Effective Date: May 26, 2026 | Last Updated: July 6, 2026
ShipHub is a warehouse-management and order-fulfillment platform operated by PAX TRADING, INC ("ShipHub", "we", "us", or "our"). This Privacy Policy explains how we collect, use, disclose, and protect personal data in connection with the ShipHub service.
This policy applies to personal data we process when merchants connect ShipHub to sales channels (Shopify, Amazon, etc.) and to data we collect directly from merchants and their authorized users.
For personal data originating from a merchant's connected sales channel, the merchant is the data controller and ShipHub acts as the data processor on the merchant's behalf, in accordance with the merchant's instructions and applicable law.
For personal data that originates directly from ShipHub (such as operator / admin accounts, billing contacts, and account usage data), ShipHub is the data controller.
If you are an end customer of a merchant using ShipHub, please contact the merchant first. If you are unable to reach the merchant, you may contact us at Infor@shiphub.us.
As a data processor (channel data):
When a merchant connects a sales channel, ShipHub receives only the data necessary to provide fulfillment services:
We do not collect or store payment-card data, full customer profiles, marketing preferences, browsing behavior, or any data not required to fulfill orders.
As a data controller (account data):
We collect account and billing information directly from merchants and their users, including name, email, company details, billing address, and payment information necessary to manage accounts and subscriptions.
We use personal data solely to:
We do not sell personal data and we do not use it for marketing or advertising.
Where ShipHub acts as a processor, we process personal data pursuant to the merchant's instructions and the contract between us.
Where ShipHub acts as a controller, we rely on the following legal bases:
ShipHub fully supports Shopify's mandatory GDPR compliance webhooks:
customers/data_request: Shopify sends us the customer identifiers and the list of order IDs the customer placed in the last six months. ShipHub compiles the personal data associated with those orders and emails it to the merchant contact on file so the merchant can respond to the data subject within the required timeframe.customers/redact: Shopify sends the list of order IDs to redact. ShipHub redacts personal fields (recipient name, company, phone, shipping address) on those orders. We retain order ID, order number, and line items on a legitimate-interest basis for tax, audit, and record-keeping purposes; these retained records no longer contain personal data.shop/redact: Shopify sends this webhook 48 hours after a merchant uninstalls the app. After an additional 48-hour reinstall grace period, ShipHub redacts personal data on every order tied to the shop, removes channel listings, and permanently deletes the channel-connection record (including the encrypted access token and the configured fulfillment location).app/uninstalled) — access tokens are immediately revoked; order data is retained for legitimate business, tax, and audit purposes unless a valid deletion request is received.ShipHub uses the following categories of sub-processors to deliver the service:
A current list of sub-processors is available upon request at Infor@shiphub.us. When you select a carrier, relevant shipping data is shared with that carrier in accordance with the carrier's privacy policy.
Personal data processed by ShipHub is primarily stored in the United States. For merchants subject to the GDPR, UK GDPR, or other data protection laws that restrict international transfers, we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) where required. Additional safeguards are available under our Data Processing Addendum on request.
Depending on your location, you may have rights to access, correct, delete, or port your personal data, or to object to certain processing. Because ShipHub primarily acts as a processor for merchant-originated data, the fastest way to exercise these rights is to contact the merchant directly. If you cannot reach the merchant, contact us at Infor@shiphub.us and we will route your request to the merchant and assist with the response.
California residents (CCPA / CPRA): in the past twelve months ShipHub has not "sold" or "shared" personal information as those terms are defined under the CCPA. You may request access to or deletion of personal information we hold about you, and you will not be discriminated against for exercising these rights.
By connecting a sales channel to ShipHub, you represent and warrant that you have all necessary rights, consents, and legal bases to share customer personal data with ShipHub for the purpose of order fulfillment. You remain responsible for your own compliance with applicable privacy laws as the data controller, including providing your customers with appropriate notice and honoring their rights.
We protect personal data using industry-standard measures, including:
The ShipHub marketing site and admin use only strictly necessary cookies required to operate the site and keep merchants signed in. We do not use third-party advertising cookies or cross-site tracking. If this changes in the future, we will update this policy and, where required, request your consent.
We may update this Privacy Policy from time to time. We will notify merchants of material changes via email or through the ShipHub admin interface, and the "Last Updated" date at the top of this page will reflect the current version. Your continued use of the service after changes become effective constitutes acceptance of the updated policy.
PAX TRADING, INC
11460-11462 Pagemill Rd, Dallas, TX 75243
Email: Infor@shiphub.us
Phone: (469) 677-1200