Privacy Policy / Cookie Policy

Last Updated: 31 May 2026

1. Introduction

SPS Fulfillment, Inc. (“SPS”, “we”, “us”, or “our”) is committed to protecting the privacy of our clients, website visitors, and users of our platform. This Privacy Policy describes how we collect, use, store, and share personal information when you visit spsfulfillment.com or use our services.

SPS operates as an Agentic Fourth-Party Logistics provider (4PL). Our services are intended exclusively for business entities (B2B). We do not target individual consumers and we do not knowingly collect personal data from individuals who are not acting in a professional or business capacity.

This Privacy Policy should be read alongside our Terms of Service and, where applicable, the Master Services Agreement (MSA) governing the relationship between SPS and its clients.

2. Who We Are — Data Controller

SPS Fulfillment, Inc. is the data controller for personal data collected through the Site and in connection with our services. For the purposes of the EU General Data Protection Regulation (GDPR) and UK GDPR, SPS is the controller of personal data relating to website visitors and to the business contacts of our clients.

Where SPS processes personal data of our clients’ end customers (such as names, shipping addresses, and order details) solely for the purpose of executing logistics services, SPS acts as a data processor on behalf of the client (who is the controller). This processing relationship is governed by Section 11 of the MSA.

3. Information We Collect

3.1 Information provided directly by you

When you use our Site, register for an account, request a quote, or contact us, we may collect:

Name, job title, and company name;
Business email address and phone number;
Company address and VAT/tax identification number;
Payment information (processed securely via our payment provider — SPS does not store card numbers);
Any other information you provide when communicating with us.

3.2 Information collected automatically

When you visit our Site, we automatically collect certain technical information through cookies and similar technologies, including:

IP address and approximate location;
Browser type and version, operating system;
Pages visited, time spent on the Site, referral source;
Device identifiers and session data.

This information is collected to operate the Site, improve user experience, and analyse traffic. See Part 2 (Cookie Policy) for full details on cookies.

3.3 Information from clients using the platform

Registered clients may submit data through the SPS Platform in connection with logistics operations, including product information, inventory data, order details, and end-customer shipping information. This data is processed under the terms of the MSA and the data processing framework in Section 11 of the MSA.

4. How We Use Your Information

SPS uses personal data for the following purposes:

To provide and manage our logistics orchestration services under the MSA;
To operate, maintain, and improve the SPS Platform and website;
To process payments and manage billing under the MSA;
To communicate with you about your account, invoices, service updates, and operational matters;
To send marketing communications about SPS’s services — where you have given consent or where we have a legitimate interest as a B2B service provider;
To comply with legal obligations, including tax, accounting, and regulatory requirements;
To protect SPS’s rights and interests, including in the context of disputes or legal proceedings;
To analyse and improve our services, platform, and website through aggregated and anonymised data.

SPS does not engage in automated decision-making, including profiling, that produces legal effects concerning you or that similarly significantly affects you, as described in Article 22 of the GDPR.

5. Legal Basis for Processing (GDPR)

For users based in the European Economic Area (EEA) or the United Kingdom, SPS processes personal data on the following legal bases:

Contract performance (Article 6(1)(b) GDPR) — processing necessary to perform the MSA or to take steps at your request before signing;
Legitimate interests (Article 6(1)(f) GDPR) — for B2B marketing communications, platform analytics, fraud prevention, and network security, where our interests are not overridden by your rights;
Legal obligation (Article 6(1)(c) GDPR) — where processing is required to comply with applicable law;
Consent (Article 6(1)(a) GDPR) — for non-essential cookies and any marketing where consent is the appropriate basis. You may withdraw consent at any time.

6. How We Share Your Information

SPS does not sell personal data. We share personal data only in the following circumstances:

Logistics Operators — end-customer shipping data (name, address, order details) is shared with the relevant warehouse, carrier, or customs broker in SPS’s operator network solely to execute the logistics service. These operators act as data sub-processors under the terms of the MSA.
Payment processors — payment data is shared with our payment provider to process transactions. We use PCI-DSS compliant processors and do not store card data ourselves.
Technology providers — we use third-party services for platform hosting, analytics, email, and CRM. These providers process data on our behalf under data processing agreements.
Legal requirements — we may disclose data where required by law, court order, or regulatory authority, or to protect SPS’s legal rights.
Business transfers — in connection with a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to the same privacy protections.

We require all third parties who process personal data on our behalf to maintain appropriate security measures and to process data only for the specified purpose.

7. International Data Transfers

SPS Fulfillment, Inc. is incorporated in Delaware, USA. When personal data is transferred from the EEA or UK to the USA or other third countries, SPS ensures appropriate safeguards are in place in accordance with Chapter V of the GDPR, including:

Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable;
Reliance on an applicable adequacy decision where one exists.

Where SPS engages operators in third countries to process end-customer data, the same safeguards apply through the sub-processor chain described in the MSA.

