Return Prime
Privacy Policy

Uploaded in June 2025

Introduction

Your privacy is important to us, and we are strongly committed to making our practices regarding your personal data more transparent and fairer. Return Prime ("we", "us", or "our") offers a range of features to simplify returns management, recover revenue, and boost efficiency services to merchant customers ("Merchants") to enhance their store operations and improve their consumers' post-purchase experience. This Privacy Policy describes how we – Return Prime (together with its affiliates companies and parent entity Return Prime collect, store, use and disclose personal data regarding who: (i) visit or otherwise interact with our web Site, available at https://www.returnprime.com/ (“Site”) through third-party platforms (e.g., digital stores or marketplaces) (“Platform Provider” or “Service Providers”) through which the Service is made available; (ii) use our Site, whether as an end user on behalf of our business customers (“Users”; and together with the Site, the “Service”).
‍

1. Scope of This Policy

This Privacy Policy applies to personal information we collect and process through our website, APIs, and related services (collectively, the "Services").

This Policy does not apply to data that Merchants collect and process independently about their own customers ("Merchant Data").

Merchants are solely responsible for ensuring their own privacy practices comply with applicable laws and regulations regarding the collection, use, and protection of Merchant Data.

For questions about how a Merchant handles your personal data, please contact them directly.
‍

2. Personal Information We Collect

The categories of personal information we collect depend on how you interact with our Services and the requirements of applicable laws. We collect information you provide directly, data automatically generated through your use of the Services, and information obtained from third-party sources, as detailed below.

Information You Provide to Us

We may collect the following personal information that you provide to us:

• Merchant Account Creation. When creating a merchant account, we collect your name, email address, phone number, and company name.
• Service Purchases. For orders placed through our Services, we collect transaction details (e.g., subscription plan type) and billing address. Please note that payments for the services are processed via Shopify, and we do not directly collect or store payment credentials. Payment processing is securely handled by Shopify's payment providers, in compliance with applicable security standards.
• Communications. When requesting product information, subscribing to our blog, booking a demo, and seeking customer support, we may collect your name, email, phone number, or mailing address.

Automatically Collected Information

We may automatically collect certain personal information when you use our Services, including:

• Automatic Data Collection. We may collect certain information automatically when you use the Services. This information may include your Internet protocol (IP) address, user settings, MAC address, cookie identifiers, mobile advertising and other unique identifiers, details about your browser, customer information, order information, operating system or device, location information (including inferred location based off of your IP address), Internet service provider, mobile carrier, pages that you visit before, during and after using the Services, actions that you take while using the Services, information about the links you click, information about how you interact with the Services, including the frequency and duration of your activities, and other information about how you use the Services. Information we collect may be associated with accounts and other devices.

Information from Other Sources

• Third Party Services and Organizations. We may obtain information about you from third-party services and organizations to enhance our records and provide relevant products and services. For example, if you access our Services through third-party applications, such as the Shopify app store, we may collect information based on the permissions you have granted through your privacy settings. We may also obtain your email address or other personal information from third-party services if you have authorized them to share such data with us.

Information We Process via the Merchant Services

As stated earlier, this Privacy Policy does not apply to or govern the processing of personal information by Return Prime on behalf of Merchants via the Merchant Services. However, for the sake of transparency, we provide the following examples to illustrate how we may process personal information on behalf of Merchants when providing our Services:

• Returns Management. When Merchants utilize our returns and exchange services, we may process personal information related to the return process, including the consumer's name and contact details, original order information, return reason and requested resolution (refund, exchange,  etc.), return shipping address and tracking information, and return status updates. This information is shared with us by the Merchant specifically to facilitate and manage the return process. Our processing of this data is limited to providing return management services as requested by the Merchant.

3. Cookies 

We use cookies and similar technologies to enhance your experience, analyze service usage, and deliver relevant content. Below is a detailed explanation of our practices:

• Cookies. These are small text files placed on your device to enable essential functions like user authentication and session management. For example, cookies allow you to stay logged in while navigating our Services. You may also opt out by blocking cookies from the Website. 
• Log Files. Automatically record technical details during your visits, including IP address, browser type, referring pages, and timestamps.
• Analytics. We may use Technologies and other third-party tools to process analytics information on our Services. 
  ‍

4. How Do We Use Your Information?

We use your personal information for a variety of business purposes, including:

To Provide the Services or Information Requested

We use your information to fulfill our contract with you or the Merchant on whose behalf you use the Services, such as:

• Managing your account information and preferences within the Return Prime platform;
• Providing access to our analytics, and order management features;
• Facilitating returns management for Merchants and their customers;
• Sending return order status updates;
• Answering requests for customer or technical support.

