개인정보처리방침

1. Overview

This Privacy Policy explains how areturnz (“areturnz,” “we,” “us”) collects, uses, shares, and protects personal information when you visit our website, interact with our sales and support teams, or are an end-consumer whose return is processed through our platform.

When we process personal data on behalf of a business customer (a “Customer”) through the areturnz platform, we act as a data processor. In those cases the Customer is the data controller and their own privacy notice governs the relationship with the end-consumer. The terms of that processing are set out in our Data Processing Addendum.

This Policy describes our practices as a data controller — for website visitors, prospects, applicants, and our direct business contacts.

2. Information we collect

2.1 Information you provide

• Contact and account data — name, business email, company, role, phone number when you fill in a form, request a demo, sign up, or contact support.
• Commercial data — billing address, tax ID, payment method tokens (we do not store full card numbers; payment is handled by PCI-compliant processors).
• Communications — the content of emails, support tickets, and sales calls you send to or have with us.
• Recruitment data — CV, work history, and other information shared if you apply for a role.

2.2 Information collected automatically

• Device and log data — IP address, user-agent, referring URL, pages viewed, timestamps, and rough geographic location derived from IP.
• Cookies and similar technologies — see Section 6.
• Product telemetry — for dashboard users (operators and Customer admins), we log feature usage and error events to operate and secure the Services.

2.3 Information from third parties

• Enrichment — publicly available firmographic data from B2B intelligence providers, used to qualify inbound interest.
• Authentication — if you sign in via a third-party identity provider, we receive your name, email, and a stable user identifier.
• Carrier and partner integrations — shipping events and tracking metadata from carriers.

3. How we use information

We process personal information for the following purposes:

• Provide and operate the website and Services — account setup, dashboards, returns processing, support.
• Communicate with you — respond to inquiries, send transactional messages, share product updates and, where permitted, marketing.
• Improve our products — analyze usage and feedback to debug, optimize, and develop features.
• Security and abuse prevention — detect, investigate, and prevent fraudulent, unauthorized, or illegal activity.
• Legal and compliance — meet our obligations under tax, customs, sanctions, accounting, and other applicable laws.
• Recruitment — evaluate applications and manage hiring.

4. Legal bases (EEA / UK)

If the EU/UK GDPR applies to you, we rely on the following legal bases:

• Contract — to provide the website, Services, and support you request.
• Legitimate interests — to secure our systems, improve our products, run direct B2B outreach to business contacts, and operate our business, balanced against your rights.
• Consent — for non-essential cookies, marketing email where required, and any sensitive data we may need with your explicit agreement.
• Legal obligation — to keep tax, accounting, and customs records, and to respond to lawful requests.

You can withdraw consent at any time without affecting prior processing. Where we rely on legitimate interests, you can object — see Section 8.

5. How we share information

We do not sell personal information. We share it only as described below:

• Service providers — cloud hosting, email delivery, analytics, customer support, payment processing, and security vendors operating under written contracts that restrict their use of the data.
• Network partners — logistics, refurbishment, and disposition partners who execute physical operations on returned merchandise on Customer’s behalf.
• Customers — if you are an end-consumer whose return is being processed, the relevant Customer (the brand or retailer) receives data necessary to fulfill the return.
• Corporate transactions — in connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality protections.
• Legal and safety — to comply with law, enforce our agreements, or protect the rights, property, or safety of areturnz, our users, or others.

6. Cookies and tracking

We use cookies and similar technologies to make the site work, remember preferences (such as language and theme), measure usage, and — with your consent — support marketing attribution. You can manage non-essential cookies via the cookie banner or your browser settings. Categories:

• Strictly necessary — required for the site to function (e.g., session, security, language).
• Analytics — help us understand how the site is used in aggregate.
• Marketing — help us measure campaign performance and tailor messages.

Most browsers honor “Global Privacy Control” signals; where required by law, we treat such signals as a request to opt out of sharing for cross-context behavioral advertising.

7. Data retention

We retain personal information only as long as needed for the purposes described in this Policy, which depends on the type of data:

• Account and transactional records — for the life of the account plus a period required by tax and accounting law (typically 7 years).
• Marketing contacts — until you unsubscribe or three years of no engagement, whichever comes first.
• Website logs and analytics — up to 13 months in identifiable form.
• Recruitment data — for the duration of the hiring process; for unsuccessful candidates, up to 12 months unless you ask for earlier deletion.
• Customer Data processed on behalf of a Customer — per the Customer’s instructions and the DPA.

8. Your rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate or incomplete data;
• delete your data (subject to legal retention obligations);
• restrict or object to certain processing, including direct marketing;
• data portability for information you provided to us;
• withdraw consent where processing is based on it; and
• lodge a complaint with your local data protection authority.

To exercise these rights, email support@areturnz.com. If you are an end-consumer of a Customer’s brand, please contact that brand first — they are the controller of your return data. We will help them respond.

8.1 California residents

Under the CCPA/CPRA you also have the right to know the categories of personal information collected, the categories of sources, the business purposes, and the categories of third parties to whom it is disclosed, and to opt out of any “sale” or “sharing” as those terms are defined by California law. We do not sell personal information.

9. International transfers

We operate from the United States and may transfer personal information to the US and to other countries where our service providers operate. Where required, we use Standard Contractual Clauses, the UK International Data Transfer Addendum, or other valid transfer mechanisms to protect the data.

10. Security

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. Details are summarized in our Security overview. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

11. Children

The Services are intended for business customers and adults. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy from time to time. The “Last updated” date at the top of this page reflects the latest version. If we make material changes, we will provide additional notice (such as via email or a notice on the site).

13. Contact

For questions, concerns, or privacy requests, please contact us: support@areturnz.com