Zineps information security policy
Purpose
Zineps processes shipment data, order data and customer data on behalf of webshops, merchants and logistics partners. This policy describes how we protect that data against loss, misuse and unauthorised access.
Scope
This policy applies to the Zineps platform, our APIs and integrations (such as webshop and marketplace connections), our employees and the parties that process data on our behalf.
Responsibility
The management of Zineps is ultimately responsible for information security. Every employee is responsible for complying with this policy.
Access control
Access to systems and data is granted only where necessary (least privilege). Accounts are personal, passwords are strong and, where possible, we use two-step verification. Access is revoked as soon as it is no longer needed.
Encryption
All communication with the Zineps platform and our APIs is encrypted via HTTPS/TLS. API keys, tokens and passwords are stored encrypted and are never recorded in source code or log files.
Data from connections
Data we receive through connections (such as orders and shipping information) is used only to create shipments, track them and report the status back. We request only the permissions required for this and never sell data to third parties.
Development and changes
Changes to the platform are reviewed and tested in a separate test environment before they go into production. Production data is not used for testing.
Suppliers and processors
Parties that process data on our behalf, such as hosting and payment providers, are selected with care. We agree confidentiality and security terms with them, in line with the GDPR.
Monitoring and incidents
We monitor our systems for errors and suspicious activity. Security incidents are investigated and resolved immediately. In the event of a data breach we inform the customers concerned and, where required by law, the Dutch Data Protection Authority within 72 hours.
Backups and continuity
We make regular backups of our data so that we can restore it after a disruption or incident.
Retention and deletion
We do not keep data longer than needed for the purpose for which it was collected, or for as long as the law requires. After that it is securely deleted.
Awareness
Employees are informed about this policy and about handling data securely.
Review
This policy is reviewed at least once a year and updated where needed.
Contact
Questions about information security, or want to report a security issue? Email info@zineps.com.
Last updated: November 2026
