Privacy Policy

Version dated April 15, 2026

This Privacy Policy (hereinafter referred to as the "Policy") sets out the procedure for the collection, storage, processing, use, transfer, and protection of personal data in connection with the use of the Nova Poshta Connect software application (hereinafter referred to as the "Application"), developed and owned by BASE X TECH LTD (hereinafter referred to as the "Administrator").

This Policy applies to all relationships arising in connection with the use of the Application, including interactions with the Platform (Shopify), third-party Delivery Services, as well as analytics and advertising services.

By using the Application, the User confirms that they have read this Policy, understand its content, and agree to the terms of personal data processing. In the event of disagreement with the terms of this Policy, the User shall cease using the Application.

The Application places a high priority on the protection of Users' personal data. Users may use the functionality of the Application within the Platform (Shopify) for the purposes of automating delivery processing and order management. In order to ensure the proper functioning of the Application, provide access to its features, enable integration with Delivery Services, provide technical support, and communicate with the User, the Administrator requires certain personal and technical data. The Administrator takes reasonable organizational and technical measures to ensure the confidentiality and protection of such data; however, such data is processed strictly to the extent necessary for the operation of the Application, performance of contractual obligations, compliance with legal requirements, and the pursuit of the Administrator's legitimate interests.

The Administrator does not verify the accuracy of personal data provided by the User and shall not be responsible for its lawfulness, accuracy, or currency.

1. Terminology

For the purposes of this Policy, the following terms shall have the meanings set forth below:

"Personal Data" – means any information relating to an identified or identifiable natural person (data subject), directly or indirectly.
"Processing of Personal Data" – means any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, systematization, accumulation, storage, updating or modification, retrieval, use, transfer (disclosure, provision, or access), anonymization, blocking, deletion, or destruction of Personal Data.
"Confidentiality of Personal Data" – means the obligation of the Administrator or any other person who has obtained access to Personal Data to prevent its disclosure without the consent of the data subject or another lawful basis.
"User" – means any individual, sole proprietor, or legal entity that has reached the age of majority under the laws of its country of residence, possesses the necessary legal capacity, has created an account on the Platform (Shopify), and uses the Application in the course of its business activities or for other purposes that do not contradict the functional purpose of the Application. Where the Application is used on behalf of a legal entity, the person performing such actions represents and warrants that they have all necessary authority.
"User's Customer" – means a natural person whose information is entered by the User into the Application in the course of order placement, processing, and delivery through the Store.
"Platform" – means the Shopify e-commerce software and technical platform that enables the creation, administration, and operation of an online store, integration with third-party software solutions, and the transfer and synchronization of data between such solutions and the User's Store.
"Application" – means the Nova Poshta Connect software product developed and owned by BASE X TECH LTD, made available to the User under the terms of the relevant agreement, and intended for the integration of third-party Delivery Services into the User's Store, including for the automation of delivery processing, creation of express waybills, synchronization of shipment statuses, configuration of delivery parameters, and use of other technical functionalities available within its scope.
"Store" – means the User's online store created and operated on the Platform and integrated with the Application.
"Delivery Services" – means shipment, handling, and delivery services provided by third parties, including, inter alia, the delivery service Nova Poshta, on the basis of separate legal relationships between the User and such third party.
"Cookies" – means a small piece of data sent by a server and stored on the User's device, used for session identification, storing preferences, analyzing User behavior, and other technical purposes.
"IP Address" – means a unique network address of a device in a computer network that uses the Internet Protocol.
"Administrator" – means BASE X TECH LTD, as well as any other persons authorized to ensure the operation, technical support, administration, control, and monitoring of the Application.
"Data Protection Legislation" – means Regulation (EU) 2016/679 of the European Parliament and of the Council dated 27 April 2016 (GDPR), its version as retained in the laws of the United Kingdom (UK GDPR), as well as the UK Data Protection Act 2018, and any other applicable laws and regulations relating to the protection of Personal Data.