Administrative Purposes

We use your information for various administrative purposes, such as:

• Pursuing legitimate interests, such as direct marketing, research and development, network and information security, and fraud prevention;
• Measuring interest and engagement in our Services;
• Improving and upgrading return management Services;
• Ensuring internal quality control and performance of our systems;
• Authenticating and verifying Merchant identities;
• Carrying out audits related to interactions, transactions, and compliance activities;
• Communicating with you about your account, activities on our Services, and Privacy Policy changes;
• Complying with our legal obligations, particularly related to e-commerce and regulations.

Marketing Our Products and Services

We may use personal information to tailor and provide you with content and information about our Services. We may provide you with these materials as permitted by applicable law.

If you have any questions about our marketing practices or if you would like to opt out of the use of your personal information for marketing purposes, you may adjust your preferences in your account settings or follow the unsubscribe instructions provided in any marketing communication you receive.

Consent

We may use personal information for other purposes that are clearly disclosed to you at the time you provide personal information or with your consent.

De-identified and Aggregated Information Use

We may use personal information and other data about you to create de-identified and/or aggregated information, such as de-identified delivery performance metrics, information about the devices from which you access our Services, or other analyses we create.

If we create or receive de-identified information, we will not attempt to re-identify such information, unless permitted by, or required to comply with, applicable laws. De-identified and/or aggregated information is not personal information, and we may use and disclose such information in a number of ways, including research, internal analysis, analytics, improving our t Services, and any other legally permissible purposes.
‍

5. How We Disclose Your Information

We disclose your information to third parties for a variety of business purposes, including to provide our Services, to protect us or others, as described below.

Disclosures to Provide our Services

• Merchants. In cases where you use our Services on behalf of our Merchants. our Merchants may access information associated with your use of the Services, including usage data, and the contents of the communications and files associated with your account. Please note that your information may also be subject to our Merchant's privacy policy. We are not responsible for the privacy or security practices of our Merchants.
• Service Providers. We may share your personal information with our third-party service providers who use that information to help us provide our Services. This includes service providers that provide us with IT support, hosting, payment processing, customer service, and related services through Shopify app.
• Business Partners. We may share your personal information with business partners to provide you with a service you have requested. We may also share your personal information with business partners with whom we jointly offer products or services, such as integrated e-commerce platforms, review management systems, and other complementary services.
• Affiliates. We may share your personal information with our company affiliates for analytical purposes consistent with this Privacy Policy.
• APIs/SDKs. We may use third-party Application Program Interfaces ("APIs") and software development kits ("SDKs") as part of the functionality of our Services. Your use of such APIs and SDKs is subject to this Privacy Policy.

Disclosures to Protect Us or Others

We may access, preserve, and disclose any information we store associated with you to external parties if we, in good faith, believe doing so is required or appropriate to: comply with law enforcement, national security requests, and legal process, such as a court order; protect your, our, or others' rights, property, or safety; enforce our policies or contracts; collect amounts owed to us; or assist with an investigation or prosecution of suspected or actual illegal activity.
‍

6. How Do We Secure Your Information?

We are committed to protecting the security of your personal data. Return Prime maintains physical, electronic, and procedural safeguards to protect the confidentiality and security of information transmitted to us. We use a variety of security technologies and procedures to help protect your personal data from unauthorized access, use, or disclosure. However, no method of transmission over the Internet, or method of electronic storage, is one hundred percent secure. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
‍

7. Retention of Personal Information

We retain the personal information we collect only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, as well as to comply with legal obligations, resolve disputes, and enforce our agreements. Your personal data will be stored for the duration of your use of our Services, and as required to:

• Fulfill the purposes for which it was collected.
• Resolve any disputes or legal claims.
• Conduct necessary audits and business operations.
• Pursue legitimate business interests.
• Ensure compliance with applicable laws and regulations.

To determine the appropriate retention period for personal information, we consider applicable legal requirements, the amount, nature, and sensitivity of the data, potential risk factors, the purposes for which we process your information, and whether we can achieve those purposes through other means.

Once the data is no longer needed for these purposes, we will securely delete or anonymize your information in accordance with legal requirements. In some circumstances, we may anonymize your personal information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.
‍

8. European Data Subjects Disclosure & Rights

Residents of the ("UK") and the European Economic Area ("EEA") are provided certain privacy rights under the UK and EU General Data Protection Regulations ("GDPR"). 
‍

Legal Basis for Processing

If you are a resident of the European Economic Area ("EEA") or the United Kingdom ("UK"), we process your personal data in accordance with the General Data Protection Regulation ("GDPR") under the following legal bases:

• Consent: When you have explicitly agreed to the processing of your personal data for specific purposes, such as receiving marketing communications. You have the right to withdraw your consent at any time.
• Legitimate interest: We process your data to support our legitimate business interests, which include providing and improving our tracking and returns services, enhancing user experience on our platform, communicating service updates, offering customer support, conducting market analysis, ensuring security of our systems, and operating our business efficiently.
• Contract fulfilment: We process your data when necessary to fulfill our contractual obligations to you, including providing our order tracking, returns services, managing subscription plans, and processing payments.
• Legal obligation: We process your data when necessary to comply with applicable laws, regulations, and legal requirements, including tax reporting and responding to legal requests from authorities.

