Last updated: August 2026
Packrefund (packrefund.com), based in Spain. For any question regarding personal data: [email protected].
We process two categories of data, for distinct purposes:
Minimisation: personal data of your end customers (names, addresses, phone numbers) that may appear in those files is not needed for the audit and is discarded or pseudonymised at ingestion. We do not use it, exploit it or share it.
Processing of your contact data and shipment data relies on the performance of the relationship you request (Article 6(1)(b) GDPR) and on your explicit consent, given by ticking the form checkbox (Article 6(1)(a) GDPR). You may withdraw that consent at any time.
Regarding the data contained in your invoices, you act as the data controller and Packrefund as the processor: we process that data on your instructions and solely for the purpose described. On request we sign a data processing agreement (DPA).
We keep files and data for as long as needed to perform the audit and manage the resulting claims. You may request deletion at any time by writing to [email protected]; we will delete them unless a legal obligation requires retention.
Data is hosted on servers located in the European Union. We do not sell or share your data with third parties for commercial purposes. We use technology providers acting as processors (for example the Tally form service and our email provider), subject to their own contractual and security safeguards. When we file a claim with a carrier on your behalf, we disclose to that carrier only the data strictly required for the shipment being claimed.
You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected]. If you believe your request was not handled properly, you may lodge a complaint with your national data protection authority.
If we change this policy, we will publish the updated version on this page with its new date.