2. General Provisions

This Privacy Policy establishes the procedure for the collection, storage, processing, use, and disclosure of Personal Data of Users, as well as Personal Data of the User's Customers, which may be processed in the course of the operation of the Application.
Personal Data of Users is obtained by the Administrator in the course of account registration, installation and use of the Application, integration with the Platform, use of technical functionality, contacting support services, as well as in the course of interaction with services used by the Application.
Confidentiality of Personal Data is a mandatory condition for the Administrator's access to the Personal Data of Users and the User's Customers. The Administrator shall not disclose such data without the consent of the relevant data subject or without another lawful basis expressly provided for by applicable law.
The User's use of the Application constitutes acceptance of this Policy and the terms of Personal Data processing set forth herein.
In the event of disagreement with the terms of this Policy, the User must cease using the Application.
This Policy applies exclusively to the Nova Poshta Connect Application. The Administrator does not control and shall not be responsible for any websites, services, software products, platforms, privacy policies, or data processing practices of third parties, including, inter alia, the Platform (Shopify), Delivery Services, third-party analytics and advertising services, or any other external resources to which the User may gain access in connection with the use of the Application.
The Administrator does not verify the accuracy of Personal Data provided by the User, nor does it verify whether the User has a lawful basis for processing the Personal Data of the User's Customers.
By using the Application, the User consents to the processing of their Personal Data and registration data by the Administrator and confirms that, where Personal Data of the User's Customers is entered into the Application, the User has all necessary legal grounds for such transfer, processing, storage, and use.
Use of the Application is permitted only to persons who have reached the age of majority under the laws of their country of residence and/or citizenship and who are capable of entering into legally binding agreements in accordance with applicable law. The Application does not verify the age of end customers or other third parties whose data may be processed through the Store, and responsibility for compliance with statutory age requirements rests solely with the User as the party administering the Store and determining its operation.
The Application is not a postal operator, does not provide shipment, handling, or delivery services, and does not render such services. All such services are provided by third parties, including, inter alia, the delivery service Nova Poshta, on the basis of separate terms and conditions, which the User is required to review independently.
The User confirms that they have read and agree to the privacy policies, terms of use, and other rules of the Platform (Shopify), Delivery Services, including Nova Poshta, and other third-party services that may be used in connection with the operation of the Application. The Administrator is not a party to the legal relationships between the User and such third parties and shall not be responsible for the processing of Personal Data carried out by them. The User undertakes to ensure compliance with personal data protection requirements established by the Platform (Shopify) within the scope of their activities.
In relation to the processing of Personal Data of Users, the Administrator acts as a data controller.
In relation to the processing of Personal Data of the User's Customers, the Administrator acts as a data processor, while the User acts as the controller of such Personal Data.

3. Personal Data

For the purpose of using the Application, the User may create an account and provide data necessary for the operation of the Application, including, but not limited to:
1. first and last name;
2. email address;
3. phone number;
4. physical address;
5. other contact details transmitted via the Platform or provided directly by the User.
In the course of using the Application, Personal Data of the User's Customers may also be processed, including, inter alia:
1. first and last name;
2. email address;
3. phone number;
4. delivery address;
5. other data necessary for the placement, processing, or tracking of orders.
In addition to the above, the Application may automatically collect and analyze technical and analytical information, including IP address, geolocation data, browser type, operating system, device parameters, interaction history with the Application, User activity logs, access timestamps, behavioral metrics, and other information characterizing the use of the Application.
Where the User provides the Administrator with Personal Data of third parties, the User represents and warrants that they have all necessary rights, authorities, consents, or other lawful grounds to transfer such data to the Administrator.
If the Administrator receives personal information about the User or any other individual from a third party, such information shall be processed in accordance with this Policy.
Where the User has previously consented to the use of their Personal Data for direct marketing purposes, such consent may be withdrawn at any time by contacting the Administrator using the contact details provided below.
The User has the right to request information about what Personal Data relating to them is stored by the Administrator by contacting the Administrator in accordance with this Policy.
If the User believes that any information relating to them is inaccurate, outdated, incomplete, irrelevant, or misleading, they have the right to request its correction or update.
If the User believes that the Administrator has violated applicable data protection laws, the User has the right to submit a complaint to the Administrator, providing full details of the alleged violation. The Administrator shall review such complaint within a reasonable time and provide a written response. The User also has the right to lodge a complaint with the relevant supervisory authority.
When using the Application, certain technical data may be automatically collected and recorded in system logs. Such information may include the device's IP address, browser type, operating system, interface language, internet service provider, pages or features accessed, date and time of access, duration of use of specific features, and other statistical data. This information is used for monitoring, ensuring security, maintaining operability, and improving the Application.
The Administrator may send informational communications, including marketing communications, to the User's email address and/or other contact details, provided that there is appropriate consent or another lawful basis under applicable law. The User has the right to opt out of receiving marketing communications at any time. Communications relating to the operation of the Application, changes to its functionality, security matters, technical updates, confirmation of requests, or other service-related notifications shall not be considered marketing communications and may be sent without separate consent where necessary for the performance of the Administrator's obligations.
For the purposes of collecting analytical and statistical information, as well as facilitating advertising interactions, the Application may use third-party services, including:
1. Google Analytics – for the collection of statistical and analytical data regarding the use of the Application;
2. Facebook Pixel / Meta Pixel – for analytics, evaluation of advertising campaign effectiveness, and marketing interactions;
3. Google Ads – for advertising purposes and evaluation of advertising performance.
Users are encouraged to review the privacy policies of such services independently, as they may determine the manner of processing Personal Data within their own operations. The Administrator does not control the processing of Personal Data by such services and shall not be responsible for their policies, actions, or omissions.

