Privacy Policy & Data Governance

PGS Tech Limited (operating globally as "GPfulfillment" or "Gray Poplar", hereinafter referred to as "we", "our", or "us") provides enterprise-grade e-commerce fulfillment, direct-factory product sourcing, quality control inspection, custom packaging, and international line-haul air logistics for Direct-to-Consumer (DTC) brands worldwide.

This Privacy Policy governs the manner in which GPfulfillment collects, uses, encrypts, maintains, and discloses information gathered from merchant clients, brand administrators, and store integrations (including Shopify, WooCommerce, TikTok Shop, and custom ERP connectors).

To execute cross-border supply chain operations on behalf of your brand, we collect and process the following categories of data:

• Merchant Account & Billing Details: Authorized contact names, business email addresses, direct WhatsApp credentials, corporate registration numbers, and invoicing details.
• Store Order & Recipient PII: Customer names, destination physical shipping addresses, postal codes, telephone numbers (required strictly by destination customs authorities for courier SMS delivery alerts), and SKU quantity specifications synchronized via API.
• Proprietary Sourcing Specs: Factory target product links (from 1688, Taobao, or competitor stores), target price benchmarks, private label vector artwork, custom packaging mockups, and projected order volumes.

Information gathered is utilized exclusively to perform fulfillment obligations, optimize supply chain efficiency, and comply with international trade laws:

• Automated Order Synchronization: Fetching unfulfilled orders from your connected stores in real-time to generate itemized pick-and-pack warehouse manifests.
• Physical Quality Inspection & Kitting: Verifying SKU accuracy against synchronized specifications, applying custom branded hangtags, and packaging products securely.
• Customs Manifest & Label Generation: Generating DDP/IOSS electronic pre-clearance declarations, printing carrier-compliant shipping labels (USPS, Royal Mail, DHL, YunExpress), and writing real-time tracking numbers back to your store.
• Factory Negotiation: Leveraging target links to obtain direct factory quotes while strictly protecting your brand's proprietary modifications.

To deliver physical shipments to your global customers, recipient address data is shared solely with verified carrier networks and destination customs clearance brokers:

• Line-Haul & Postal Carriers: USPS, Canada Post, Royal Mail, DHL Express, Australia Post, YunExpress, and regional postal authorities.
• Customs Clearance Agencies: DDP (Delivered Duty Paid) brokers and European Union IOSS tax collection databases to ensure packages clear customs without delay or unexpected recipient fees.

We do not disclose customer phone numbers or emails to third parties for marketing purposes. All recipient contact data is used strictly for transit delivery exception notifications.

We implement enterprise-grade technical safeguards to secure your intellectual property and store data:

• TLS 1.3 Encryption: All API communications between your store, our ERP platform, and carrier webhooks are transmitted through secure SSL/TLS encrypted tunnels.
• Role-Based Access Control (RBAC): Access to store data and shipping manifests is restricted strictly to authorized warehouse personnel and dedicated account managers.
• Encrypted Database Storage: API secret tokens and database backups are encrypted at rest using AES-256 standards.

We retain transaction and tracking records only as long as necessary to resolve shipping claims, process return verifications, and fulfill statutory tax and customs compliance requirements. Under international data privacy frameworks (including GDPR, UK Data Protection Act, and CCPA), you retain the following rights:

• Right to Access & Portability: Request a full export of your store's historical fulfillment manifests and sourcing requests.
• Right to Erasure (Right to Be Forgotten): Request the permanent deletion of API credentials, client profile information, and completed order logs upon account termination.
• Right to Revoke API Access: Disconnect our ERP integration from your Shopify, WooCommerce, or TikTok Shop dashboard at any time.

We understand that winning products and proprietary custom packaging designs are the core competitive advantage of your DTC brand. All sourcing inquiries, supplier links, and private label design files submitted to GPfulfillment are treated as Strictly Confidential.

Our sourcing agents operate under strict internal non-disclosure agreements (NDAs) that prohibit sharing your product specifications, supplier contacts, or custom mould designs with any outside entity.

If you have any questions regarding our privacy architecture, data governance practices, or wish to exercise your data rights, please contact our Data Protection Office directly: