Data Processing Agreement.

Ship Zone handles Personal Information in accordance with applicable Canadian privacy laws.
Depending upon the circumstances, these may include:

• The Personal Information Protection and Electronic Documents Act (“PIPEDA”);
• Applicable provincial private-sector privacy legislation; and
• Other privacy or data-protection laws applicable to particular information or activities.

Where multiple privacy requirements apply, Ship Zone will endeavour to comply with the requirements applicable to the relevant Processing activity.

Where PIPEDA applies, Ship Zone’s privacy program is intended to reflect principles relating to:

• Accountability;
• Identifying purposes;
• Consent;
• Limiting collection;
• Limiting use, disclosure, and retention;
• Accuracy;
• Safeguards;
• Openness;
• Individual access; and
• Challenging compliance.

Depending upon the circumstances, Ship Zone may act as:

• An organization determining its own purposes for Processing Personal Information; or
• A service provider Processing information on behalf of a business Customer.

For example, Ship Zone may independently process information for billing or security while processing a merchant’s recipient information solely to create and deliver a Shipment.

Ship Zone is responsible for Personal Information under its control in accordance with applicable law.
Ship Zone designates responsibility for privacy compliance to its privacy contact.
Questions or concerns may be directed to: info@shipzone.ca (Subject: Privacy Request).

Depending upon your interaction with Ship Zone, we may collect:

• Name;
• Business name;
• Job title;
• Email address;
• Telephone number;
• Billing address;
• Pickup address;
• Delivery address;
• Return address;
• Account credentials;
• Business information;
• Shipment information;
• Transaction information;
• Payment-related information;
• Customs information;
• Marketplace information;
• Support communications;
• Technical information; and
• Other information reasonably necessary for the Services.

When establishing an Account, Ship Zone may collect:

• User name;
• Business name;
• Business address;
• Email address;
• Telephone number;
• User identifiers;
• Account permissions;
• Account preferences;
• Verification information; and
• Billing information.

Shipment information may include:

• Sender name and address;
• Recipient name and address;
• Telephone numbers;
• Email addresses where required;
• Tracking number;
• Carrier;
• Package weight;
• Package dimensions;
• Commodity description;
• Declared value;
• Country of origin;
• HS classification;
• Customs documentation;
• Freight information;
• Delivery instructions;
• Shipment status; and
• Proof-of-delivery information.

A Shipment recipient may not have a direct relationship with Ship Zone.
Our business Customer may provide the recipient’s Personal Information so Ship Zone can provide shipping and fulfillment Services.
The Customer providing this information is responsible for having an appropriate lawful basis to provide it.

Ship Zone may process:

• Charges;
• Payments;
• Refunds;
• Credits;
• Billing history;
• Carrier adjustments;
• Account balances;
• Invoice information; and
• Chargeback information.

Payment-card information may be processed by third-party payment processors.
Ship Zone may not receive or retain complete card information where submitted directly to the payment provider.

Ship Zone may automatically collect:

• IP address;
• Browser type;
• Device type;
• Operating system;
• Login information;
• Session activity;
• Date and time;
• Pages accessed;
• Features used;
• API activity;
• Error logs;
• Security logs; and
• Similar technical information.

This information may be used for:

• Authentication;
• Security;
• Fraud prevention;
• Performance;
• Analytics;
• Troubleshooting; and
• Service improvement.

Where Customer authorizes an integration, Ship Zone may receive:

• Seller identifiers;
• Store identifiers;
• Order identifiers;
• Order details;
• Recipient information;
• Delivery information;
• Shipment information;
• Fulfillment status;
• Tracking information; and
• Other information permitted by the integration.

Ship Zone may integrate with Amazon’s Selling Partner API (“SP-API”).
Depending upon Customer authorization and applicable permissions, Ship Zone may process:

• Seller identifiers;
• Order identifiers;
• Order information;
• Shipment information;
• Fulfillment information;
• Recipient information where authorized;
• Delivery addresses where authorized;
• Tracking information; and
• Other authorized Amazon Information.

Ship Zone will use Amazon Information only for permitted and authorized purposes including:

• Importing eligible orders;
• Processing fulfillment;
• Comparing shipping options;
• Preparing Shipments;
• Generating labels;
• Transmitting information to the selected Carrier;
• Tracking Shipments;
• Updating fulfillment information;
• Providing shipment-related support;
• Maintaining security; and
• Fraud prevention.

Ship Zone does not sell Amazon Information.
Ship Zone will not use Amazon PII for unauthorized marketing or unrelated advertising.

