Privacy policy and Amazon data handling

Information we collect

We collect the shipment and parcel information required to carry out a delivery: recipient name, delivery address, contact details where provided, parcel dimensions and weight, PDN parcel numbers, scan events, delivery attempts and delivery outcomes.

We also collect the business contact details merchants provide when requesting a quote or contacting support.

Sources of information

Amazon Information is retrieved only from SP-API after the relevant Selling Partner authorises PDN through OAuth. PDN does not retrieve Amazon Information from Seller-provided files, order exports, WMS/TMS systems, email attachments or other external non-Amazon sources.

We also collect the business contact details merchants provide when requesting a quote or contacting support, and scan events recorded by PDN personnel on PDN-managed devices during delivery.

How we use information

Information is used to receive parcels, assign PDN parcel numbers, plan delivery stations and routes, record scans and delivery outcomes, resolve failed deliveries and address problems, and produce operational reports covering the merchant’s own parcels.

We do not use this information for marketing, advertising, profiling, Brand Analytics, inventory management or cross-merchant analysis. Recipient data is used only to deliver parcels and to meet applicable legal obligations.

Data sharing

Delivery information is not sold. PDN does not disclose Amazon Information to outside delivery companies, independent delivery parties or external warehouses.

Amazon Information is shared only as follows: (1) the authorising Selling Partner, through an authenticated portal or API over TLS 1.2+, receives reports concerning that Selling Partner’s own parcels; (2) Google Cloud is used for hosting, storage, backup and monitoring; (3) SingleStore is used for database processing; (4) competent authorities, only where legally required. Each processor acts under contract and only for the stated purpose.

Data security

Data is protected with AES-256 encryption at rest and TLS 1.2 or higher in transit, multi-factor authentication, role-based access control, least privilege and audit logging. Delivery personnel can only see the minimum information needed for their assigned route, on devices issued and managed by PDN. Production Amazon PII is not used for development or testing.

Retention and deletion

Amazon customer PII is deleted within 30 days after parcel delivery or receipt of an applicable Amazon deletion request unless a documented legal, tax or regulatory obligation requires longer retention. Non-PII Amazon Information is deleted within 18 months. Expired data is removed through controlled lifecycle processes from active systems, caches, exports, copies, snapshots and backups. Authorised shipment data is also removed when the underlying OAuth authorisation ends, subject to the same legal exceptions.

Data subject rights

Individuals may request access, correction, deletion or restriction of their personal information, and may object to processing. Requests can be sent to customer.service.nl@pdn.express and are answered within the periods required by applicable law.

Contact us

For privacy questions or data requests, contact PDN Express B.V. at customer.service.nl@pdn.express, or write to Contour Avenue 71, 2133 LD Hoofddorp, The Netherlands.

Trademarks

Amazon and Selling Partner API are trademarks of Amazon.com, Inc. or its affiliates. PDN Express B.V. is an independent service provider. References to Amazon on this site describe the merchants we serve; they do not mean that PDN is endorsed, certified or operated by Amazon.