BUKU Privacy Policy 

Effective Date: 2/15/26 

This Privacy Policy explains how BUKU Shipping, Inc. (“BUKU,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you access or use our websites, applications, integrations, APIs, and related services (collectively, the “Services”). 

This Privacy Policy is incorporated by reference into the BUKU Terms of Service. 

1. Information We Collect 

We collect information in the following categories: 

1.1 Information You Provide Directly 

• Account registration details (name, email, company name) 

• Contact information 

• Support requests and communications 

• Configuration settings and preferences 

1.2 Information Collected Automatically 

When you use the Services, we may automatically collect: 

• IP address 

• Device type, browser, operating system 

• Log files, timestamps, and usage activity 

• Cookies and similar technologies (see Section 6) 

1.3 Information from Third-Party Platforms 

If you connect third-party services (e.g., ecommerce platforms, carriers), we may receive: 

• Order and shipment metadata 

• Store identifiers 

• Fulfillment or label-related data 

BUKU does not control the privacy practices of third-party platforms. 

2. How We Use Information 

We use collected information to: 

• Provide, operate, and maintain the Services 

• Process transactions and generate shipping-related outputs 

• Communicate with you (support, service updates, notices) 

• Improve and optimize our products 

• Monitor usage, security, and compliance 

• Create aggregated or anonymized analytics 

• Comply with legal obligations 

We do not sell personal information. 

3. How We Share Information 

We may share information only as follows: 

3.1 Service Providers 

With vendors who help us operate the Services (hosting, analytics, support), under confidentiality obligations. 

3.2 Third-Party Integrations 

When you choose to connect third-party platforms, data may be shared as required to enable functionality. 

3.3 Legal & Compliance 

If required to comply with law, regulation, subpoena, or legal process. 

3.4 Business Transfers 

In connection with a merger, acquisition, financing, or sale of assets. 

4. Data Retention 

We retain information: 

• For as long as your account is active 

• As needed to provide the Services 

• As required to comply with legal, accounting, or regulatory obligations 

Data may be retained in anonymized or aggregated form indefinitely. 

5. Cookies & Tracking Technologies 

BUKU uses cookies and similar technologies to: 

• Authenticate sessions 

• Remember preferences 

• Analyze usage and performance 

You may control cookies through your browser settings, though disabling cookies may affect functionality. 

6. Data Security 

We implement reasonable administrative, technical, and organizational safeguards to protect information. 

However: 

• No system is 100% secure 

• We do not guarantee absolute security 

• You are responsible for safeguarding account credentials 

7. International Data Transfers 

BUKU is based in the United States. By using the Services, you acknowledge that information may be transferred to and processed in the U.S. and other jurisdictions where data protection laws may differ. 

 

8. Your Rights & Choices 

Depending on your jurisdiction, you may have rights to: 

• Access your personal information 

• Request correction or deletion 

• Object to certain processing 

• Withdraw consent where applicable 

Requests may be submitted using the contact information below. 

9. Children’s Privacy 

The Services are not intended for individuals under 18. BUKU does not knowingly collect personal information from children. 

10. Changes to This Privacy Policy 

We may update this Privacy Policy from time to time. Material changes will be communicated through the Services or by other reasonable means. Continued use of the Services constitutes acceptance of the updated policy. 

11. Contact Information 

For questions or requests regarding this Privacy Policy, contact: 

BUKU Shipping, Inc.
Email: support@bukuship.com
Jurisdiction: Utah, United States 

12. GDPR Privacy Rights (EEA & UK Residents) 

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (“GDPR”): 

12.1 Your GDPR Rights 

You may have the right to: 

• Access your personal data 

• Rectify inaccurate or incomplete data 

• Erase your personal data (“right to be forgotten”) 

• Restrict or object to processing 

• Data portability 

• Withdraw consent at any time where processing is based on consent 

12.2 Lawful Bases for Processing 

BUKU processes personal data under one or more of the following lawful bases: 

• Performance of a contract 

• Legitimate business interests 

• Compliance with legal obligations 

• Consent (where required) 

12.3 International Transfers 

Personal data may be transferred outside the EEA or UK, including to the United States. Where required, BUKU relies on appropriate safeguards such as standard contractual clauses or other lawful transfer mechanisms. 

12.4 Exercising GDPR Rights 

Requests may be submitted using the contact information in Section 12. We may require verification of identity before processing requests. 

You also have the right to lodge a complaint with your local data protection authority. 

13. California Privacy Rights (CCPA / CPRA) 

This section applies to California residents and is provided in accordance with the California Consumer Privacy Act (“CCPA”) and the California Privacy Rights Act (“CPRA”). 

13.1 Categories of Personal Information Collected 

In the past 12 months, BUKU may have collected: 

• Identifiers (name, email address, IP address) 

• Commercial information (account usage and service interactions) 

• Internet or network activity (logs, device data) 

• Professional or employment-related information (business account details) 

13.2 Use of Personal Information 

Personal information is used for: 

• Providing and operating the Services 

• Security and fraud prevention 

• Customer support 

• Product improvement and analytics 

• Legal and compliance purposes 

13.3 No Sale or Sharing of Personal Information 

BUKU does not sell personal information and does not share personal information for cross-context behavioral advertising. 

13.4 Your California Rights 

You may have the right to: 

• Know what personal information we collect, use, or disclose 

• Request deletion of personal information 

• Correct inaccurate personal information 

• Limit the use of sensitive personal information (if applicable) 

• Not be discriminated against for exercising privacy rights 

13.5 Submitting Requests 

Requests may be submitted via the contact information in Section 12. We will verify your identity before fulfilling requests, as permitted by law. 

Authorized agents may submit requests on your behalf with proper documentation. 

14. Data Processing Role Clarification 

For purposes of applicable data protection laws: 

• BUKU acts as a data processor for customer shipment and order data 

• BUKU acts as a data controller for account, billing, and website usage data 

A Data Processing Addendum (DPA) may be made available upon request for enterprise customers.