4. Purposes of Collection and Processing of Users' Personal Data

The purposes of processing Personal Data include ensuring the implementation of civil and commercial legal relationships, providing access to the functionality of the Application, enabling integration with the Platform and Delivery Services, creation of express waybills, synchronization of shipment statuses, provision of technical support, communication with the User, processing of requests, inquiries, and applications, as well as improvement of the Application.
The Application collects and stores only such Personal Data as is objectively necessary for the provision of the Services, operation of the Application, compliance with legal requirements, protection of the Administrator's legitimate interests, and proper communication with the User.
Personal Data may be used to contact the User, including for notifications regarding the provision of the Services, technical changes, updates, responses to inquiries, handling of complaints, provision of support, as well as for informational or marketing communications in accordance with applicable law.
Personal Data may be processed for the period necessary to achieve the purposes of such processing, ensure the operation of the Application, perform the Agreement, comply with legal requirements, or until a valid request for deletion is received, unless otherwise required by law or justified by the Administrator's legitimate interests.

5. Conditions of Access to the Database

The Administrator shall not transfer Personal Data of Users to third parties, except as expressly provided in this Policy, the Agreement, applicable law, or where such transfer is necessary to ensure the functioning of the Application.
Disclosure or transfer of the User's Personal Data may, inter alia, be made to the Platform, Delivery Services, third-party analytics and advertising services, hosting providers, technical contractors, infrastructure providers, and other persons involved in ensuring the operation of the Application, strictly to the extent necessary for the performance of their respective functions.
In the event of loss or unauthorized disclosure of Personal Data, the Administrator shall take reasonable response measures as required by applicable law, including, where necessary, notifying the relevant persons and/or competent authorities.
The Administrator implements necessary organizational and technical measures to protect Personal Data against unauthorized or accidental access, destruction, blocking, copying, dissemination, modification, loss, or other unlawful actions by third parties. At the same time, the User acknowledges and agrees that no method of transmission or storage of data in an electronic environment can guarantee absolute security.
Personal Data may be transferred outside the United Kingdom, the European Union, or the European Economic Area in connection with the use of third-party services and infrastructure solutions by the Application. In such cases, the Administrator shall take measures it reasonably considers necessary to ensure an adequate level of protection of Personal Data in accordance with applicable law.

6. Amendment of Users' Personal Data

The User may at any time amend (update, supplement, correct, or delete) the Personal Data provided by them, in whole or in part, by sending a corresponding request to the Administrator's email address specified in this Policy.
Where such request relates to Personal Data of the User's Customers entered by the User, the Administrator shall have the right to require that such request be implemented directly by the User as the party determining the purposes and means of processing of such data.

7. Amendments to the Privacy Policy

The Administrator reserves the right to amend this Privacy Policy unilaterally. In such case, the updated version of the Policy shall be published in the relevant section of the Application, website, or other resource through which access to it is provided. Continued use of the Application following such amendments shall constitute the User's acceptance of the updated Policy.
The User undertakes to periodically review the current version of this Policy in order to stay informed of any amendments. The Administrator shall not be liable for the User's failure or delay in reviewing the updated version of the Policy.
In the event of disagreement with any amendments to this Policy, the User must cease using the Application and, where applicable, submit a request for deletion of their Personal Data.

8. Links to Third-Party Websites and Advertising

The Application may contain links to third-party websites, services, or resources. Where the User follows such links, they are required to independently review the privacy policy of the relevant resource.
The Administrator does not control and shall not be responsible for the content, privacy policies, data processing practices, security, availability, or operations of any third-party websites or services.
Within the operation of the Application, third-party advertising materials may be displayed. Such third parties may use their own data collection technologies, including cookies, pixels, SDKs, or other tracking tools, and independently determine the manner of processing Personal Data in accordance with their own privacy policies. The Administrator shall not be responsible for such processing.
Such third parties may act as independent data controllers and independently determine the purposes and means of processing Personal Data.

