Privacy Policy

Fufil.ai · Last updated 18 October 2026 · Version 2026-10-18

This policy explains how Fufil Ltd ("we", "us") uses personal data when you use Fufil.ai. We handle personal data in line with the UK General Data Protection Regulation and the Data Protection Act 2018.

Who is responsible for your data

For information about you, your colleagues and visitors to our website (account holders, users and their contact details), we are the controller. Our details: Fufil Ltd, company number NI734764, 1 Newtownards Road, Donaghadee, Northern Ireland, BT21 0DY. Contact: getintouch@fufil.ai.

For personal data about your customers, such as the names, addresses, phone numbers and email addresses of people you send parcels to, you decide why and how it is used. You are the controller and we are your processor: we handle it only to provide the Service and on your instructions.

This means that when you put your own customers' order and delivery details into the Service, or bring them in from a connected account such as Shopify, we use them only to store them for you, create shipments, pass them to the carrier you or we choose, and show you their status. We do not use them for our own marketing, and we do not sell them.

What we collect

• Account details: your name, email address, phone number, company name, address, VAT number, and your login credentials (managed through AWS).
• Payment details: card payments are handled by Stripe. We receive limited information such as the card type, last four digits, expiry date, billing name and address, and the status of payments. We do not store full card numbers.
• Product, order and shipment data you put into the Service or bring in through your connected accounts: products, SKUs, stock, orders, and recipients' names, delivery addresses, contact details, parcel details and tracking information.
• Connection details for services you link (for example Shopify), including the permissions you grant and access tokens, which we store encrypted.
• Technical and usage information: IP address, browser and device type, pages and features used, and security and error logs.
• Messages you send us, for example to support.

How we use it, and why

• To provide the Service, create and run your account, and ship your orders (to perform our contract with you).
• To take payment, send invoices, and prevent fraud and non-payment (contract and our legitimate interests).
• To pass delivery details to carriers so that parcels can be delivered (contract; and the legitimate interests of you and your customers in the delivery).
• To connect and sync with services you choose, such as Shopify (contract).
• To give support and send service emails, such as verification, billing and important notices (contract and legitimate interests).
• To keep the Service secure, prevent misuse, and fix and improve it (legitimate interests).
• To meet our legal duties, for example tax and accounting records (legal obligation).

We do not sell personal data.

Who we share it with

We share personal data only where needed to run the Service:

• Amazon Web Services (AWS), which hosts the Service and manages sign-in. Our main hosting is in the EU (Ireland).
• Stripe, which processes card payments and subscriptions.
• Couriers and carriers, who receive the recipient's name, address, contact details and parcel details so they can collect and deliver.
• Services you connect to, such as Shopify, which exchange product, order and stock data with the Service on your instruction.
• Google reCAPTCHA, which helps us stop automated sign-ups. Google's privacy policy and terms apply to it.
• Providers of any AI-assisted features you choose to use, which may process the information you submit to those features.
• Professional advisers, and authorities where the law requires us to share information.
• A buyer or successor, if our business is sold or transferred, who must keep your data protected.

Those providers act on our instructions or have their own legal responsibilities. Their own privacy policies explain what they do with data.

Visitors to this website (newsletter and beta registrations)

If you sign up to our newsletter or register interest in our beta programme on this website, we collect your first and last name, email address and company name (and, for beta registrations, your Companies House company number). We use them, based on your consent, to send you updates about Fufil.ai, to contact you about the beta programme and to provide relevant content. You can withdraw your consent, unsubscribe or ask us to remove your details at any time by emailing getintouch@fufil.ai. We keep these details for as long as you remain registered with us.

For beta registrations we check the company you give against the UK Companies House register to confirm it is a registered UK company. Our sign-up forms are protected by Google reCAPTCHA, so the Google Privacy Policy and Terms of Service also apply when you use them. We use an email service provider to send newsletters and updates on our behalf.

Transfers outside the UK

Some of the providers above, for example Stripe, Google and some carriers, may process data outside the UK and EEA. Where they do, we rely on safeguards the law allows, such as an adequacy decision, the UK International Data Transfer Agreement or standard contractual clauses.

How long we keep it

We keep account and billing records while your account is active and for up to six years afterwards, to meet tax and accounting rules and to deal with legal claims.

We keep order and shipment data for as long as we need it to provide the Service and as you instruct, and then delete or anonymise it within a reasonable time after your account ends (currently up to 90 days). Security and technical logs are kept for a shorter period.

Security

We use measures such as encryption in transit, encrypted storage of connection credentials and access controls. No online service is completely secure, so please keep your login details safe and tell us at once if you suspect misuse.

Your rights

You can ask us to:

• give you a copy of your personal data;
• correct data that is wrong;
• erase your data, in some cases;
• restrict how we use your data, or object to our use of it;
• give you your data in a portable format; and
• stop relying on your consent, where we use it.

To use these rights, contact getintouch@fufil.ai. We aim to reply within one month. If you are a person who received a parcel sent by one of our customers, please contact that customer first, as they decide how your data is used; we will help them respond.

You can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). We would appreciate the chance to put things right first.

Cookies and similar technologies

We use only what is needed for the Service to work: browser storage that keeps you signed in and remembers settings you choose, and Google reCAPTCHA on the registration page, which may set cookies to tell people from bots. We do not use advertising cookies.

Children

The Service is for businesses and is not intended for anyone under 18.

Changes to this policy

We may update this policy. We will tell you about important changes by email or in the platform. The date at the top shows when it was last changed.

Contact us

Questions about privacy, or a request to use your rights: getintouch@fufil.ai.

Fufil Ltd, company number NI734764, registered in Northern Ireland. Registered office: 1 Newtownards Road, Donaghadee, Northern Ireland, BT21 0DY.