Privacy Policy
This Privacy Policy explains how Startship ("we", "us") collects, uses, discloses and protects personal data, in line with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong (the "PDPO") and its six Data Protection Principles.
1. Who we are
Startship provides warehouse management, order fulfilment and shipping-label software to e-commerce merchants. For personal data you give us on this website, we are the data user. For the order and recipient data our customers process in the Startship app, our customer is the data user and we process it on their behalf as a data processor.
2. Data we collect
Contact and demo requests: your name, company, email, phone number and message.
Account data (in the app): name, email, company details and billing contact. Card details are collected and stored by Stripe, not by us.
Order data (in the app, on behalf of merchants): recipient names, phone numbers and delivery addresses received from sales channels such as HKTVmall.
Website usage: if you accept analytics cookies, aggregated, privacy-friendly page statistics without cross-site tracking.
3. Purposes of use
We use personal data to reply to enquiries and arrange demos; to provide, secure and support the service; to bill subscriptions; to meet legal obligations; and, with your consent, to improve the website. We do not use personal data for direct marketing without your consent, and we do not sell personal data.
4. Disclosure and transfer
We share personal data only with service providers who help us run Startship (for example hosting, email delivery and payment processing through Stripe), with sales channels and couriers as instructed by our customers to fulfil orders, or where required by law. Some providers may process data outside Hong Kong; we require them to protect it to a standard comparable to the PDPO.
5. Retention
We keep personal data only as long as needed for the purposes above. Enquiry data is kept for up to 24 months. Account and order data is kept for the life of the subscription and deleted or anonymised after it ends, unless we must keep it longer by law. Audit logs are kept for at least one year.
6. Security
We protect personal data with encryption in transit and at rest, encrypted storage of channel and courier credentials, role-based access, tenant isolation and audit logging. No system is perfectly secure, but we work to prevent unauthorised or accidental access, processing, erasure, loss or use.
7. Cookies
Necessary cookies remember your language (NEXT_LOCALE) and your cookie choice (ss_consent). A non-sensitive ss_logged_in cookie lets this site show "Go to app" if you're signed in. Analytics load only if you choose "Accept all". You can change your choice at any time with the Cookie settings link in the footer.
8. Your rights
Under the PDPO you may ask whether we hold your personal data, request a copy, and ask us to correct it. We may charge a reasonable fee for a data access request, as permitted by the PDPO, and will respond within 40 days. To opt out of marketing or make a request, email us.
9. Changes
We may update this policy. We'll post the new version here with a new date, and tell customers about significant changes by email.
10. Contact
Data Protection Officer, Startship, hello@startship.io.
Questions about this document? Email hello@startship.io.