Privacy Policy

1. Who we are & scope of this policy

This Privacy Policy describes how we handle personal information when you:

• visit or interact with our website at dropshippinglite.com;
• create an account and use the DropshippingLite App or dashboard;
• connect an e-commerce store (for example, Shopify) to our fulfillment service;
• request a quote, contact us, or apply to our affiliate program; or
• place, source, or ship orders through our supply-chain services.

If you use our services to fulfill orders for your own customers, you act as the controller of your customers' personal information and we act as your processor / service provider. Please read Section 10 and Section 11, which explain those responsibilities in more detail.

2. Information we collect

2.1 Information you provide to us

• Account & profile data — name, email address, password, company or store name, country, and phone or messaging contact (e.g., WhatsApp).
• Quote, contact & onboarding details — the products you sell, expected order volumes, destination markets, and any requirements you share through our quote form or with our team.
• Affiliate & partner data — the details you submit when applying to or participating in our affiliate program, including payout information.
• Billing & transaction data — wallet top-ups, invoices, balances, and payment references. Card and bank details are processed by our payment providers; we do not store full card numbers.
• Communications — messages, support tickets, and correspondence you exchange with us by email, chat, or messaging apps.

2.2 Store & order data from connected platforms

When you connect a sales channel such as Shopify, you authorize us to access the data required to fulfill your orders. Depending on the permissions you grant, this may include:

• store and account information (store name, domain, contact email, plan, currency);
• product and inventory data (titles, variants, SKUs, images, prices);
• order data (line items, quantities, order status, fulfillment and tracking details); and
• the information in Section 2.3 below that relates to your customers.

2.3 Your customers' personal information (processed on your behalf)

To ship orders, we necessarily handle the personal information of the people who buy from you — your end customers. This is typically the recipient's name, shipping address, phone number, email, and order contents. We process this information solely to source, pack, label, ship, and provide tracking and after-sales support for the orders you ask us to fulfill, and on your instructions. We do not use your customers' personal information for our own marketing.

2.4 Information we collect automatically

• Device & log data — IP address, browser type, operating system, referring pages, and timestamps.
• Usage data — pages viewed, features used, and actions taken in our website and App, used to operate, secure, and improve the service.
• Cookies & similar technologies — see Section 4.

3. How we use your information

We use personal information to:

• create and manage your account and authenticate your access;
• source products, process and fulfill orders, and arrange international shipping and customs clearance;
• provide tracking, returns coordination, and customer support;
• process payments, wallet balances, invoices, and refunds;
• operate, maintain, troubleshoot, secure, and improve our website, App, and services;
• prevent fraud, abuse, and unauthorized activity, and protect our users and our business;
• communicate with you about your account, orders, service updates, and — where permitted — relevant offers; and
• comply with legal, tax, accounting, and regulatory obligations.

Legal bases (EEA/UK). Where the GDPR applies, we rely on: performance of a contract (to provide our services); our legitimate interests (to secure and improve the service and prevent fraud); your consent (for optional marketing and non-essential cookies); and compliance with legal obligations.

4. Cookies & similar technologies

We and our service providers use cookies and similar technologies to keep you signed in, remember preferences, maintain security, and understand how our site and App are used. Essential cookies are required for the service to function; analytics or preference cookies are optional.

You can control cookies through your browser settings; blocking some cookies may affect how the site works. Our pages also load resources from third parties such as Google Fonts and an embedded Google Maps view, which may receive your IP address as part of delivering that content.

5. How we share information

We share personal information only as needed to run our services and as described here. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

• Suppliers & factories — to source and prepare the products in your orders.
• Logistics & shipping carriers — recipient and parcel details so couriers and shipping lines can deliver your packages.
• Customs & authorities — declaration information required to lawfully export and import goods across borders.
• Payment processors — to take payments, settle balances, and process refunds.
• Platform & technology providers — e-commerce platforms (e.g., Shopify) and the hosting, infrastructure, and software vendors that support our service, acting as our subprocessors under appropriate agreements.
• Professional advisors — accountants, auditors, insurers, and lawyers, where necessary.
• Legal & safety — when required by law, regulation, or legal process, or to protect the rights, property, or safety of our users, the public, or DropshippingLite.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this policy.

