PREPKINGZSHIPPING
Legal

Privacy Policy

Last updated: August 31, 2026

1. Who we are

This Privacy Policy applies to PrepKingz Warehouse inc operating as PrepKingz Shipping (“PrepKingz”, “we”, “us”), a Canadian merchant shipping and fulfillment service available at https://shipping.prepkingz.ca.

  • Legal entity: PrepKingz Warehouse inc
  • Service: PrepKingz Shipping — merchant shipping, label purchase, and optional warehouse fulfillment
  • Physical address: 111 Chabanel W, Suite 629, Montreal, QC, Canada
  • Contact: support@prepkingz.com

Related documents: Terms of Service and Refund & Wallet Policy.

2. Shopify API data collected

After a merchant authorizes PrepKingz through Shopify OAuth, we access Shopify Admin API data only as needed to sync orders, buy shipping labels, and fulfill shipments. We do not collect Shopify data before installation and authorization.

Depending on the merchant's connected shop and workflow, this may include:

  • Orders and line items
  • Products (as needed for fulfillment and shipping)
  • Fulfillment orders
  • Locations
  • Customer shipping name, address, phone, and email on unfulfilled orders (used to create labels and fulfill)
  • Shop domain and related shop identifiers required to maintain the connection

Shopify API scopes used by the PrepKingz Shipping app:

  • read_orders
  • read_products
  • read_merchant_managed_fulfillment_orders
  • write_merchant_managed_fulfillment_orders
  • read_assigned_fulfillment_orders
  • write_assigned_fulfillment_orders
  • write_fulfillments
  • read_locations
  • write_locations

3. Data collected directly from the merchant

When merchants create and use a PrepKingz Shipping account, we collect:

  • Account owner name
  • Work email
  • Phone number
  • Legal business name
  • Billing address
  • Tax numbers (where provided for invoicing or compliance)
  • Stripe billing records related to wallet funding and charges
  • Login credentials and session data via Supabase Auth (email/password, or Google if the merchant links Google sign-in)
  • Portal usage logs needed for security, support, and operations

4. Data collected from merchants' customers

PrepKingz processes shipping contact details that appear on the merchant's Shopify (or eBay) orders — typically name, shipping address, phone, and email — solely to purchase carrier labels and fulfill those orders.

  • PrepKingz does not install a storefront theme on the merchant's shop
  • PrepKingz does not drop cookies or pixels on the merchant's storefront
  • PrepKingz does not replace Shopify Checkout
  • PrepKingz does not collect marketing or behavioral data from shoppers browsing the merchant's store

Customer personal information is processed as a service provider to the merchant for shipping and fulfillment only.

5. How we use data

We use merchant and order-related data to:

  • Create and administer merchant accounts
  • Provide carrier rate quotes
  • Purchase shipping labels
  • Perform warehouse pick and pack when the merchant enables PrepKingz fulfillment
  • Push tracking and fulfillment status back to Shopify, including customer notification where notifyCustomer is used in the fulfillment flow
  • Process wallet funding and billing through Stripe
  • Provide customer support to merchants
  • Prevent fraud and abuse
  • Meet tax, accounting, and other legal obligations

We do not sell personal information. We do not use Shopify or order data for advertising or unrelated marketing profiles.

6. Processors and security

We share data with processors only as needed to operate PrepKingz Shipping:

  • Supabase — authentication and database hosting (Canada/US cloud regions as configured)
  • Stripe — payment processing and wallet billing
  • Carriers / ShipSavvy — label purchase, pickup, and tracking
  • Shopify / eBay — sales channels the merchant chooses to connect
  • Vercel — application hosting
  • Email and operations alerting — transactional and support notifications

Channel access tokens are protected with AES-256-GCM encryption at rest. Tenant data is isolated using Supabase row-level security (RLS). Access is limited to authorized systems and staff who need it to operate the service.

7. Retention, uninstall, and Shopify privacy webhooks

We retain account, billing, order, and shipment records while the merchant account is active, and for the additional period needed for tax, accounting, carrier claims, and dispute resolution.

When a merchant uninstalls the PrepKingz Shipping Shopify app, the app/uninstalled webhook disconnects that shop from PrepKingz.

We implement Shopify's mandatory privacy webhooks. Requests are HMAC-verified:

  • customers/data_request — acknowledged; PrepKingz fulfills merchant/customer data access requests manually via support@prepkingz.com
  • customers/redact — handled by redactShopifyOrders to redact customer personal information associated with the specified orders
  • shop/redact — handled by redactShopifyShop to redact or delete shop-related data after the required retention window following uninstall

8. Your rights

Depending on applicable law, individuals may request access to, correction of, or deletion of personal information under Canadian privacy law, including Québec's Law 25 where relevant. Where GDPR-style rights apply to EEA or UK individuals, those individuals may also request access, correction, erasure, restriction, portability, or objection to certain processing, subject to legal limits.

To exercise these rights, contact support@prepkingz.com. Merchants remain responsible for responding to their own customers where they are the controller of storefront orders; PrepKingz will assist as a processor for data we hold for shipping and fulfillment.

Some processors may store or process data in the United States or other jurisdictions outside Canada. Where cross-border transfers occur, we rely on contractual and organizational safeguards appropriate to the transfer.

9. International processing

PrepKingz Warehouse inc is not established in Europe. Processing is primarily for Canadian merchants using PrepKingz Shipping. Some subprocessors (for example hosting, payments, or channel platforms) may process data outside Canada or outside the EEA. Merchants should review this policy and their own customer notices when shipping internationally or serving customers in other regions.

10. Contact and changes

Questions about this Privacy Policy or PrepKingz data practices:

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the current version. Changes are posted on this page.

See also our Terms of Service and Refund & Wallet Policy.