Privacy Policy

Last updated: 8 July 2026

This Privacy Policy explains how FLEX Logistics Services Poland Sp. z o.o. collects, uses, stores and protects personal data when you visit https://fbareturns.eu, contact us through the website, request information about FBA Returns services, open or manage a returns-related service request, or subscribe to our email communications.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection and privacy laws.

1. Who We Are

The website https://fbareturns.eu is operated by:

FLEX Logistics Services Poland Sp. z o.o.
Czysta 10/2
31-121 Krakow, Poland
KRS: 0000823826
NIP / VAT ID: PL6762576552
REGON: 38531911100000
EORI: PL676257655200000

In this Privacy Policy, “FLEX.”, “FBA Returns”, “FBA Returns by FLEX.”, “FLEX. network”, “we”, “us” or “our” refers to FLEX Logistics Services Poland Sp. z o.o. and, where applicable, FLEX. branded service lines, operational locations, partners, subcontractors or affiliated providers involved in the delivery of services under a separate commercial arrangement.

The website presents information about FBA returns services delivered through the FLEX. network, including return address handling, return receiving, inspection, grading, rework, relabeling, restock preparation, consolidation, redirection, resale support, disposal coordination where agreed, and reverse logistics support for marketplace sellers handling customer returns, Amazon returns or cross-border ecommerce returns.

We are the controller of the personal data processed through this website, unless this Privacy Policy states otherwise.

If you have any questions about this Privacy Policy or about how we process personal data, you can contact us through the contact form on this website or at [email protected].

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed when you visit or browse this website, use our contact forms, request a quote, request information about FBA returns services, ask about return addresses, return receiving, inspection, grading, rework, relabeling, restock preparation, consolidation, redirection, resale support, disposal coordination, reverse logistics or re-forwarding, subscribe to the FLEX. operational digest or other email communications, interact with website content, forms, cookies, analytics or tracking technologies, or communicate with us in relation to a potential or existing business relationship.

This Privacy Policy does not replace any separate data processing agreement, service agreement, warehouse service agreement, logistics agreement, returns handling instruction, forwarding instruction, disposal instruction, marketplace operations agreement or other contract that may apply if your company becomes a FLEX. customer, supplier or business partner.

3. Personal Data We May Collect

The categories of personal data we may collect depend on how you interact with the website and which services you ask about or use. We only collect data that is relevant for the purposes described in this Privacy Policy.

3.1 Contact form and business inquiry data

When you contact us through the website, request a quote, ask about FBA returns services or send us a business inquiry, we may process your first name and last name, email address, phone number, company name, job title or business role where provided, country, marketplace, warehouse location, Amazon marketplace, return flow context, service requirement, operational context, message content, inquiry details, service interests, date and time of submission, page or URL from which the form was submitted, technical information connected with the submission such as IP address, browser type, device type and user agent, and anti-spam or security verification information where such protection is enabled on the form.

3.2 FBA returns, reverse logistics and operational request data

If your inquiry or service request concerns FBA returns, customer returns, return address handling, return receiving, inspection, grading, rework, relabeling, restock preparation, consolidation, resale support, disposal coordination, redirection or re-forwarding, we may process operational information that you choose to provide, including SKU details, product categories, return volume, number of units or boxes, carton or pallet information, Amazon return or removal references where relevant, Seller Central references, marketplace references, warehouse or destination information, customer return context where provided, return condition notes, inspection instructions, grading rules, rework instructions, restock instructions, disposal instructions, forwarding instructions, packing list information, delivery report information, photos or discrepancy reports, customs or import context, and information required to assess, quote, plan or perform the requested service.

Please do not provide unnecessary personal data in operational files, labels, packing lists, return documents, shipment documents, photos or messages. If you provide personal data within such operational materials, we may process it only to the extent necessary to assess, plan, perform, document or support the requested service.

3.3 Email marketing and operational digest data

If you actively tick the operational digest checkbox in our contact form or otherwise give consent to receive email communications from us, we may process your email address, first name and last name where provided, phone number or company/contact details where provided and relevant, subscription status, date, time and source of consent, the exact consent checkbox field, value and consent text shown at the time of subscription, the source URL, IP address and browser user agent connected with the consent record, and email delivery, opening, clicking, unsubscribe and preference information where available through our email marketing provider.

