Privacy policy

skuspine is operated by [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS], company number [COMPANY NUMBER] ("skuspine", "we", "us").

For data about you as a website visitor, demo requester or account user, we are the controller. For data our merchants bring into the platform about their own customers (for example a delivery address on an order), the merchant is the controller and we act as their processor, under our Data Processing Agreement.

Questions about privacy go to getintouch@skuspine.com.

When you request a demo: your name, work email, role, company name, website, the channels you sell on, and the ranges you choose for order volume, team size, shipping locations, turnover and timing. Your website and the turnover question are optional.

When you create an account: your name, email, password (stored only as a salted hash), role and permissions, and billing contact details. Card payments for subscriptions are handled by our payment provider; we never see or store full card numbers.

When you connect your stores and carriers: access tokens for marketplaces such as Amazon, Shopify and eBay, and for delivery partners. These are stored encrypted, are never written to logs and are not visible to skuspine staff.

Data that flows through the platform: orders, products, stock levels, landed cost, suppliers, fees, settlements, advertising spend, shipments and returns. Orders include your customers' names, delivery addresses, and sometimes phone numbers or emails where a carrier requires them for delivery.

When you use the site or app: IP address, browser and device type, pages visited, and timestamps, plus security and audit logs of actions taken in your account.

To run the service you signed up for (performance of a contract): importing orders, buying labels, booking delivery partners, sending tracking back to marketplaces, calculating margin and handling returns.

To respond to your demo request and follow up (legitimate interests): we use your answers to prepare a relevant demo and to suggest a suitable plan. We will not add you to a marketing list without your consent.

To keep the platform secure and reliable (legitimate interests): monitoring, fraud prevention, debugging and audit logging.

To bill you and keep financial records (legal obligation and contract).

To improve skuspine (legitimate interests): aggregated, de-identified usage statistics. We do not sell personal data, and we do not use merchants' customer data to train general-purpose AI models.

skuspine makes automated operational decisions on your behalf, such as which warehouse ships an order and which delivery partner is booked, based on rules you set. These decisions concern orders, not people, and you can review or override any of them from the exception queue.

Some features use large language model providers, for example to read order manifests that arrive as files rather than through an API. Only the data needed for that task is sent, under contracts that prohibit the provider from training on it or retaining it beyond the request.

We share data only with the service providers we need to run skuspine, each under a written agreement:

• Cloud hosting and storage ([HOSTING PROVIDER], [REGION])
• Shipping rate and label services, and the delivery partners you enable, which receive the delivery details needed to ship each order
• The marketplaces you connect, which receive tracking numbers and order status
• Payment processing for subscriptions ([PAYMENT PROVIDER])
• Email delivery and customer support tools
• Language model providers, for the features described above

A current list of sub-processors is available on request. We may also disclose data where the law requires it, or as part of a merger or acquisition, in which case this policy continues to apply.

skuspine serves merchants in the UK, the EU and the US. Where personal data moves outside the UK or EEA, we rely on adequacy decisions or the UK International Data Transfer Agreement and EU Standard Contractual Clauses, with additional safeguards where needed.

Demo requests: up to 24 months after our last contact, unless you become a customer or ask us to delete them sooner.

Account and platform data: for as long as your subscription is active. After cancellation you have [30] days to export your data, after which it is deleted from live systems and removed from backups within a further [90] days.

Billing records: as long as tax and accounting law requires, typically six years.

Security logs: up to 12 months.

Data is encrypted in transit and at rest. Each merchant's data is isolated at the database level, so one merchant can never read another's records. Access to cost and margin data is restricted by role, administrative actions are audit-logged, and marketplace and carrier credentials are encrypted and inaccessible to our staff. skuspine does not process card data.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the relevant regulator as the law requires.

Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict how we use it, and withdraw consent at any time. UK and EU residents can complain to the ICO or their local data protection authority. California residents have the rights set out in the CCPA, including the right to know and delete; we do not sell or share personal information for cross-context behavioural advertising.

If you are a merchant's customer, please contact the merchant you bought from first; we will help them respond.

To make a request, email getintouch@skuspine.com. We reply within one month.

We use strictly necessary cookies to keep you signed in and to secure the app. With your consent, we use analytics cookies to understand how the website is used. You can change your choice at any time through the cookie settings link in the footer.

skuspine is a business service and is not intended for anyone under 18.

If we make material changes, we will update the date at the top of this page and notify account holders by email before the changes take effect.