Data Subject Rights

If you are a resident of the European Economic Area (EEA), you have certain rights regarding your personal data under the General Data Protection Regulation (GDPR), including:

• Right to access. You can request a copy of the personal data we hold about you.
• Right to rectification. You can request correction of inaccurate or incomplete personal data.
• Right to erasure. You can request deletion of your personal data in certain circumstances.
• Right to restrict processing. You can request the limitation of processing of your personal data.
• Right to data portability. You can request transfer of your personal data to you or another service provider in a structured, commonly used, machine-readable format.
• Right to object. You can object to our processing of your personal data based on legitimate interests or for direct marketing.
• Right to withdraw consent. Where we rely on your consent to process your personal data, you can withdraw this consent at any time.
• Right to not be subject to automated decision-making. You can request not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects.

To exercise your rights, please contact us through the contact information below.

International Data Transfers

When you use our Services, your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where data protection laws may differ from those in your country. 

To ensure adequate protection of your data, we implement the following safeguards:

• UK International Data Transfer Addendum, where applicable
• Other legally approved transfer mechanisms under GDPR
• Regular assessments of data protection laws in countries where your data may be transferred
• Ensuring our partners and service providers maintain adequate data protection measures

By using our services or providing us with any information, you consent to such transfer, storage, and processing. If you have any questions about the international transfer of your personal data, please contact us using the contact information provided below.
‍

Complaints

If you have concerns about how we handle your personal data, we encourage you to contact us first at help@returnprime.com so we can resolve your issue. You also have the right to lodge a complaint with a supervisory authority in your country of residence, place of work, or where an alleged infringement of data protection laws has occurred.
‍

9. Your Privacy Choices and Rights

The privacy choices you may have about your personal information are determined by applicable law and are described below.
‍

Email and Telephone Communications

If you receive an unwanted email from us, you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails. Note that you will continue to receive transaction-related emails regarding products or Services you have requested. We may also send you certain non-promotional communications regarding our Services or updates to our Terms or this Privacy Policy, which you cannot opt out of.
‍

"Do Not Track"

Do Not Track ("DNT") is a privacy preference that users can set in certain web browsers. Please note that, at this time, we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers.
‍

Cookies and Interest-Based Advertising

You may stop or restrict the placement of Technologies on your device or remove them by adjusting your preferences as your browser or device permits. However, if you adjust your preferences, our Services may not work properly. Please note that cookie-based opt-outs are not effective on mobile applications. You may opt out of personalized advertisements on some mobile applications by following the instructions for Android, iOS, and others.

The online advertising industry provides websites from which you may opt out of receiving targeted ads from data partners and advertising partners that participate in self-regulatory programs. You can learn more about targeted advertising and consumer choice by visiting the Network Advertising Initiative, the Digital Advertising Alliance, the European Digital Advertising Alliance, and the Digital Advertising Alliance of Canada.

Please note you must separately opt out in each browser and on each device.
‍

Your Privacy Rights

By using our Services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our Services.

You have the right to:

• Withdraw your consent at any time
• Request access to or deletion of your personal data

To exercise these rights, please contact us through the contact information below.

We may update this Policy periodically to reflect changes in our practices or legal requirements.
‍

10. Children's Information

Our Services are not directed to children under the age of 18, and we do not knowingly collect personal information from them. If you are under 18, please do not provide any personal information through our Services.

If you are a parent or guardian and believe that your child has provided personal information to us without your consent, please contact us immediately at help@returnprime.com Upon verification, we will take prompt action to delete the data, unless we are legally required to retain it.

Merchants using our Services are responsible for ensuring that their customers are not under the age of 18 and must comply with all applicable child privacy laws.
‍

11. Limitation of Liability

In no event shall Return Prime be liable for any consequential damages, even if we knew or should have known of the possibility thereof. These limitations shall apply to the fullest extent permitted by law. In some jurisdictions, some of the foregoing limitations may not apply.
‍

12. Links to Other Websites

Our Website may contain links to other websites. A link to a third party's website does not mean that we endorse it or that we are affiliated with it. We do not exercise control over third-party websites. You access such third-party websites or content at your own risk. You should always read the privacy policy of a third-party website before providing any information to the website.
‍

13. Changes to this Privacy Policy

Return Prime shall regularly review the sufficiency of this Privacy Policy. We reserve the right to modify and change the Privacy Policy at any time. Any changes to this policy will be published on the Platform.
‍

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at help@returnprime.com