Privacy Policy

Last updated: June 23, 2026

At SendOwl, we respect your privacy. This Privacy Policy explains how we collect, use, and share your identifiable information (“Personal Data”) that we gather on the subdomains and websites on sendowl.com (the “Sites”) or through your use of our products and services (collectively, with Sites, our “Services”). We encourage you to read this Privacy Policy before submitting any Personal Data to us through our Services. By continuing to use our Services, you agree to the terms of this Privacy Policy.

Concept Den Ltd. doing business as SendOwl will be the data controller of your Personal Data if you are a merchant using SendOwl to deliver products (“Merchant”) or a promoter of a Merchant's product (“Affiliate”). Conversely, SendOwl will be the data processor if you are a customer to a SendOwl Merchant (“End Customer”).

This Privacy Policy does not apply to the way we process Merchants' End Customer information in our role as a service provider to our Merchants. Our Data Processing Addendum, which describes how we process and safeguard Merchants' End Customer information as a service provider to our Merchants, is available upon request by emailing [email protected].

If you are an End Customer to one of our Merchants, please contact your Merchant directly for information regarding how your Merchant uses and shares your Personal Data gathered from our Services.

Please click the following links to learn more about our Privacy Policy:

• Information We Collect
• How We Use Information
• How We Share Information
• How Do We Respond to ‘Do Not Track’ and Other Opt-out Signals?
• Cookies
• Additional Privacy Rights and Disclosures
• Retention
• Children's Privacy
• Change of Control
• Data Security
• Updates
• Contact Us

Information We Collect

Information We Automatically Collect. For all visitors to our Site, we collect aggregated information on pages viewed including IP address, timestamps, and logins. This information may be collected via several technologies, including cookies, web beacons, clear GIFs, canvas fingerprinting and other means. You can control cookies in your browser to enable or disable them. Learn more in our Cookie Policy.

Information You or Your Merchant Gives Us. For our Merchants, we collect registration information including name, email address, telephone number; billing information including address; and information required to sell goods.

For End Customers who buy a digital product from a Merchant that is delivered by SendOwl, we collect information relating to any transactions recorded by us or returned by the payment gateway including name, email address, billing and shipping address.

We use payment processors for payment, analytics, and other business services. Payment processors collect identifying information about the devices that connect to its services. Payment processors use this information to operate and improve the services they provide to us, including for fraud detection. You can learn more about Stripe, our main payment processor, and read its privacy policy at www.stripe.com/privacy.

Information We Collect From Third Parties. If you access our Services through third parties (e.g., Facebook or Google), or if you share content from our Services to a third party social media service, the third party service will send us certain information about you if the third party service and your account settings allow such sharing. The information we receive will depend on the policies and your account settings with the third party service.

How We Use Information

We use your Personal Data for the following purposes:

• To provide you with our Services, which includes:
  • to respond to your enquiry, ask a question, contact you about your request or other reasons related to offering and improving our Services;
  • provide checkout capabilities on our Site;
  • to enable us to communicate with you and sellers;
  • send you our monthly newsletter if you have signed up;
• To analyze Site usage and improve the services offered;
• For market research, project planning, troubleshooting problems;
• To share your website visitor activity, through website cookies, with third-party marketing partners to market our Services on our Sites and other websites that you may visit;
• To detect security incidents, protect against fraudulent or other criminal activity, debug and repair errors, and maintain the overall quality and safety of our Services;
• For buyers who buy something that is delivered by SendOwl we collect data so we can provide them with access to their purchase;
• To protect against, identify and help prevent fraud, unauthorized activity, claims and other liabilities; and
• To fulfil our legal and financial obligations.

Marketing. We may use your Personal Data to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe instructions provided in any email we send, or you can contact us using the contact details provided in the “Contact Us” section below. You will still continue to receive service-related messages concerning products and services you have purchased (unless we have indicated otherwise).

How We Share Information

Affiliates, Subcontractors, and Service Providers. We share your Personal Data with our third-party service providers, affiliates, and any subcontractors as required to offer you our products and Services. These entities help us to:

• Run, operate, and maintain our Sites through third-party platforms and software tools;
• Perform content moderation and crash analytics;
• Run email and mobile messaging campaigns;
• Perform marketing analytics;
• Provide measurement services and targeted ads (you can opt out of these services at websites such as https://www.aboutads.info/choices and https://www.youronlinechoices.eu/);
• Provide payment attribution; and,
• Provide technical and customer support.

Some external service providers may also collect information directly from you (for example, a payment processor may request your billing and financial information) in accordance with their own privacy policy. These external service providers do not share your financial information, like credit card number, with us, but may share limited information with us related to your purchase, like your zip code.

Aggregated or De-identified Data. We may also aggregate or otherwise strip information of all personally identifying characteristics and may share that aggregated, de-identified, or anonymized data with third parties or publish it. We reserve the right to make use of any such aggregated data as we see fit.

Third Party Marketing and Advertising Organizations. With respect to website cookies, we share your information with third-party marketing and advertising partners to market our Services on our Sites and other websites that you may visit.

