Effective Date: October 14, 2026

1. Introduction

shipcon s.r.o. ("we", "us", or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website shipcon.sk or use our services.

By using our website and services, you consent to the data practices described in this policy. If you do not agree with the terms of this policy, please do not access the site or use our services.

2. Information We Collect

We may collect personal information that you voluntarily provide to us when you register on our website, express an interest in obtaining information about us or our services, participate in activities on the website, or otherwise contact us. The personal information we collect may include:

Personal Identification: Name, email address, phone number, company name, job title
Shipping Information: Origin and destination addresses, shipment details, tracking numbers
Billing Information: Company and VAT details, billing address, invoice and payment records
Technical Information: IP address, browser type, operating system, device information
Account and Consent Records: your account settings, your choices about optional communications, and the records of your acceptances of these policies
Communication Data: Correspondence with us through email, chat, or phone

3. How We Use Your Information

We use the information we collect in the following ways:

To provide and manage our logistics services
To process transactions and send transaction notifications
To communicate with you about shipments and services
To improve our website, services, and customer experience
To prevent fraudulent activities and enhance security
To comply with legal obligations and regulatory requirements

Legal Basis for Processing (GDPR)

If you are from the European Economic Area (EEA), our legal basis for collecting and using your personal information depends on the context in which we collect it:

Performance of a Contract: When processing is necessary to fulfill our contractual obligations
Consent: Where you have given us explicit permission to process your data
Legitimate Interests: When processing serves our legitimate business interests
Legal Obligations: When processing is required to comply with the law

4. How We Share Your Information

We may share your information with third parties only in the ways described in this policy:

Service Providers: Third-party vendors performing services on our behalf such as email delivery, hosting services, and customer support
Carriers and service providers: the carrier you choose (to carry the shipment), the invoicing provider that issues your invoices, and the hosting and email providers that run this website
Legal Requirements: Where required by law or public authorities
Business Transfers: In the event of merger, acquisition, or sale of assets

We do not sell, rent, or trade your personal information for promotional purposes.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

SSL encryption for data transmission
Per-field encryption: addresses, names, phone numbers and email addresses are encrypted in our database field by field — every stored value carries an encryption-version tag (for example enc:v1) — and the encryption keys are kept separate from the database
Regular dependency updates and internal security reviews
Access controls and authentication mechanisms
Hash-chained audit records: administrative actions are recorded in a tamper-evident, hash-chained audit log

No method of transmission or storage is 100% secure. We commit to promptly notify you and relevant authorities of any data breaches as required by law.

6. Your Data Protection Rights

Depending on your location, you may have the following rights regarding your personal information:

Right to Access: Request copies of your personal data
Right to Rectification: Request correction of inaccurate or incomplete information
Right to Erasure: Request deletion of personal data under certain conditions
Right to Restrict Processing: Request restriction of processing your data
Right to Data Portability: Request transfer of data to another organization or directly to you
Right to Object: Object to processing of your personal data

You can exercise access, portability and erasure yourself from account settings: signed-in users can download a machine-readable export of their personal data and delete their account — deletion pseudonymizes your data in one all-or-nothing operation. For anything else, contact us; we may need to verify your identity.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. Cookies help us:

Remember your preferences and login information

You can control cookies through your browser settings. Disabling cookies may affect certain features. See our Cookie Policy for more information.

8. International Data Transfers

Your information may be transferred to computers located outside your country where data protection laws may differ. We ensure safeguards such as:

Standard Contractual Clauses approved by the European Commission
Binding Corporate Rules for intra-group transfers

9. Data Retention

We retain personal information only as long as necessary for the purposes collected and to satisfy legal, accounting, or reporting requirements.

Rate quotes: 180 days — the delivery addresses in expired quotes are purged automatically at expiry
Email logs: 180 days; activity logs: 90 days; shipment labels and uploaded files: 90 days after issue; webhook deliveries: 90 days (payloads 24 hours); sign-in sessions: 14 days
Invoices: 10 years (statutory bookkeeping requirement); audit records: 7 years — the audit trail is append-only and hash-chained, so original entries are preserved under the legal-obligation and legitimate-interest bases

Everything else is erased automatically at the end of its window by scheduled retention jobs. When you delete your account, your personal data is pseudonymized in one all-or-nothing operation; billing and audit records that must survive by law are reduced to pseudonymized identifiers.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in practices or legal requirements. We will notify you by posting the new policy on this page and updating the 'Effective Date'.

Changes are effective when posted on this page. We encourage reviewing this Privacy Policy periodically.