Last updated: May 4, 2026
01.Introduction
Xpandity.com SRL ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal data through our tracking, shipping and fulfillment management platform.
This policy applies to all users of our platform, including merchants, their customers, and anyone interacting with our services. If you do not agree with our privacy practices, please do not use our platform.
02.Data We Collect
We collect the following categories of personal data:
Merchant Account Information
Name, email address, logo to provide a personalized experience and to send branded shipping notifications to customers. This is the minimum information we require to create an account and operate the platform.
Order & Shipment Data
When merchants use our platform, we collect customer names, email addresses, phone numbers, shipping addresses, order contents, product details, and pricing information from Shopify, WooCommerce, or other ecommerce platforms in order to process and fulfill shipments. This information is stored for a limited amount of time to allow for shipment tracking and customer support, and is retained in accordance with our data retention policy.
Tracking & Fulfillment Data
Tracking numbers, carrier information, shipment status, geolocation data (if provided by carriers), delivery confirmations, and return information. This data is kept for a maximum of 1 year after creation of the shipment.
Usage & Device Data
Log data, IP addresses, browser type, device information, and platform usage patterns to improve our services and ensure security. This data is anonymized and aggregated for analytics purposes, and is retained for a maximum of 30 days.
03.How We Use Your Data
We use your personal data for the following purposes:
- •Order Fulfillment: Processing, managing, and fulfilling shipments for merchants and their customers.
- •Carrier Integration: Communicating with shipping carriers to obtain and track shipment information.
- •Customer Notifications: Sending tracking updates, delivery confirmations and return information to customers.
- •Platform Operations: Managing accounts, billing, technical support, and platform improvements.
- •Compliance & Security: Meeting legal obligations, preventing fraud, and protecting our platform.
- •Analytics: Understanding how our platform is used to improve functionality and user experience.
04.Data Sharing & Third Parties
We do not sell your personal data. However, we share data with the following third parties to provide our services:
Shipping Carriers
We share shipment details and tracking information with carriers (DHL, UPS, FedEx, DPD, etc.) to fulfill deliveries and provide tracking updates.
Ecommerce Platforms
We integrate with Shopify, WooCommerce, and similar platforms via their APIs to retrieve order data and write back tracking information.
Service Providers
We engage Akamai as a third-party service provider for hosting, as well as Stripe for payment processing. All providers are contractually obligated to protect your data.
Legal Compliance
We may disclose data when required by law, regulation, or valid legal process, or to protect the rights and safety of our company, users, and the public.
05.Data Retention
We retain personal data for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:
- •Active Accounts: While your account is active, we retain your data to operate the platform.
- •Historical Data: After unenrollment of a merchant, we retain grouped shipment (without personal data) and transaction records for 7 years for accounting, audit, and legal compliance purposes (as required by Belgian and EU law).
- •Customer Tracking: Public tracking pages remain accessible for 4 months after the shipment is created. The underlying record is retained internally for up to 1 year.
06.Your Privacy Rights (GDPR)
If you are located in the European Union, United Kingdom, or other jurisdiction with similar privacy laws, you have the following rights:
Right of Access (Article 15)
You can request a copy of the personal data we hold about you.
Right to Rectification (Article 16)
You can request correction of inaccurate or incomplete personal data.
Right to Erasure (Article 17)
You can request deletion of your personal data, subject to legal retention obligations.
Right to Restrict Processing (Article 18)
You can request that we limit how we use your data in certain circumstances.
Right to Data Portability (Article 20)
You can request your data in a structured, machine-readable format and have it transferred to another service.
Right to Object (Article 21)
You can object to certain types of processing of your data.
To exercise any of these rights, contact us at logistics@xpandity.com with "GDPR Request" in the subject line. We will respond within 15 days.
07.Data Security
We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include:
- •Encryption of data in transit (TLS/HTTPS) and at rest
- •Secure storage of API credentials and access tokens
- •Regular security audits and penetration testing
- •Access controls and role-based permissions
- •Employee training on data privacy and security
While we strive to protect your data, no method of transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.
08.Data Controller & Contact Information
The data controller for personal data processed through our platform is:
Xpandity.com SRL
Rue Ruy 41
4400 Flemalle
Belgium
VAT: BE0473523118
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us using the information above.