The current operational digest checkbox text may read: “Send me the FLEX. operational digest 1–2 times a month. No spam, we promise.”

Submitting a contact form without ticking the operational digest checkbox does not add you to our marketing mailing list. In that case, we will use your contact details only to handle your inquiry and related business communication, unless another lawful basis applies.

3.4 Website, technical and usage data

When you visit the website, we may process technical and usage data such as IP address, browser type and version, device type and operating system, referrer URL, pages visited, approximate interaction with the website, date and time of access, cookie and consent preferences, security logs, error logs and server log data.

3.5 Comments, user accounts and media uploads

If comments, user accounts or media upload functions are enabled on the website, we may process the information submitted through those functions. If you leave a comment, we may collect the data shown in the comment form, your IP address and browser user agent string to help detect spam.

If you upload images to the website, you should avoid uploading images that contain embedded location data, such as EXIF GPS data. Visitors to the website may be able to download and extract location data from images published on the website.

4. Purposes for Which We Process Personal Data

We may process personal data to respond to your contact form submission, request, quote inquiry or business question, discuss, prepare, quote, provide or improve FBA returns, customer returns handling, return address handling, receiving, unit intake, inspection, grading, rework, relabeling, restock preparation, consolidation, redirection, resale support, disposal coordination, re-forwarding and related reverse logistics services, manage potential, current or past business relationships, open or support a returns-related service request, process operational instructions and service documentation, coordinate with warehouse, carrier, forwarding, disposal, recycling, Amazon-related, marketplace-related or other operational providers where necessary, send the FLEX. operational digest, newsletters, service updates, practical marketplace logistics insights and related content where you have consented to receive them, manage email marketing subscriptions, unsubscribe requests and suppression lists, keep records of consent and demonstrate compliance with data protection and marketing rules, operate, secure, maintain and improve the website, prevent spam, abuse, fraud, security incidents or unauthorized access, analyze website performance and content effectiveness where analytics are enabled with the required consent, measure or improve advertising and communication effectiveness where marketing tracking is enabled with the required consent, comply with legal, tax, accounting, customs, waste-handling, regulatory or administrative obligations, and establish, exercise or defend legal claims.

5. Legal Bases for Processing

Depending on the purpose, we rely on one or more of the following legal bases under Article 6 GDPR: consent under Article 6(1)(a) GDPR for email marketing subscriptions, non-essential cookies, analytics cookies, marketing tracking and similar processing where consent is required; pre-contractual steps or contract performance under Article 6(1)(b) GDPR when we process your inquiry, prepare an offer, open or support a service request, handle service instructions or provide agreed services; legal obligation under Article 6(1)(c) GDPR where processing is necessary to comply with tax, accounting, customs, regulatory, data protection or other legal obligations; and legitimate interests under Article 6(1)(f) GDPR for responding to business inquiries, managing B2B relationships, coordinating operational requests, securing the website, preventing abuse, keeping basic business and service records, improving our services, and establishing, exercising or defending legal claims.

Where we rely on legitimate interests, we consider that our interests are not overridden by your rights, freedoms and interests. You may object to processing based on legitimate interests as described in the “Your Rights” section below.

6. Contact Forms and Business Requests

When you contact us through the website, we use the information you provide to respond to your request, prepare a quote, discuss FBA returns, customer return handling, return address setup, return receiving, unit intake, inspection, grading, storage, rework, relabeling, restock preparation, consolidation, redirection, resale support, disposal, re-forwarding or related reverse logistics services, or manage the follow-up of a potential or existing business relationship.

We may store the content of the message, your contact details and related technical submission data so that we can properly handle the request, avoid duplicated communication, verify what was submitted and protect the website against spam or abuse.

If your request relates to a service that may be handled by another FLEX. network entity, partner, subcontractor, operational location or provider, we may share the information necessary to assess and respond to the request.

We do not add you to our marketing mailing list only because you submitted a contact form. Marketing emails are sent only where a valid marketing consent or another applicable lawful basis exists.

