Data processing terms
Who these terms are between
Shared Ambition Support Ltd (trading as SAS), registered in England and Wales, company number 13961503, 143 Adelphi Court , North George Street , Salford , M3 6HU. VAT number GB477601668. Email hello@dropshipi.com. Phone +447861982290.
These data processing terms apply between us and each Partner and Seller ("you") and form part of the Partner terms or Seller terms. They meet the requirements of Article 28 of the UK GDPR.
What we process
- Subject matter and purpose: receiving your orders from your shops and marketplaces, fulfilling and dispatching them (Partners) or helping you fulfil them (Sellers), tracking, returns, customer messages, invoices and records, as you instruct by using the service.
- Personal data: your customers' names, delivery addresses, email addresses, phone numbers, marketplace user names, order contents and messages.
- Data subjects: your customers and people who contact you.
- Duration: while your account is open, then as set out below.
Our commitments
- We act only on your documented instructions (your use of the service and these terms), unless the law requires otherwise, in which case we tell you unless the law forbids it.
- Everyone who can access the data is bound to confidentiality.
- We keep it secure: encrypted connections, encrypted storage of your shop and supplier credentials, encrypted off-site backups, access limited to those who need it, and audit records of staff actions.
- We use these sub-processors: Railway (hosting, EU region), Cloudflare (off-site backup storage and network), Resend (email delivery), Stripe (payments), the couriers that deliver each parcel (such as Royal Mail, Evri, DPD or Parcel2Go) and the dropship suppliers that dispatch your orders (such as CJ Dropshipping). We'll give you 30 days' notice of a new sub-processor so you can object. Each is bound by data protection terms at least as protective as these.
- Where data leaves the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement or Addendum.
- We help you answer requests from your customers to see, correct or delete their data, and with security, breach notifications and impact assessments where needed.
- We tell you without undue delay, and in any case within 48 hours of becoming aware, of a personal data breach affecting your customers' data.
- We give you the information needed to show these terms are met, and allow reasonable audits with notice.
When it ends
When your account closes we delete your customers' personal data, or return it to you if you ask within 30 days, except where the law requires us to keep it (for example invoices and order records for tax, kept 6 years).
Your commitments
You confirm you have a lawful basis to give us your customers' data for these purposes and that your own privacy notice tells them about it.
Last updated October 2026.