Privacy Policy

Who handles your data

EZwarehouse is a warehouse management system operated by ST Humans Pty Ltd (ABN 23 613 672 021), an Australian company. It is used by third-party logistics providers (“warehouses”) who store and ship goods on behalf of their own customers (“merchants”).

For a shopper’s personal information, EZwarehouse is a processor. The merchant decides what happens to it; we hold it and pass it on so that the warehouse can pack and ship the order. We do not use it for any purpose of our own.

What we receive

When a Shopify store is connected to a warehouse, we take the following from each new order:

• Recipient name — printed on the pick list and the shipping label.
• Shipping address — passed to the carrier.
• Recipient phone number — used by the carrier to arrange delivery.
• Order note — the merchant’s instructions to the warehouse.
• Order number, products and quantities — not personal data, but stored alongside.

We do not receive the shopper’s email address. We do not receive payment details. Shopify does not send them to us and we do not ask for them.

What we do with it

We use it to pick, pack and dispatch that order, and to report the dispatch and tracking number back to the merchant’s store. We do not use it for marketing, we do not sell it, and we do not profile anyone.

EZwarehouse never overwrites a merchant’s store inventory. There is an optional feature that adds received quantities to the store’s stock when goods arrive at the warehouse; it is switched on or off per merchant.

Who else sees it

We use the following processors to run the service. We do not disclose data to anyone else.

• Google Cloud (Firebase) — data storage and application hosting.
• Shopify — the channel orders arrive on and dispatches are reported to.
• Resend — report and notification email.
• Stripe — subscription billing for warehouses. No shopper data is sent to Stripe.

The shipping address and phone number are given to the carrier the warehouse selects. That disclosure is made under the delivery arrangement between the merchant and the warehouse; EZwarehouse stores the details on their behalf.

How long we keep it

2 years after an order is dispatched, we erase the recipient’s name, address, phone number and order note from that shipment record. The quantities, amounts and dates that Australian tax and accounting rules require us to retain are kept — but who the parcel went to is not. This deletion runs automatically, every day.

If a merchant ends their arrangement with the warehouse, their data is held for 90 days and then deleted. That window exists so that a deletion made in error can be undone.

Shoppers' rights

A shopper should ask the merchant they bought from to access or delete their information. When the merchant sends that request through Shopify it reaches EZwarehouse automatically, and we action it within 30 days.

You may also contact us directly. We have no way of verifying on our own which order a request relates to, so we will confirm it with the merchant before acting.

How we protect it

All traffic is HTTPS only, with HSTS. Stored data is encrypted at rest by Google Cloud and backed up daily, with a seven-day retention on backups.

Warehouse staff can only read data for the warehouses they are assigned to. Secrets such as store access tokens are held where no browser can read them and are used only by our servers.

Contact

Privacy enquiries: hibrizkr@gmail.com

If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.