Bangkoksync Shipping for KEX

Privacy Policy

Last updated: October 8, 2026

This Privacy Policy explains how Bangkok Synchronize Business Co., Ltd. ("Bangkoksync", "we", "us", or "our") processes information when a merchant installs or uses the Bangkoksync Shipping for KEX app for Shopify.

Bangkoksync Shipping for KEX is independently developed by Bangkok Synchronize Business Co., Ltd. It is not affiliated with, endorsed by, or sponsored by KEX Express.

Information we process

We process only information needed to provide the shipping service:

• Shop identity, app configuration, and authorization information.
• Order and fulfillment information, including order identifiers, purchased items, shipping method, payment method, and order totals.
• Recipient name, shipping address, and phone number required to create and deliver a KEX shipment.
• KEX tracking numbers, shipment status, and shipping label data.

How we use information

We use this information to:

• Calculate and display configured KEX shipping rates at checkout.
• Create KEX shipments and shipping labels.
• Update Shopify fulfillments with KEX tracking information.
• Display shipment progress and help merchants resolve failed jobs.
• Protect, operate, troubleshoot, and audit access to the app.
• Respond to support, privacy, security, and legal requests.

We do not sell customer personal data or use it for advertising or unrelated profiling.

How information is shared

We share information only when needed to provide and secure the service:

• With Shopify to read eligible orders and update fulfillment and tracking information.
• With KEX Express to create and manage shipments, labels, delivery, and tracking.
• With infrastructure providers that host or protect the app, subject to appropriate access restrictions.
• When required by applicable law or a valid legal request.

Cookies and session information

The embedded app uses limited session information to authenticate requests from Shopify Admin and protect merchant accounts. We do not use this information for advertising or cross-site tracking.

Data retention and deletion

For terminal KEX orders, protected recipient data is removed 90 days after the order's last update. Operational identifiers, shipment status, and tracking information may be retained when needed to prevent duplicate shipments and maintain transaction records.

Protected-data access logs contain hashed staff and order identifiers, not customer contact details, and expire after 365 days. We process Shopify's customer data request, customer redaction, and shop redaction webhooks. A shop redaction request removes app-owned order records and access logs associated with that shop.

Security

We use access controls, encrypted connections, credential protection, tenant-scoped data operations, audit logging, and other reasonable administrative and technical safeguards. No method of storage or transmission is completely secure, but we work to protect information proportionate to its sensitivity.

Merchant and customer choices

Merchants can uninstall the app to stop future processing. Customers should contact the Shopify merchant that received their order to request access, correction, or deletion. Merchants and customers may also contact us about information processed by this app. We will respond directly or coordinate through Shopify and the merchant as appropriate.

Changes to this policy

We may update this policy to reflect changes to the app, legal requirements, or our data practices. The date above identifies the latest revision.