This page lists the third-party subprocessors (“Subprocessors”) Package Retriever engages to process personal information on behalf of Merchants, as defined in our Data Processing Agreement.

All Subprocessors are bound by written contracts with Package Retriever that impose data-protection obligations consistent with our DPA, including obligations regarding security, confidentiality, and onward transfer. Where a Subprocessor is located outside the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses (or the UK Addendum or UK International Data Transfer Agreement, as applicable) as the basis for transfer.

Notification of changes. Merchants may subscribe to subprocessor change notifications by emailing privacy@packageretriever.com with the subject line “Subprocessor Updates.” We will notify subscribers at least thirty (30) days before adding a new Subprocessor that materially changes the processing of Merchant personal information, and Merchants may object to the addition pursuant to the DPA.

Note on Marketplace Integrations. The Marketplace Integrations listed above are engaged by the Merchant directly. Package Retriever interacts with these platforms pursuant to credentials and authorizations the Merchant grants us in order to provide the Services. The Merchant's relationship with each marketplace is governed by that marketplace's own terms and privacy policy; we are not a processor of those marketplaces.