6. International data transfers

DropshippingLite operates from China and serves customers worldwide. To provide our services, your information — and your customers' shipping information — will be processed in China and transferred to suppliers, carriers, customs authorities, and service providers in other countries, which may have data-protection laws different from those where you live.

Where such transfers are subject to laws like the EU/UK GDPR or China's Personal Information Protection Law (PIPL), we put appropriate safeguards in place — such as standard contractual clauses or equivalent contractual and security measures — and limit the data shared to what is necessary to fulfill your orders.

7. Data retention

We keep personal information only for as long as needed for the purposes described in this policy — for example, to operate your account, fulfill and document your orders, provide support, and meet legal, tax, and accounting requirements. Order and transaction records are typically retained for the period required by applicable law.

When information is no longer needed, we delete or anonymize it. If you close your account, we will delete or de-identify your personal information within a reasonable period, except where we must retain certain records to comply with our legal obligations or resolve disputes.

8. How we protect your information

We use administrative, technical, and organizational measures designed to protect personal information — including encryption in transit, access controls, authentication, and the principle of least privilege for staff and partners. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work continuously to safeguard your data and will notify you and the relevant authorities of a material breach where the law requires.

9. Your privacy rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete information;
• delete your personal information;
• object to or restrict certain processing;
• request portability of information you provided to us;
• withdraw consent at any time (without affecting prior processing); and
• lodge a complaint with your local data-protection authority.

EEA / UK. The rights above are provided under the GDPR and UK GDPR. California. If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, and correct, and the right to opt out of "sale" or "sharing" — note that we do not sell or share personal information as those terms are defined. China. Residents of mainland China have rights under the PIPL, including access, correction, deletion, and consent withdrawal.

To exercise any of these rights, email privacy@dropshippinglite.com. We will verify your request and respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights. If your request concerns data we process on a merchant's behalf, we may direct you to that merchant (see Section 10).

10. Merchants' responsibilities

If you are a merchant using DropshippingLite to fulfill orders for your customers, you are the controller of your customers' personal information and we are your processor. You are responsible for:

• having a lawful basis to collect your customers' information and to share it with us for fulfillment;
• maintaining your own privacy policy that accurately describes how that information is used, including fulfillment from China; and
• responding to your customers' privacy requests, with our reasonable assistance.

We process such information only on your documented instructions and as needed to provide the service. A data processing addendum is available on request at privacy@dropshippinglite.com.

11. Sales-channel apps (Shopify & others)

When you install our app on a sales channel such as Shopify and connect your store, we access store, product, order, and customer data through that platform's official APIs and the permissions you approve, strictly to provide fulfillment. Specifically:

• we request only the permissions needed to sync products, manage orders and fulfillment, and read the shipping details required to deliver parcels;
• we use protected customer data only to fulfill and support your orders — never to sell or to advertise;
• you can disconnect or uninstall the app at any time from your store admin, which revokes our ongoing access; and
• following uninstall or account closure, we delete or de-identify store and customer data we no longer need, subject to the legal retention noted in Section 7.

Your use of Shopify or any other platform is also governed by that platform's own privacy policy.

12. Third-party links & services

Our website and App may link to third-party sites or services (for example, suppliers, carriers, tracking providers, or payment pages). We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing them with personal information.

13. Children's privacy

Our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under the age of 16. If you believe a child has provided us with personal information, please contact us and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the service or by email. Your continued use of our services after an update means you accept the revised policy.

15. Contact us

If you have any questions, requests, or concerns about this Privacy Policy or how we handle your information, please contact us:

We aim to acknowledge privacy requests promptly and to resolve them within the time required by applicable law.