8. Data Retention

SPS retains personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, and reporting requirements. As a general guide:

Client account data — retained for the duration of the MSA and for 7 years after termination for tax and accounting purposes;
End-customer shipping data — retained for the duration of the logistics operation and for 3 years thereafter for dispute resolution purposes;
Website analytics data — retained in anonymised form indefinitely; identifiable session data retained for up to 24 months;
Marketing communication records — retained until you opt out, or for 3 years from last interaction if no opt-out.

When data is no longer required, it is securely deleted or anonymised.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Right of access — to request a copy of the personal data we hold about you;
Right to rectification — to request correction of inaccurate or incomplete data;
Right to erasure — to request deletion of your data, subject to legal retention obligations;
Right to restriction — to request that we limit processing of your data in certain circumstances;
Right to data portability — to receive your data in a structured, machine-readable format;
Right to object — to object to processing based on legitimate interests, including for direct marketing;
Right to withdraw consent — where processing is based on consent, you may withdraw at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at legal@spsfulfillment.com. We will respond within 30 days. Where you are based in the EU or UK, you also have the right to lodge a complaint with your local data protection supervisory authority.

California Residents — Additional Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you additional rights:

Right to Know — request the categories and specific pieces of personal information collected about you, the sources, business purposes, and third parties with whom it has been shared;
Right to Delete — request deletion of your personal information, subject to legal exceptions;
Right to Correct — request correction of inaccurate personal information we hold about you;
Right to Opt-Out of Sale or Sharing — SPS does not sell personal information and does not share it for cross-context behavioural advertising;
Right to Non-Discrimination — you will not receive discriminatory treatment for exercising your CCPA/CPRA rights.

To submit a California rights request, contact legal@spsfulfillment.com. We will respond within 45 days, extendable by a further 45 days where reasonably necessary.

10. Data Security

SPS implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration. These include access controls, encryption in transit and at rest, regular security assessments, and contractual data protection obligations for all operators and service providers who handle personal data on our behalf.

In the event of a personal data breach that is likely to result in a risk to individuals’ rights and freedoms, SPS will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay where required by law.

11. Children’s Privacy

Our Site and services are intended for business users only. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Privacy Policy

SPS may update this Privacy Policy from time to time. Material changes will be communicated to registered clients by email with at least 30 days advance notice, consistent with the terms of the MSA. The current version is always available at spsfulfillment.com/privacy. Continued use of the Site after any update constitutes acceptance of the revised policy.

Part 2 — Cookie Policy

13. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They are widely used to make websites work efficiently, to remember your preferences, and to provide information to website operators. Similar technologies include web beacons, pixels, and local storage.

14. Cookies We Use

We use the following categories of cookies on the Site:

Category	Consent required?	Purpose
Strictly necessary	No	Session management, authentication, security, load balancing. Cannot be disabled without breaking Site functionality.
Functional	Yes	Remembering preferences such as language, login state, and UI settings. Enhances usability but not strictly necessary.
Analytics	Yes	Understanding how visitors use the Site — pages visited, time on site, referral sources. Used to improve content and user experience. Data is anonymised where possible.
Marketing	Yes	Tracking visits for retargeting and measuring the effectiveness of marketing campaigns. Only used where you have given explicit consent.

15. Cookie Consent & Control

When you first visit the Site, a cookie consent banner will be displayed. You may accept all cookies, accept only strictly necessary cookies, or customise your preferences by category. Your choice is stored and remembered for future visits.

You can change your cookie preferences at any time by clicking the cookie settings link in the footer of the Site, or by clearing your browser cookies and revisiting the Site.

You may also control cookies through your browser settings. Note that disabling all cookies may affect Site functionality. Most browsers allow you to:

View and delete cookies already stored;
Block third-party cookies;
Block all cookies from specific sites;
Block all cookies from being set.

For more information on managing cookies in your browser, visit your browser’s help documentation.

16. Third-Party Cookies

Some cookies on our Site are set by third-party services we use, such as analytics platforms and marketing tools. These third parties have their own privacy policies governing their use of cookie data. SPS does not control third-party cookies. Where we use third-party analytics (such as Google Analytics), we configure these tools to anonymise IP addresses and to comply with applicable privacy law.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other personal information they or others have about you, including by association with your email. We (or service providers on our behalf) may then send communications and marketing to these email addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

17. Do Not Track

Some browsers include a Do Not Track (DNT) feature that signals to websites that you do not want to be tracked. There is currently no universally accepted standard for responding to DNT signals. SPS does not currently respond to DNT signals, but we do provide the cookie controls described in Section 15 above as an equivalent mechanism.

18. Contact & Complaints

For any questions about this Privacy Policy or Cookie Policy, or to exercise your data rights, contact:

CompanySPS Fulfillment, Inc.Address13 West Main Street, P.O. Box 953, Felton, Delaware 19943, USAEmaillegal@spsfulfillment.com

If you are based in the EU or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority — for example, the Italian Garante per la Protezione dei Dati Personali (www.garanteprivacy.it) or the UK Information Commissioner’s Office (www.ico.org.uk).