This policy applies to all individuals whose personal information we collect or process, whether directly or indirectly through our customers and their ecommerce systems. In many cases, Jungle Commerce acts as a data processor, handling personal information solely for the purpose of providing fulfilment, logistics, and order-management services on behalf of our customers.

This policy explains:

• The types of personal information we collect;
• How and why we collect personal information;
• How personal information is used, stored, and disclosed;
• How long we retain personal information; and
• Your rights and how you may contact us regarding privacy matters.

Personal information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. This includes information stored by our customers in the Jungle Commerce platform.

Examples include:

• Name, address, phone number, email address
• Shipping details
• Order and delivery information
• IP address and device identifiers
• Account information and access credentials

Sensitive Information

Sensitive information includes information such as racial or ethnic origin, political opinions, religious or philosophical beliefs, sexual orientation, health information, biometric data, and criminal records. Jungle Commerce does not collect sensitive information unless required and legally permitted.

We collect personal information when:

• Customers use our order management and fulfilment services
• Users create accounts or authenticate into our platform
• We integrate with ecommerce and logistics providers
• We communicate via email, phone, or support channels
• We engage with suppliers, contractors, and business partners
• Customers transmit order data from connected ecommerce platforms

We collect only the minimum amount of personal information required to provide our services. Where practicable, we collect information directly from individuals; otherwise, information may be collected indirectly through customers and third-party systems.

Types of information collected directly from users or customers include:

• Name, business role, and contact details
• Email address and phone number
• Login activity, audit logs, and IP addresses
• Support requests and communication history

Indirect collection occurs when customers use Jungle Commerce to process ecommerce orders.

We may receive:

• End-customer names and shipping addresses
• Email addresses or phone numbers
• Order, parcel, and delivery details
• Delivery instructions and carrier-related data

This information is processed solely to provide fulfilment, logistics, and order-management services on behalf of customers. We do not use this information for analytics, marketing, or unrelated purposes.

We store data using secure cloud infrastructure located in:

• Australia (APAC users)
• United States (Americas users)
• United Kingdom (UK & Ireland users)
• Germany (EU users)

We apply strong access controls, encryption, monitoring, audit logging, and secure development practices to protect personal information from misuse or unauthorised access. Access to personal information is limited to authorised personnel on a strict need-to-know basis.

We collect and use personal information to:

• Operate, maintain, and improve the Jungle Commerce platform
• Enable ecommerce integrations and fulfilment workflows
• Authenticate users and secure accounts
• Provide customer support and resolve issues
• Process shipments and interact with logistics partners
• Meet legal, regulatory, and security obligations

We do not use personal information for profiling, behavioural analytics, or marketing unless explicitly authorised by the data owner.

We retain personal information only for as long as necessary to provide services to our customers, meet contractual obligations, or comply with legal requirements. Order and fulfilment data is typically retained for a limited period determined by customer configuration and regulatory requirements.

When information is no longer required, we securely delete or de-identify it in accordance with the APPs and our data retention policy.

Jungle Commerce does not routinely collect sensitive information. Where collection is necessary, we do so only with explicit consent or where permitted by law.

Employee Records

Some employee records may be exempt from certain APP requirements where they relate directly to the employment relationship.

We may use or disclose personal information for:

• Providing fulfilment and order management services
• Integrating with ecommerce systems and carriers
• Security, authentication, and fraud prevention
• Support and operational improvements

Jungle Commerce does not sell personal information. We disclose personal information only to trusted third parties who assist in delivering our services—such as cloud hosting providers, carriers, and integration partners—and only under appropriate confidentiality and data-protection obligations.

We require third parties to meet security and privacy standards consistent with our own obligations and we monitor compliance where appropriate.

Jungle Commerce is a B2B service and does not directly target or onboard minors. We may indirectly process minors’ information when customers submit ecommerce orders.

We:

• Process minor data only for fulfilment purposes
• Do not profile or market to minors
• Apply strict access controls and security protections
• Rely on customers to obtain any required consents

We will comply with the Children’s Online Privacy Code once implemented and update this policy accordingly.

Access, Correction, and Deletion

You may request access to your personal information, request corrections to inaccurate information, or request deletion or de-identification where permitted by law and contractual obligations.

We will respond within a reasonable timeframe and in accordance with the APPs.

Complaints regarding privacy should be submitted in writing to the contact above. We will assess the complaint promptly and work to resolve it.

If you are unsatisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).