1. Scope and our role
This notice applies to Prepacity’s website, applications, support channels, and connected commerce services. It covers information about visitors, account users, merchants, and the customers whose orders a merchant asks Prepacity to process.
For merchant customer and order data, the merchant is normally the controller and Prepacity acts as its processor. For account administration, website analytics, billing, security, and direct communications, Prepacity may act as controller.
2. Information we process
- Account and organisation details, including name, work email, role, business name, country, locations, and authentication records.
- Fulfilment data, including platform order reference, products, quantities, scheduled slot, customer name, and delivery or pickup instructions.
- Contact and address information only when it is needed for notifications, delivery, support, or fulfilment.
- Service, device, integration, audit, and diagnostic data used to operate, protect, and improve Prepacity.
- Billing and subscription records. Prepacity does not require or store payment-card data in its capacity-planning service.
3. How we use information
- Calculate availability, reserve capacity, schedule orders, and support preparation, delivery, pickup, rescheduling, and cancellation.
- Create and secure accounts, apply role-based permissions, maintain audit records, and investigate misuse or incidents.
- Connect stores, process signed webhooks, diagnose synchronisation issues, and provide support.
- Send service messages and, where permitted, relevant product communications that recipients can opt out of.
- Meet contractual, tax, accounting, fraud-prevention, and other legal obligations.
5. Retention and deletion
Merchants can configure customer-data retention where the service supports it. We keep information only for the period needed for the purposes described here, then delete or de-identify it unless a longer period is required by law.
- Tenant data export and deletion workflows.
- Customer-data erasure requests routed through the responsible merchant.
- Configurable operational and log retention.
- Sensitive-data redaction from application logs.
- Platform privacy-webhook support where a connected platform provides it.
6. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. Merchant customers should first contact the merchant that accepted their order; Prepacity will assist that merchant as required.
Account users can update many details in the service. Anyone may contact us about a privacy question, complaint, or request. We may need to verify identity before acting.
7. Security, changes, and contact
We use technical and organisational measures designed to protect information, including encrypted transport, encryption at rest, access controls, audit logs, secret management, and defensive monitoring. No service can guarantee absolute security.
We may update this notice as the service or law changes. We will post the revised date and provide additional notice when a change materially affects how information is used.