Disclosures Required by Law. We may be required to disclose your data in response to lawful requests by public authorities, including to meet law enforcement requirements. We may be under a duty to disclose or share your Personal Data in order to comply with any legal obligation, to enforce or apply our terms and conditions and other agreements, to protect our rights, property, or safety, or to protect the rights, property, or safety of others. This includes exchanging information with other companies and organizations for the purposes of fraud protection.

How Do We Respond to ‘Do Not Track’ and Other Opt-out Signals?

Do Not Track (“DNT”) is a privacy preference that users can set in certain web browsers. DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. We do not recognize or respond to browser-initiated DNT signals, as the Internet industry is currently still working toward defining exactly what DNT means, what it means to comply with DNT, and a common approach to responding to DNT.

California and certain other U.S. state residents may opt out of tracking technologies by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us.

Cookies

A cookie is a text file that websites send to a visitor's computer to uniquely identify the visitor's browser or to store information or settings in the browser. Cookies may use your IP address, timestamps, and/or logins. Information collected from cookies is used by us to evaluate the effectiveness of our website, analyze trends, and administer our website. This allows us to determine such things as which parts of our website are most visited and difficulties our visitors may experience in accessing our website. To learn more, please see our Cookie Policy.

When you visit or log in to our website, cookies and similar technologies may be used by our online data partners or vendors to associate these activities with other Personal Data they or others have about you, including by association with your email or home address. We (or service providers on our behalf) may then send communications and marketing to these email or home addresses. You may opt out of receiving this advertising by visiting https://app.retention.com/optout.

Google Analytics. We may use Google Analytics. We use the information we get from Google Analytics only to improve the Site. We do not combine the information collected through the use of Google Analytics with personally identifiable information. Please refer to Google's Privacy Policy for more information. You may also choose to download the Google Analytics opt-out browser add-on.

You may wish to restrict the use of cookies. Please be aware that some of the features of our website may not function correctly if you disable cookies. Most modern browsers allow you to change your cookie settings. You can usually find these settings in the options or preferences menu of your browser. To understand these settings, the following links for commonly used browsers may be helpful:

• Cookie settings in Chrome
• Cookie settings in Firefox
• Cookie settings in Microsoft Edge
• Cookie settings in Safari web and iOS

Personalized Advertising. We may also use targeted advertising cookies, such as Google Ads, to deliver tailored advertising on our Sites and other websites that you may visit. You can learn more about how to control advertising cookies by visiting the Network Advertising Initiative's Consumer Opt-Out link, the DAA's Consumer Opt-Out link for browsers, or the DAA's opt-out link for mobile devices. Please note that electing to opt-out will not stop advertising from appearing in your browser or applications and may make the ads you see less relevant to your interests.

Additional Privacy Rights and Disclosures

If you would like to unsubscribe from receiving our newsletter, you can click on the “unsubscribe” link included in our email or contact us as indicated below.

Exercising Your Privacy Rights. We have listed the privacy rights for several jurisdictions below, but we understand you may have additional rights in your jurisdiction. You may contact us directly at any time about exercising your data protection rights. We will consider your request in accordance with applicable laws.

Additional Disclosures and Rights for EEA, UK, and Swiss Individuals

If you are from the European Economic Area, the United Kingdom, or Switzerland, you have the right, under certain circumstances, to:

• Request access to your Personal Data.
• Request correction of your Personal Data.
• Request erasure of your Personal Data.
• Object to the processing of your Personal Data for reasons relating to your particular situation.
• Request restriction of processing your Personal Data.
• Request to export the Personal Data that we process based on our contract with you or your consent and transfer it to another company (if technically feasible).
• Withdraw any consent you have previously provided to us.

If you wish to exercise any of the rights set out above, please contact us using the details in the Contact Us section.

If you have any issues with our compliance, you have the right to lodge a complaint with the relevant supervisory authority. We would, however, appreciate the opportunity to first address your concerns and would welcome you directing an inquiry to us via the contact information at the bottom of this Privacy Policy.

Important note: If you are a customer who has been delivered a product via SendOwl you will need to contact the Merchant regarding your data rights. SendOwl acts as a data processor and it is the Merchant who must complete your data subject requests as your purchase contract is with them, not us.

Data Transfer

Any data that you provide to us may be accessed, shared, or processed by our offices, located in the United States, and service providers located in the United States, if such data transfer is necessary for the specific purpose for which you submitted your data (such as the provision of goods or services under a written contract). This may entail the transfer of your Personal Data across international borders. The data protection standards may differ and be lower than the standards enforced in your jurisdiction.

Legal Bases for Processing (EEA, UK, and Swiss Individuals)

If you are from the EEA, UK, or Switzerland, our legal bases for collecting and using your Personal Data is as follows:

• The performance of your contract or to enter into the contract and to take action on your requests. For example, the processing of your account registration.
• Our legitimate business interests. For example, fraud prevention, maintaining the security of our network and services, direct marketing to you, and improvement of our services.
• Compliance with a mandatory legal obligation. For example, accounting and tax requirements, which are subject to mandatory retention periods. We may also collect your Personal Data to record your requests to exercise your rights and to verify your identity for such requests.
• Consent you provide where we do not rely on another legal basis. Consent may be withdrawn at any time.
• In some limited cases, we may also have a legal obligation to collect Personal Data from you in response to lawful requests by public authorities, including to meet law enforcement requirements, as described above in the “How We Share Information” section.

