Privacy Policy

Welcome to ParcelRush. The protection of your personal data is a priority. This policy explains what information we collect, how we use it, and what your rights are.

ParcelRush is a service operated by Navescale, Lda, registered in Portugal under tax number 518556719, with its registered office at Praça Duque de Saldanha 1, 2º andar, 1050-094 Lisbon, Portugal.

We collect the following information when you use our services:

• Identification data: First name, last name, email address, phone number.
• Transaction data: Shipping and delivery addresses, payment information.
• Technical data: IP address, device type, browser, cookies.
• Usage data: Pages visited, interactions with the site.

We use your data for the following purposes:

• Contract performance: To provide and improve our services.
• Legal obligations: To comply with tax and regulatory requirements.
• Legitimate interests: To ensure platform security and prevent fraud.
• Consent: To set audience measurement and advertising cookies, and to keep you informed about updates and commercial offers.

We do not sell your data. It may be shared with:

• The carriers you choose, in order to ship your parcels.
• Our technical processors: Hetzner Online GmbH (server hosting, in Germany), Cloudflare, Inc. (site delivery and anti-spam protection on the contact form), Brevo / Sendinblue SAS (sending our emails and handling your contact requests), DataFa.st (audience measurement, if you have consented), Google Ireland Limited (measurement of our advertising campaigns, if you have consented).
• Stripe Payments Europe, Ltd. (card payment processing).
• Authorities when required by law.

Transfers outside the European Union: some of these providers are established in the United States or may transfer data there, in particular Google, Cloudflare and Stripe. Those transfers are covered by the EU / US Data Privacy Framework, to which these companies are certified, supplemented where applicable by the European Commission's standard contractual clauses.

We do not keep your data longer than necessary. Retention periods depend on the type of data:

• Order data belonging to your buyers (name, delivery address, phone, email): deleted once the shipment is complete. We do not build a database of recipients.
• Generated labels: 6 months, long enough to handle a return, a claim or a delivery dispute.
• Statistical indicators (destination country, shipping cost, carrier used, delivery times met, number of returns): 1 year, to feed your dashboard. They do not identify anyone.
• Account data (identity, email address, login credentials): for the duration of the contract, then deleted.
• Accounting records (invoices, payment receipts): 10 years, a period imposed by Portuguese tax law.
• Backups: purged within 30 days.
• Cookie consent: 6 months.

When the contract ends, only accounting records are kept, for the period the law requires. Everything else is deleted.

Full details, including the data processing agreement and the list of our sub-processors, are on our GDPR Compliance page.

Under the GDPR, you have the following rights:

• Access and rectification: View or correct your data.
• Erasure and objection: Request deletion of your information.
• Portability: Retrieve your data in a usable format.
• Restriction of processing: Limit how your data is used.
• Withdrawal of consent: Withdraw a consent you have given at any time, cookies included, without affecting the lawfulness of processing carried out before that withdrawal.
• Complaint: Lodge a complaint with a supervisory authority if you believe your rights are not being respected.

All requests must be sent by email to [email protected].

As ParcelRush is operated by a Portuguese company, the competent supervisory authority is the CNPD (Comissão Nacional de Proteção de Dados, cnpd.pt). You may also lodge a complaint with the supervisory authority of your country of residence.

We use cookies to:

• Improve the user experience.
• Analyze traffic on our site.
• Personalize content and advertisements.

Audience measurement cookies (DataFa.st) and advertising cookies (Google Ads) are only set after you agree, category by category. No third-party script is loaded until you have made your choice.

Retention: the choice you make in the banner is kept for 6 months, in line with the CNIL recommendation. Google advertising cookies (_gcl_au) expire after 90 days.

You can change or withdraw your choice at any time via the "Manage cookies" button at the bottom of every page, or through your browser settings.

We implement strict measures to protect your data:

• Encryption of sensitive data.
• Restricted access to personal information.
• Regular monitoring to prevent data breaches.

We may update this policy from time to time. In the event of a significant change, you will be notified by email or via our site.

For any questions about this policy, contact us at [email protected].