Summary: Aerofulfill collects only the data necessary to provide Shopify fulfillment services. We do not sell your personal information. We use industry-standard encryption and security measures. You have the right to access, correct, or delete your data at any time.
1. Who We Are
Aerofulfill ("we," "us," "our") is a China-based third-party logistics (3PL) and fulfillment company that provides order fulfillment, warehousing, shipping, packaging, product sourcing, and related services to eCommerce brands operating on the Shopify platform.
Registered Address: A3-2, Prologis (Wuxi West Railway Station Logistics Park), Luoshe Town, Huishan District, Wuxi City, Jiangsu Province, China
Contact Email: contact@aerofulfill.com
This Privacy Policy applies to all personal data collected through our website (aerofulfill.com), our quote request forms, email communications, WhatsApp conversations, API integrations with Shopify stores, and any other interactions with our services.
2. Information We Collect
2.1 Information You Provide Directly
When you submit a quote request form, contact us, or engage our services, we may collect:
- Full name and job title
- Email address
- Phone number and/or WhatsApp number
- Company or brand name
- Shopify store URL
- Shopify plan details
- Daily order volume and selling countries
- Description of fulfillment challenges
- Uploaded files (product catalogs, invoices, packaging specifications)
2.2 Information Collected Automatically
When you visit our website, we automatically collect:
- IP address
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Referring URL (the page that linked you to us)
- UTM parameters (campaign source, medium, content, term)
- Cookie identifiers and similar tracking technologies
2.3 Information from Shopify Integration
When you connect your Shopify store to our fulfillment platform, we access:
- Order details (order ID, items, quantities, prices, customer shipping addresses)
- Product information (SKU, weight, dimensions, images)
- Inventory levels
- Customer names and shipping addresses (as required to fulfill orders)
- Tracking information generated during the fulfillment process
We access Shopify data solely for the purpose of fulfilling orders on your behalf. We act as a data processor with respect to your customers' personal data.
2.4 Information from Third Parties
- Payment processors (confirmation of service payments — we do not store credit card numbers)
- Shipping carriers (delivery status updates, proof of delivery)
- Analytics providers (aggregated website usage data via Google Analytics and Google Tag Manager)
3. How We Use Your Information
We use the information we collect for the following purposes:
| Purpose | Data Used |
|---|
| Process and respond to quote requests | Name, email, store URL, order volume, challenge description |
| Provide fulfillment services | Order data, shipping addresses, product details, inventory |
| Generate shipping labels and tracking | Customer names, addresses, order contents |
| Communicate about your account | Email, phone, WhatsApp |
| Send service updates and onboarding information | Email address |
| Improve our website and services | Analytics data, IP address, browser data |
| Prevent fraud and abuse | IP address, submission patterns |
| Comply with legal obligations | All data as required by applicable law |
We do not use your data for automated decision-making or profiling. We do not sell, rent, or trade your personal information to any third party for marketing purposes.
4. Legal Basis for Processing (GDPR)
For individuals in the European Economic Area (EEA), United Kingdom, and other jurisdictions where GDPR or equivalent regulations apply, we process personal data under the following legal bases:
- Consent: When you submit a quote form and check the consent box, or when you opt in to receive communications from us.
- Contract Performance: When we process data to fulfill our contractual obligations to you (e.g., fulfilling orders, providing logistics services).
- Legitimate Interest: When we process data to improve our services, prevent fraud, and ensure website security, provided this does not override your rights.
- Legal Obligation: When we are required by law to retain or disclose certain data (e.g., tax records, customs declarations).
5. How We Share Your Information
We share personal data only in the following circumstances:
- Shipping Carriers: We share customer names, shipping addresses, and order details with carriers such as USPS, Royal Mail, Australia Post, Canada Post, DHL, and other last-mile delivery providers to fulfill and deliver orders.
- Customs Authorities: We share order content descriptions and declared values as required for international customs clearance.
- Service Providers: We use third-party services including Google Analytics, Google Tag Manager, Calendly (scheduling), and WhatsApp Business (communication). These providers process data on our behalf under their own privacy policies.
- Webhook Integrations: If you configure a webhook or Zapier integration, form submissions are sent to your specified endpoint.
- Legal Requirements: We may disclose data if required by law, regulation, legal process, or governmental request.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such change.
We never sell your personal data or your customers' personal data to third parties.
6. International Data Transfers
Aerofulfill is based in China. When you use our services, your data may be transferred to and processed in China, as well as other countries where our shipping carriers and service providers operate.
For EEA/UK residents, we implement appropriate safeguards for international transfers including:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data processing agreements with all sub-processors
- Encryption of data in transit and at rest
7. Data Retention
We retain personal data for the following periods:
- Quote requests: 24 months from submission, unless you become a client
- Client account data: Duration of the business relationship plus 36 months
- Order and fulfillment data: 60 months (required for dispute resolution, chargeback evidence, and customs compliance)
- Financial records: 7 years (as required by applicable tax and accounting laws)
- Website analytics data: 26 months (Google Analytics default)
- Email communications: 36 months from last interaction
After the retention period expires, we securely delete or anonymize the data. You may request earlier deletion at any time (see Section 9).
8. Data Security
We implement industry-standard security measures to protect your data, including:
- TLS/SSL encryption for all data transmitted between your browser and our servers
- Encrypted database storage for sensitive fields (email, phone, addresses)
- Access controls limiting data access to authorized personnel only
- Regular security audits and vulnerability assessments
- Secure API connections with Shopify using OAuth authentication
- Rate limiting and bot protection on all form submissions
- File upload validation and malware scanning
While we take every reasonable precaution, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Right of Access: Request a copy of all personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing: Request that we limit how we use your data
- Right to Data Portability: Request your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Withdraw any previously given consent at any time
To exercise any of these rights, email us at contact@aerofulfill.com with the subject line "Privacy Request." We will respond within 30 days.
For California Residents (CCPA/CPRA)
If you are a California resident, you additionally have the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To make a request, contact us at contact@aerofulfill.com.
10. Cookies and Tracking
Our website uses the following cookies and tracking technologies:
| Cookie/Technology | Purpose | Duration |
|---|
| Google Analytics (_ga, _gid) | Website usage analytics and traffic analysis | Up to 26 months |
| Google Tag Manager | Tag management and conversion tracking | Session |
| UTM Parameters | Campaign attribution and marketing performance | Session |
You can control cookies through your browser settings. Disabling cookies may affect some website functionality but will not prevent you from submitting a quote request.
11. Third-Party Links
Our website may contain links to third-party websites such as Calendly, WhatsApp, and Shopify. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.
12. Children's Privacy
Our services are intended for businesses and individuals aged 18 and older. We do not knowingly collect personal data from anyone under the age of 18. If we learn that we have collected data from a minor, we will delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you by email.
We encourage you to review this policy periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: contact@aerofulfill.com
- Address: A3-2, Prologis (Wuxi West Railway Station Logistics Park), Luoshe Town, Huishan District, Wuxi City, Jiangsu Province, China
If you are in the EEA or UK and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority.