Additional Disclosures and Rights for Certain U.S. State Residents

Several jurisdictions grant state residents certain rights, including the right to access specific types of Personal Data, the right to correct inaccurate Personal Data, the right to learn how we process Personal Data, the right to know whether and how we disclose or sell Personal Data, the right to opt out of any sale of Personal Data, the right to request deletion of Personal Data in certain circumstances, the right to limit our use of your sensitive Personal Data, and the right not to be denied goods or services for exercising these rights.

To make such a request, please contact us using the contact details listed in the Contact Us section below.

Opting Out of Cookies and Sale/Sharing Using Online Tracking Technologies. Our use of online tracking technologies may be considered a “sale” / “sharing” under applicable law. Residents of certain U.S. states may have the right to opt out of being tracked by these third parties by clicking the Your Privacy Choices link at the bottom of our website and selecting your preferences.

California and certain other U.S. state residents may opt out of tracking technologies by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (GPC) (on the browsers and/or browser extensions that support such a signal). To download and use a browser supporting the GPC browser signal, click here: https://globalprivacycontrol.org/orgs. If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use. Your request to opt-out of sale/sharing will be linked to your browser identifier only and not linked to any account information because the connection between your browser and the account is not known to us.

Do Not Sell or Share My Personal Information. Residents of certain U.S. states have the right to opt out of the sale of the consumer's Personal Data. Under some U.S state laws, some disclosures of Personal Data necessary to provide you with advertising or marketing may be considered a “sale,” even if no money is exchanged, such as our use of cookies and similar technologies. To opt out of such selling and sharing, please submit a request using the Your Privacy Choices link at the bottom of our website.

Limit the Use of My Sensitive Personal Information. We do not use or disclose sensitive Personal Data for any purpose other than providing our goods and services to you, or as otherwise permitted under applicable law.

Third Party Marketing. California Civil Code Section 1798.83 permits you to request information regarding the disclosure of your Personal Data to third parties for the third parties' direct marketing purposes.

Automated Processing & Profiling. Residents of certain U.S. states have the right to opt out of the processing of Personal Data for purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning a consumer.

Verification Process for Exercising Rights. To protect your privacy, we verify privacy rights requests to ensure that only you (or your authorized agent) can exercise rights pertaining to your Personal Data. As part of our verification process, we may request you submit additional information. If you are an authorized agent wishing to exercise rights on behalf of a state resident, please contact us using the information at the bottom of this Privacy Policy and provide us with a copy of the consumer's written authorization designating you as their agent. We may need to verify your identity and place of residence before completing your rights request.

Appeal Process. In certain cases, we may decline to take action on your request as permitted by law. Should we decline your request, we may provide you with a written explanation of the reasons for our decision and, where required by applicable law, an opportunity to appeal these decisions.

If we deny your appeal, we may provide a written explanation of our decision and, where required by applicable law, instructions on how to contact your local Attorney General or Department of Justice for further review.

Retention

We retain information from or about you for so long as necessary to fulfill the purposes outlined in this Privacy Policy. When the information is no longer necessary for these purposes, we delete it or keep it in a form that does not identify you, unless we are required by law to keep this information for a longer period. When determining the retention period, we take into account various criteria, such as the type of products and services requested by or provided to you, the nature and length of our relationship with you, possible re-enrolment with our products or services, the impact on the services we provide to you if we delete some information from or about you, mandatory retention periods provided by law and the statute of limitations.

Children's Privacy

The Services are not directed at individuals under the age of 16. We do not knowingly collect Personal Data from children under 16. If you become aware that a child has provided us with Personal Data, please contact us using the contact details provided in the Contact Us section below. If we become aware that a child under 16 has provided us with Personal Data, we will take steps to delete such information.

Change of Control

Personal Data may be transferred to a third party as a result of a sale, acquisition, merger, reorganization or other change in control. If we sell, merge or transfer any part of the business, part of the sale may include your Personal Data.

Data Security

We implement a variety of security measures to maintain the safety of your Personal Data when you enter, submit, or access your Personal Data. However, no website, application, or transmission can guarantee security. Thus, while we have established and maintain what we believe to be reasonable procedures to protect the confidentiality, security, and integrity of Personal Data obtained through the Services, we cannot ensure or warrant the security of any information you transmit to us.

Updates

This Privacy Policy may be periodically updated. We encourage you to periodically review this Privacy Policy to ensure you are familiar with the most current version. Please review carefully before submitting Personal Data to our Site. The date the policy was last updated is indicated at the top of this page.

Contact Us

You can contact us at [email protected] if you have any questions regarding this Privacy Policy.