en
ua
USD
UAH
Log in Sign up

Privacy Policy

Last updated: October 12, 2026

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and what rights you have regarding your data.

This Policy applies to the smartyparcel.com website, the app.smartyparcel.com web application, the API, and SmartyParcel plugins and apps for WooCommerce and Shopify (together, the “Service”). The Service is provided by individual entrepreneur (FOP) Babinets K. M. (hereinafter “SmartyParcel”, “we”).

We process data in two roles:

  • as a controller — for data of website visitors, our customers and their users, support requests, payments, and plugin telemetry. This Policy applies to such data;
  • as a processor — for order, buyer, and recipient data that we process on behalf of online stores. This processing is governed by the Data Processing Agreement (DPA) (see clause 1.6).

1. What data we collect

We may collect the following information:

1.1. When you use our website:

  • Name and email (if you contact us or place an order)
  • Technical information: IP address, browser type, pages visited (via analytics services)
  • Shipment number, if you use the parcel tracking page

1.2. When you use our WordPress plugins:

  • URL of the site where the plugin is installed
  • Plugin version
  • Server IP address
  • Administrator email, store country and currency
  • Reason for plugin deactivation (if provided)
  • Additional comment (optional)

1.3. When you register and use the SmartyParcel platform:

  • Name or company name, email, phone number, password (in hashed form)
  • Data of connected services: store address, API keys and access tokens for the store, carrier accounts, and SMS services
  • Billing: selected plan, history of payments, wallet top-ups and charges. Payment card data is processed by the payment provider — we do not receive or store the full card number
  • Technical logs: date and time of logins, IP addresses, API requests, integration errors

1.4. When you contact support: correspondence via chat, email, or Telegram, and any data you provide to resolve your issue.

1.5. Data we process on behalf of stores. When a store connects SmartyParcel (installs a plugin or app, issues API keys), it instructs us to receive orders and products and, based on them, to create shipments, track delivery, and send notifications. For this purpose we process full name, phone number, email, delivery address or branch, order contents and amount, and shipment and tracking data. The full list is in Annex 1 to the DPA.

1.6. In the case described in clause 1.5, the store is the data controller: it is the store that collects buyers’ data at checkout. We process this data only on the store’s instructions, and we do not sell it or use it for our own marketing. If you are a buyer or a parcel recipient and want to access, correct, or delete your data, please contact the store where you placed your order. If you write to us, we will forward your request to the store and help fulfil it.

2. How we use data

We use the collected data to:

  • Provide and improve our products and services, including integrations with stores and carriers
  • Accept payments, maintain the wallet, and keep accounting records
  • Analyze plugin usage and improve user experience
  • Understand the reasons for plugin deactivation
  • Respond to your inquiries and support requests
  • Send service notifications (changes to terms, payments, maintenance)
  • Ensure the security of the Service and prevent abuse
  • Send news and newsletters — only with your consent; you can unsubscribe at any time

3. Legal bases

We process data on the basis of:

  • Performance of a contract — the public offer (registration, provision of the Service, payments, support)
  • Your consent (for example, when you optionally leave a comment, for plugin telemetry, analytics cookies, and newsletters)
  • Our legitimate interest in improving the quality of our products and ensuring their stable and secure operation
  • Legal requirements (for example, tax accounting)

We process the data described in clause 1.5 on the store’s instructions in accordance with the DPA; the legal basis for collecting it is determined by the store itself.

4. Data sharing

We do not sell or share your personal data with third parties, except:

  • Carriers (Nova Poshta, Ukrposhta, Rozetka Delivery, Meest, DHL, Nova Global, and others) — shipment data, when a customer creates a shipment. Carriers process it under their own rules
  • Services the customer has connected themselves (the store platform, the TurboSMS and SMSfly SMS services)
  • Cases provided for by law
  • Where necessary to protect our rights or the safety of users

5. Where data is stored

Service data is stored on servers in Germany (EU). Certain partners process data in Ukraine. Carriers, including DHL and Nova Global for international shipments, may process data in other countries. We transfer data abroad only to the extent needed to operate the Service or deliver shipments, and in accordance with data protection laws.

6. Cookies

Our website uses cookies to improve functionality and analyze traffic:

  • essential — for signing in to the Service, saving your language, and security; the Service will not work without them;
  • analytics — to understand how visitors use the website; for visitors from countries where the law requires it, they are set only with consent.

You can disable cookies in your browser settings.

7. Data retention

We keep data only for as long as necessary for the stated purposes or as required by law:

Data Retention period
Account and settings While the account is active, and 3 months after its deletion
Order, buyer, and recipient data In accordance with Section 10 of the DPA
Payments and invoices For the periods established by tax and accounting laws
Support requests Up to 2 years after the last message
Technical logs Up to 12 months
Plugin telemetry Up to 2 years
Newsletter data Until you unsubscribe or withdraw consent

8. Data protection

We use encryption of data in transit (HTTPS/TLS), access control, storage of passwords in hashed form, access logging, and backups. Only people who need access for their work have access to data. In the event of an incident affecting your data, we will notify you within the time limits set by law, and our customers within the time limits set by the DPA.

9. Your rights

You have the right to:

  • Request access to your data and receive a copy of it
  • Request its correction or deletion
  • Request restriction of processing or object to it
  • Receive your data in a structured format
  • Withdraw your consent (if given)
  • Contact us with any privacy questions
  • Lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with the data protection authority in your country

To exercise your rights, write to support@smartyparcel.com from the email address linked to your account. You can also edit or export your data or delete your account yourself in the Service. We respond within 30 days. For buyer and recipient data, see clause 1.6.

10. Minors

The Service is intended for online stores, sellers, and other businesses, not for personal use. We do not provide access to the Service to persons under 18 years of age.

11. Changes to this Policy

We may update this Policy. The date of the last update is shown at the top of the page. We notify customers of material changes by email or in the Service at least 15 days before they take effect.

12. Contacts

For any questions regarding this Privacy Policy, please contact us: