Privacy Policy

What data we process

Through the forms on this website we only process the data you send us yourself:

• Quote request: your email and details about your online store (number of orders, product category, country of registration, delivery countries, parcel size, platform, interest in branded packaging).
• Contact form: your name, email, store website, details about your store and the text of your message.
• The “Is fulfillment right for you?” quiz: your answers to the quiz questions and your email.

With each message we store the language, the page it was sent from and the time consent was given. We do not store your IP address or browser details with the message.

Data about your visit to the website (traffic measurement, cookies) is described in the Cookies and analytics section.

What we use the data for, and on what basis

We use the data solely to handle your enquiry: to reply to you, prepare a quote and agree on next steps.

The legal basis is your consent (Article 6(1)(a) GDPR), which you give by ticking the box when you submit a form. You can withdraw your consent at any time by emailing info@fulfillpro.eu; withdrawal does not affect the lawfulness of processing before it.

Providing the data is voluntary, but without it we cannot reply to you. We do not use the data for newsletters, automated decision-making or profiling.

How long we keep the data

We keep form messages for 1 year from submission, then delete them. If a contractual relationship arises between us, further processing is governed by the contract and by legal obligations, such as accounting rules.

Who has access to the data

Only the people in our company who handle enquiries have access to the data. We use the following processors to run this website:

• Cloudflare, Inc.: website hosting, the database holding a copy of your message (located in the EU) and spam protection for the forms (Turnstile).
• Resend (Plus Five Five, Inc.): sending the email with your message to us and the confirmation email to you.
• Google (Google Workspace): the info@fulfillpro.eu mailbox where the messages arrive.
• Google Ireland Limited: Google Tag Manager and Google’s analytics and marketing tools; cookies only after you give consent (see Cookies and analytics).
• CookieYes Limited: the cookie consent bar and the record of the consent you give (see Cookies and analytics).

Some of these providers are based in the USA or the United Kingdom. In that case, data is transferred on the basis of an adequacy decision (for the USA, the EU-US Data Privacy Framework) or standard contractual clauses. If you consent to advertising cookies, data about your visit is also received by Meta Platforms Ireland Limited, with whom we are joint controllers for its collection (see Cookies and analytics). We do not sell the data you send us through the forms or share it with third parties for marketing purposes.

Cookies and analytics

To measure traffic and marketing performance we use Google Tag Manager, which loads on every page and sets no cookies itself. It loads the consent bar, Google’s analytics and marketing tools (Google Analytics and, where used, Google Ads) and, after your consent, the Meta pixel (see below).

Google’s tools run on every page but use cookies only after you give consent. Until then they store no cookies and no visitor identifier, and send Google only measurements without them: for example the page visited, the traffic source, the time, the browser and device type, the approximate location derived from your IP address, and whether you have given consent. The legal basis for these measurements is our legitimate interest in knowing how the website is used (Art. 6(1)(f) GDPR); for measurement with cookies it is your consent (Art. 6(1)(a) GDPR). Without consent the website works the same.

The consent bar is provided by CookieYes Limited (3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom). Your browser remembers your choice in a cookie for 6 months, after which we ask again. To demonstrate consent, CookieYes also records it: under a random identifier it keeps your choice, its time, your country and a pseudonymised IP address for 5 years. You can withdraw or change your consent at any time via the “Cookie settings” link in the footer.

Google’s tools are operated by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland); data may be transferred to the USA on the basis of an adequacy decision (EU-US Data Privacy Framework). Google Analytics records, for example, the pages visited, the traffic source, the device type and the approximate location; it does not store IP addresses.

If you also consent to advertising cookies, the Meta pixel of Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland) loads as well. We use it to measure the performance of our ads on Facebook and Instagram, and we may show ads on these platforms to visitors of this website. For this, Meta receives the pages visited and the actions taken on them (for example whether you clicked a button or submitted a form, but not the content of the form), technical data about your browser and device, your IP address and the identifiers in Meta’s cookies (_fbp, _fbc), which are valid for 3 months; if you are logged in to Facebook or Instagram, Meta may link this data to your account. We and Meta are joint controllers for collecting and transmitting this data (Art. 26 GDPR; the essence of the arrangement: facebook.com/legal/controller_addendum); Meta is responsible for its further processing under its own privacy policy. The legal basis is your consent (Art. 6(1)(a) GDPR); data may be transferred to the USA on the basis of an adequacy decision (EU-US Data Privacy Framework). Without consent, the Meta pixel does not load. If we add another tool, we will list it here.

When a page loads, Cloudflare, as the hosting provider, processes the technical data needed to deliver and secure it, such as your IP address; Google and CookieYes do the same when Google Tag Manager and the consent bar load. The forms are protected against spam by Cloudflare Turnstile, which evaluates technical data about your browser for this purpose. The legal basis for this technical processing is our legitimate interest in running the website securely and in managing consent (Art. 6(1)(f) GDPR). Fonts are served directly by us; the website does not load them from third parties.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing and to data portability, as well as the right to object to processing and to withdraw your consent at any time. Simply send your request to info@fulfillpro.eu; we will reply within one month at the latest.

If you believe we process your data in breach of the rules, you can lodge a complaint with the supervisory authority: the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava (dataprotection.gov.sk), or with the supervisory authority in your country of residence.