7. FBA Returns, Reverse Logistics, Rework, Disposal and Operational Data

When we assess or provide FBA Returns services, we may process operational data required to receive, inspect, grade, sort, store, document, recover, relabel, rework, consolidate, redirect, dispose of or re-forward returned inventory. This may include return order references, marketplace references, Amazon-related references where relevant, packing lists, shipment references, box labels, pallet labels, SKU data, quantity data, condition notes, inspection results, grading results, service instructions, inbound or outbound shipment details, return address details, destination information, disposal or recycling instructions where agreed, discrepancy notes, delivery reports, photos and communication with your team or appointed logistics providers.

Where necessary for the requested service, operational data may be shared with warehouse providers, carriers, freight forwarders, customs brokers, disposal or recycling providers where agreed, packaging or labeling providers, IT systems, myFLEX WMS or similar operational systems, Amazon-related or marketplace-related operational tools where relevant, and other providers involved in handling your request.

We ask customers and prospects to avoid sending personal data that is not required for the requested service. If operational documents contain personal data, we process it only to the extent necessary for the relevant operational, contractual, compliance or legal purpose.

8. Email Marketing, Operational Digest and Zoho Campaigns

If you tick the operational digest checkbox in our contact form or otherwise give consent to receive marketing communications from FLEX., we may use your email address and, where provided, your name and contact details to send occasional email communications about Amazon returns, FBA returns, customer return handling, reverse logistics, marketplace logistics, ecommerce fulfillment, EU fulfillment operations, service updates, practical insights and related content.

The FLEX. operational digest is intended to be sent occasionally, normally around 1–2 times a month. The frequency may change if there are important service, operational or compliance updates, but we aim to avoid unnecessary or excessive email communication.

The legal basis for sending these emails is your consent under Article 6(1)(a) GDPR. You can withdraw your consent at any time by using the unsubscribe link in any email or by contacting us directly. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

We use Zoho Campaigns to manage email marketing subscriptions, mailing lists and email campaigns. Zoho Campaigns may process your personal data on our behalf for the purpose of managing subscriptions, storing consent-related information, sending emails, handling unsubscribes and providing email performance information.

When you subscribe to our operational digest through the website, the relevant form data may be sent to Zoho Campaigns. This may include your email address, first name, last name, phone number where provided, subscription source and related subscription metadata.

We may also keep a local consent log in WordPress or another internal system. This log may include the form ID, submission ID, date and time of consent, source URL, IP address, user agent, consent field name, consent value, visible consent text and the response received from Zoho Campaigns. We keep this evidence to demonstrate that the subscription was based on an affirmative opt-in action and to protect our legitimate interests in compliance, auditability and legal defense.

Every marketing email should include an unsubscribe mechanism. If you unsubscribe, we may keep limited suppression information to make sure we do not send you further marketing emails by mistake.

9. Cookies and Similar Technologies

Our website uses cookies and similar technologies to ensure proper website functionality, remember your preferences, support security and, where you consent, help us understand how visitors use the website or measure marketing activity.

9.1 Strictly necessary cookies

Strictly necessary cookies are used to provide core website functions, save cookie preferences, support security, prevent spam, maintain sessions and enable basic website operation. These cookies are necessary for the website to work correctly and are not used for optional analytics or advertising purposes.

9.2 Analytics cookies

With your consent, we may use analytics tools such as Google Analytics or similar services to understand how visitors interact with the website. Analytics data may include pages visited, approximate session activity, browser type, device type, referrer and general usage patterns.

Analytics information helps us improve the content, structure, performance and usability of the website. You can enable or disable analytics cookies through the cookie settings available on the website, where such tools are active.

9.3 Marketing and tracking technologies

With your consent, we may use marketing or conversion tracking technologies such as Meta Pixel, LinkedIn Insight Tag, Google Tag Manager or similar tools. These tools may help us measure campaign performance, understand whether visitors interact with our content after seeing our ads, build aggregated audiences or improve the relevance of our communication.

Marketing and tracking technologies should not be activated unless the required consent has been obtained through the cookie banner or consent management mechanism used on the website.