9. Cookie Policy

The Application may collect information regarding the User's interaction with specific pages, features, and interface elements for the purposes of obtaining usage statistics, evaluating the effectiveness of functionality, personalizing the user experience, identifying technical issues, ensuring system stability, and improving the Application. For these purposes, various technologies may be used, including cookies.
Cookies are used to store User preferences, maintain session continuity, evaluate the performance of specific features, measure the number of visitors, duration of interaction, identify the most frequently visited pages, and enhance usability of the Application. Cookies may also be used by analytics and advertising services integrated into the Application.
Through analytics systems, including Google Analytics, as well as other similar tools, the Administrator may collect statistical data regarding the use of the Application, including information on visited pages, number of views, traffic sources, internet service provider domains, countries of origin of visitors, referring and exit websites, as well as other aggregated data. Such data is generally not used by the Administrator to directly identify an individual User; however, it may be considered Personal Data under applicable law where it enables direct or indirect identification of an individual.
Where required by law, the use of non-essential cookies and similar technologies shall be based on the User's consent. The User has the right to manage cookie preferences through the relevant tools of the Platform, browser, or device. However, disabling certain categories of cookies may affect the availability or proper functioning of the Application.

10. User Privacy Rights

Data Protection Legislation governs the protection of Personal Data and establishes the rights of data subjects with respect to control over the use of their Personal Data.
Subject to compliance with applicable law, the User shall have the right to:
1. obtain confirmation as to whether their Personal Data is being processed and access to such data;
2. request the rectification of inaccurate or incomplete Personal Data;
3. request the erasure of Personal Data in cases provided for by law, including where such data is no longer necessary for the purposes for which it was collected or where consent has been withdrawn;
4. request the restriction of processing of Personal Data in cases provided for by law;
5. object to the processing of Personal Data based on the Administrator's legitimate interests;
6. receive a copy of the Personal Data provided by the User in a structured, commonly used, and machine-readable format and, where applicable, request the transfer of such data to another controller;
7. withdraw consent to the processing of Personal Data at any time where such processing is based on consent;
8. lodge a complaint with the relevant supervisory authority for data protection matters.
To exercise any of the above rights, the User may contact the Administrator by submitting a request using the contact details specified in this Policy.
The Administrator shall review such requests within a reasonable period, but generally no later than thirty (30) calendar days from the date of receipt, unless a different period is required by law or justified by the nature of the request.
Where a request relates to Personal Data of the User's Customers entered by the User, the Administrator shall have the right to redirect such request directly to the User as the party determining the purposes and means of processing of such data.

11. User Consent and Responsibility Regarding Third-Party Data

The User shall bear full responsibility for obtaining duly executed consents from their customers and other third parties for the processing of their Personal Data, where such consent is required under applicable law.
The Application does not directly collect Personal Data of the User's Customers from such individuals. All such information is entered into the Application by the User independently and solely within the scope of their activities.
In the event of receiving a request from a data subject regarding the processing, amendment, deletion, or restriction of processing of their Personal Data, the User shall independently take all actions necessary to properly respond to such request, unless the nature of the request indicates otherwise.
The User undertakes to indemnify and hold harmless the Administrator against any losses, expenses, claims, fines, or other adverse consequences arising in connection with the User's breach of applicable data protection laws with respect to third-party Personal Data.

12. Other Provisions

Within the operation of the Application, cookies, third-party SDKs, analytics and advertising services, User activity logs, and other technologies for the automatic collection of technical information about the User may be used, including IP address, device type, browser, operating system, geolocation data, device ID, behavioral parameters, and other technical information.
The Administrator reserves the right to implement additional tools for data collection, analytics, advertising, monitoring, or security in the future, where necessary for the proper functioning of the Application, compliance with legal requirements, or protection of the Administrator's legitimate interests. In such case, the User shall be notified by way of amendments to this Policy.
All information processed within the Application is provided voluntarily by the User and is used solely in connection with the functionality of the Application, ensuring integrations, technical support, analytics, security, and other purposes provided for in this Policy.
The User undertakes to periodically review the current version of this Privacy Policy.

13. Contact Information

All suggestions, requests, inquiries, complaints, or questions regarding this Policy, as well as requests related to the processing of Personal Data, shall be addressed to the Administrator at the following email address: support@basetch.com.