Privacy notice

Who we are

PCS Books Limited, Unit 5 Vulcan House, Vulcan Road, Leicester LE5 3EF, operates TrackFlow. Questions about this notice go to privacy@books4depository.com.

What we collect

• Account details: name, work email address, and a password stored only as a salted scrypt hash.
• Organization and billing details for the plan you choose.
• Usage and security logs, with secrets removed.
• For merchants: order, shipment and contact details that the merchant imports from TikTok Shop and carriers.

How we use it

To run the service, keep accounts secure, bill plans, send the notifications a merchant configures, answer support requests and meet legal obligations.

Shoppers' information

For a merchant's customers, the merchant decides why and how their data is used, and is responsible for having a lawful basis for the messages it sends. TrackFlow processes that data on the merchant's instructions. SMS messages need recorded customer consent.

Public tracking pages

Tracking pages show the order status, estimate, carrier updates and support details. They don't show street addresses, email addresses or phone numbers. Visitor analytics store a daily salted hash.

Who we share data with

Hosting, database, email, SMS, payment and carrier providers, used only where a feature is configured. [Current list of providers to be confirmed before publication.]

How long we keep data

[Retention periods to be confirmed.]

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete or move your data, and to object to some processing. Contact privacy@books4depository.com. Merchants handle requests about their own customers' data, and we help them do so.

Security

Passwords are hashed with scrypt. Tokens are stored as hashes. Integration secrets are encrypted with AES-256-GCM. Every query is limited to one organization.

Changes

We'll post changes to this page and update the date below. [Last updated date.]