General Data Protection Regulation (GDPR)

Last revised on April 24, 2019, effective as of June 25, 2019

What is it?

The General Data Protection Regulation (GDPR), is a European privacy law approved by the European Commission in 2016 and will go into effect May 25th 2018. The GDPR will replace a prior European Union privacy directive known as Directive 95/46/EC which has been the basis of European data protection law since 1995. The GDPR is an attempt to strengthen, and modernize EU data protection law and enhance individual rights and freedoms, consistent with the European understanding of privacy as a fundamental human right. The GDPR regulates, among other things, how individuals and organizations may obtain, use, store, and remove personal data. In a nutshell, it's giving EU citizens and residents control over their personal data while simplifying the regulatory environment for international business that takes place in the EU.

The Data Protection Principles include requirements such as:

• Personal data collected must be processed in a fair, legal, and transparent way and should only be used in a way that a person would reasonably expect.
• Personal data should only be collected to fulfill a specific purpose and it should only be used for that purpose. Organizations must specify why they need the personal data when they collect it.
• Personal data should be held no longer than necessary to fulfill its purpose.
• People covered by the GDPR have the right to access their own personal data. They can also request a copy of their data, and that their data be updated, deleted, restricted, or moved to another organization.

Why is it important?

GDPR adds some new requirements regarding how companies should protect individuals' personal data that they collect and process. It also raises the stakes for compliance by increasing enforcement and imposing greater fines for breach. Beyond these facts it's simply the right thing to do. At ShippingChimp we strongly believe that your data privacy is very important and we already have solid security and privacy practices in place that go beyond the requirements of this new regulation.

Consent

Consent is collected from the customer at the time of signup for storing information such as email address, phone number, credit card details. We ensure all data is stored in an encrypted format.

Data Inventory

We have reviewed and identified all the areas of ShippingChimp where we are collecting and processing customer data; ShippingChimp collects information such as shipping account details and personal information such as email address, credit card information etc at the time of registration. Under no circumstances will ShippingChimp share any customer information with third party services. ShippingChimp will purge all data associated with the customer when the service is unsubscribed. Our Privacy Policy identifies what we are doing with the data we collect and how we manage consent.

Clear and concise terms of service and privacy policy

At ShippingChimp we practice transparency internally and we believe that transparency extends to our customers. With our updated Terms of Service and Privacy Policy we openly describe what personal data we are collecting, processing, why, how we use it, who we share it with and how long we store it. We have always made an effort to keep the language in our Terms of Service and Privacy Policy as clear as possible and we have updated these notices to describe how we are respecting and protecting your personal data. We hope you find it concise, transparent, intelligible and easily accessible.

Individual Data Subject's Rights - Data Access, Portability and Deletion

We are committed to helping our customers meet the data subject rights requirements of GDPR. ShippingChimp’s algorithms have read-only access to all your shipping data. Our algorithms have been designed to require a minimum number of attributes from your shipping account.

We are aware that if you are working with EU customers, you need to be able to provide them with the ability to access, update, retrieve and remove shipping data. We got you! We are set up to retrieve any shipping data that our customer requires. Our customer support team is here to serve you with your shipping data on request. Please contact us at [email protected].