Where Amazon imposes specific retention or deletion requirements on Amazon Information, Ship Zone will apply the applicable Amazon requirement to that information.
Amazon Information will not be retained merely because other Ship Zone records are subject to a longer general retention period.

Ship Zone will maintain safeguards appropriate to applicable Amazon security requirements before processing protected Amazon Information in production.
These controls may address:

• Access control;
• Authentication;
• Encryption;
• Credential security;
• Logging;
• Monitoring;
• Vulnerability management;
• Incident response;
• Secure development;
• Retention; and
• Deletion.

Specific security representations will be made only where the relevant control has actually been implemented.

Ship Zone may use Personal Information to:

• Create Accounts;
• Authenticate users;
• Obtain shipping quotations;
• Generate labels;
• Arrange transportation;
• Manage freight;
• Manage ocean freight;
• Process e-commerce orders;
• Operate integrations;
• Provide tracking;
• Manage fulfillment;
• Process payments;
• Process refunds;
• Process Carrier adjustments;
• Facilitate customs paperwork;
• Provide support;
• Maintain business records;
• Detect fraud;
• Maintain security;
• Process claims;
• Resolve disputes;
• Improve Services;
• Comply with law; and
• Enforce agreements.

Where consent is required, Ship Zone will seek consent appropriate to the sensitivity of the information and the circumstances.
Consent may be express or implied where permitted by applicable law.
Ship Zone will not require consent to Processing that is not reasonably necessary as a condition of providing a product or service, except where permitted by law.

Where Processing is based on consent, an individual may withdraw consent subject to:

• Legal restrictions;
• Contractual restrictions; and
• Reasonable notice.

Withdrawal may affect Ship Zone’s ability to provide certain Services.

Ship Zone seeks to collect Personal Information reasonably necessary for identified legitimate purposes.
Customers should not submit unnecessary sensitive Personal Information.

Ship Zone will use and disclose Personal Information for identified purposes or other purposes permitted or required by law.

Ship Zone may share information necessary to perform a Shipment with:

• Parcel Carriers;
• Postal operators;
• Couriers;
• Freight Carriers;
• Trucking companies;
• Freight forwarders;
• Ocean Carriers;
• Airlines;
• Customs brokers;
• Warehouses; and
• Other logistics providers.

A Carrier may independently process information for:

• Transportation;
• Customs;
• Safety;
• Fraud prevention;
• Regulatory compliance;
• Claims; and
• Legal obligations.

Ship Zone does not control independent Carrier privacy practices.

Ship Zone may share appropriate information with:

• Payment processors;
• Financial institutions;
• Banks;
• Fraud-prevention providers; and
• Related providers.

Ship Zone may use authorized service providers supporting:

• Cloud hosting;
• Data storage;
• Cybersecurity;
• Communications;
• Software infrastructure;
• Customer support;
• Analytics; and
• Business operations.

Where Customer activates an integration, information may be exchanged with the applicable platform as reasonably necessary to provide authorized functionality.

Where Customer purchases insurance or Shipment protection, information may be disclosed to the applicable insurer or protection provider.

Ship Zone may disclose information where reasonably necessary to:

• Lawyers;
• Accountants;
• Auditors;
• Insurers; and
• Other professional advisers.

Ship Zone may disclose Personal Information where required or permitted to:

• Comply with law;
• Respond to lawful governmental requests;
• Respond to court orders;
• Prevent fraud;
• Investigate unlawful activity;
• Protect Ship Zone;
• Protect Customers; or
• Enforce agreements.

Information may be disclosed or transferred in connection with a:

• Merger;
• Acquisition;
• Reorganization;
• Financing;
• Sale of assets;
• Insolvency;
• Change of control; or
• Similar transaction,

subject to applicable law.

Where Ship Zone sends commercial electronic messages, Ship Zone will seek to comply with applicable Canadian anti-spam requirements.
Where required, Ship Zone will use appropriate consent and will provide identification and unsubscribe functionality.
Opting out of marketing does not prevent necessary:

• Transactional messages;
• Shipment notifications;
• Billing communications;
• Security notices;
• Legal notices; or
• Account communications.

Ship Zone may use cookies and similar technologies for:

• Authentication;
• Security;
• Preferences;
• Platform functionality;
• Analytics;
• Performance; and
• Marketing where permitted.

Users may be able to manage cookies through browser settings or other controls Ship Zone provides.
Disabling necessary cookies may interfere with platform functionality.

Ship Zone seeks to keep Personal Information sufficiently accurate, complete, and current for the purposes for which it is used.
Customers are responsible for maintaining accurate Account and Shipment information.

Ship Zone maintains reasonable administrative, organizational, physical, and technical safeguards appropriate to the sensitivity of information and the risks presented.
Safeguards may include:

• Authentication;
• Access restrictions;
• Least-privilege controls;
• Encryption;
• Credential protection;
• Network security;
• Security logging;
• Monitoring;
• Vulnerability management;
• Backup procedures;
• Secure software-development practices;
• Confidentiality obligations; and
• Incident-response processes.

No Internet transmission, software system, network, database, cloud environment, or electronic storage method can be guaranteed to be completely secure.
Ship Zone therefore cannot guarantee absolute security.
Nothing in this section limits obligations that applicable law does not permit Ship Zone to limit.

Ship Zone maintains or will maintain procedures to:

• Identify;
• Contain;
• Investigate;
• Assess;
• Document;
• Remediate; and
• Escalate

privacy and security incidents.
Ship Zone will make applicable notifications where required by Canadian privacy law or binding contractual/platform requirements.

Ship Zone retains Personal Information only for periods reasonably necessary or legally permitted for purposes including:

• Providing Services;
• Accounting;
• Tax;
• Customs;
• Claims;
• Chargebacks;
• Fraud prevention;
• Security;
• Litigation;
• Contract enforcement; and
• Regulatory compliance.

Where Amazon or another platform requires a shorter retention period, Ship Zone will apply the applicable platform requirement to information governed by it.

When Personal Information is no longer reasonably required and continued retention is not legally permitted or required, Ship Zone may:

• Delete it;
• Destroy it;
• De-identify it; or
• Otherwise render it inaccessible.

Subject to applicable exceptions, individuals may request access to Personal Information Ship Zone holds about them.
Requests should be submitted to: info@shipzone.ca (Subject: Privacy Request).

Individuals may request correction of Personal Information that is inaccurate or incomplete, subject to applicable law.

Ship Zone may take reasonable steps to verify:

• The identity of the requester; and
• The requester’s authority to make the request.

Where Ship Zone processes Personal Information solely on behalf of a business Customer, Ship Zone may refer a request to the applicable Customer or assist the Customer with the request.

Privacy complaints may be sent to:

Ship Zone Inc.
Toronto, Ontario, Canada
Email: info@shipzone.ca (Subject: Privacy Complaint)

Ship Zone will review privacy complaints and respond as appropriate under applicable law.

Where a provincial privacy law applies instead of or in addition to PIPEDA, Ship Zone will seek to comply with applicable provincial requirements.

Because Ship Zone operates international shipping and technology Services, Personal Information may be processed outside Canada.
Possible jurisdictions include:

• The United States;
• Costa Rica;
• Countries where Carriers operate;
• Countries where cloud or technology providers operate; and
• Shipment origin, transit, and destination jurisdictions.

Personal Information processed in another jurisdiction may be subject to lawful access by courts, regulators, law-enforcement agencies, or other governmental authorities in that jurisdiction.

Ship Zone provides commercial shipping and logistics Services and is not directed to children.
Ship Zone does not knowingly solicit children’s Personal Information contrary to applicable law.

Where permitted, Ship Zone may create aggregated or de-identified information.
Such information may be used for:

• Analytics;
• Security;
• Fraud prevention;
• Service improvement;
• Capacity planning; and
• Business intelligence.

Links to third-party websites or services are subject to those parties’ privacy and security practices.
Ship Zone does not control independent third-party privacy policies.

To the maximum extent permitted by applicable law, Ship Zone is not responsible for independent privacy or security practices of Carriers, marketplaces, payment providers, government authorities, or other independent third parties after Personal Information has been lawfully disclosed for an authorized purpose.

Customers are responsible for their own compliance with applicable privacy laws.
Customer represents that it has the lawful authority necessary to provide Ship Zone with Personal Information concerning:

• Customers;
• Buyers;
• Recipients;
• Employees;
• Consignees; and
• Other individuals.

Where Ship Zone processes Personal Information on behalf of a business Customer, the Processing may also be governed by Ship Zone’s Data Processing Agreement.

Ship Zone may update this Policy to reflect changes in:

• Services;
• Technology;
• Law;
• Integrations;
• Security practices;
• Carrier relationships; or
• Platform requirements.

The current Policy will display the applicable Last Updated date.

Ship Zone Inc.
Toronto, Ontario, Canada

Privacy Contact: info@shipzone.ca
Website: www.shipzone.ca

For privacy requests: Subject: Privacy Request
For deletion: Subject: Privacy Request – Data Deletion
For Amazon-related matters: Subject: Amazon SP-API Privacy Request