Privacy policy

ProtonShip, of Toronto, Ontario, is responsible for the personal information under its control and follows the Personal Information Protection and Electronic Documents Act (PIPEDA). Our privacy officer can be reached through the contact form.

• Account details: your name, business name, email and phone number. Passwords are stored only as a one-way hash.
• Shipment details: sender and recipient names, addresses, phone numbers and, when you give them, email addresses; parcel weights, sizes and references.
• Payment details: the card brand, last four digits and expiry date. Full card numbers go straight to our payment processor and are never stored by us.
• Connected store data: if you connect Shopify, the open orders we need to create labels.
• Messages: what you send us through the contact form or by email.
• Technical data: IP address, browser type and sign-in session details, which keep accounts secure.

To quote and sell labels, pass shipments to carriers, show tracking, take payments and charge carrier adjustments, handle disputes and claims, answer questions, keep accounts secure and prevent fraud, and keep the tax and accounting records the law requires.

We do not sell personal information, and we don’t use recipients’ details for marketing.

When you enter a recipient’s details, you confirm you are allowed to share them with us for shipping. We use them only to create, deliver and track the parcel, and to send a return label when you ask us to. The public tracking page shows the carrier, the status and city-level scan locations, never names or street addresses.

• Carriers: the carrier on a label receives the sender, recipient and parcel details it needs to deliver the parcel.
• Service providers: companies that run parts of ProtonShip for us, such as payment processing, email delivery, hosting and shipping software. Our contracts require them to protect the information and use it only for that work.
• Connected stores: if you connect Shopify, we add tracking details to the orders you ship.
• Authorities: when the law requires it, such as a valid court order.

Information is stored in Canada and in other countries where our service providers operate, including the United States. Information held outside Canada is subject to the laws of that country and may be accessible to its authorities.

Account details stay while your account is open. Shipment and payment records are kept for [seven] years to meet tax and accounting obligations. Support messages are kept for [two] years. After that, we delete or anonymize them.

We use cookies only to keep you signed in and to secure your session. We don’t use advertising or cross-site tracking cookies.

Connections to ProtonShip are encrypted, passwords are hashed, access to customer data is limited to people who need it for their work, and the access keys for connected stores are encrypted at rest.

You can ask to see the personal information we hold about you, have it corrected, or withdraw your consent to its use. Withdrawing consent may mean we can no longer sell you labels. You can close your account at any time.

Contact our privacy officer with any request or concern. If we can’t resolve it, you can complain to the Office of the Privacy Commissioner of Canada.

We will post any update here with its date, and email account holders before a material change takes effect.