9.4 WordPress cookies

If you leave a comment on our website, you may choose to save your name, email address and website in cookies. These cookies are for your convenience so that you do not need to enter the same details again when leaving another comment. These cookies may last for up to one year.

If you visit a login page, a temporary cookie may be created to determine whether your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.

When you log in, several cookies may be created to save your login information and screen display preferences. Login cookies usually last for two days, while screen option cookies may last for up to one year. If you select “Remember Me”, your login may persist for two weeks. When you log out, login cookies are removed.

If you edit or publish an article, an additional cookie may be saved in your browser. This cookie contains no personal data and simply indicates the ID of the article you edited. It usually expires after one day.

10. Embedded Content From Other Websites

Pages or articles on this website may include embedded content, such as videos, images, maps, articles, social media posts, forms, partner resources or external tools. Embedded content from other websites behaves in the same way as if you had visited the external website directly.

These third-party websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with the embedded content, including if you have an account and are logged in to that third-party website.

Where embedded content is not strictly necessary for the operation of the website, it should be loaded in accordance with the cookie and consent settings applicable on the website.

11. Anti-Spam, Security and Abuse Prevention

We may use technical measures, security tools and anti-spam services to protect the website, forms, users and our systems against spam, abuse, unauthorized access, malicious activity or fraudulent use.

These measures may process technical information such as IP address, user agent, browser information, timestamps, form submission patterns and verification tokens. The legal basis may be our legitimate interest in keeping the website secure and preventing abuse, or our legal obligation where applicable.

12. Who We Share Your Data With

We do not sell your personal data.

We may share personal data with trusted service providers and partners where this is necessary for the purposes described in this Privacy Policy. These may include website hosting providers and server infrastructure providers, WordPress, form, security, cookie management and website maintenance tools, email, mailbox and communication providers, Zoho Campaigns and other marketing or CRM tools used to manage subscriptions and communication, analytics and tag management providers where enabled with the required consent, advertising and conversion measurement providers where enabled with the required consent, spam detection, security and abuse prevention services, IT, development, legal, tax, accounting and compliance service providers, warehouse partners, carriers, freight forwarders, customs brokers, transport partners, disposal or recycling providers where agreed, packaging or labeling providers, marketplace logistics systems, Amazon-related or marketplace-related operational tools where relevant, other FLEX. network providers involved in handling your request, and public authorities, courts, regulators or other recipients where disclosure is required by law or necessary to protect our rights.

Service providers that process personal data on our behalf should process such data only under our instructions and subject to appropriate confidentiality, security and data protection obligations.

If you request a password reset, your IP address may be included in the reset email.

13. International Transfers

Some service providers, technical tools, analytics providers, communication tools, warehouse systems, logistics partners or third-party services used by the website or related to the requested service may process, store or access personal data outside the European Union or the European Economic Area.

Where personal data is transferred outside the EU/EEA, we rely on appropriate safeguards where required by law. These safeguards may include adequacy decisions, Standard Contractual Clauses approved by the European Commission, data processing agreements, technical and organizational security measures, or other legally recognized transfer mechanisms.

Zoho Campaigns is used for email marketing and subscription management. Depending on the configuration, Zoho group entities, infrastructure, subprocessors or support teams may process or access certain data from outside the EU/EEA. Where this occurs, appropriate safeguards should apply in accordance with applicable data protection laws.

14. How Long We Retain Your Data

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.

Contact form and inquiry data may be retained for the time necessary to process your request and manage the business relationship. If no business relationship follows, inquiry data may be retained for a reasonable period for follow-up, documentation and legal defense purposes. FBA returns, reverse logistics, inspection, grading, rework, restock, storage, redirection, disposal, forwarding, customs-related and operational records may be retained for the period necessary to perform the service, document instructions, verify operational activity, handle disputes, meet legal or accounting requirements and protect our rights. Business, contractual, tax, customs, disposal-related and accounting records are retained for the periods required by applicable law. Email marketing subscription data is retained for as long as you remain subscribed or until you withdraw consent, unsubscribe or request deletion, unless we need to retain limited information for compliance, suppression or legal defense. Consent evidence and opt-in logs are retained for as long as necessary to demonstrate that valid consent was obtained and to handle potential complaints, audits or legal claims. Unsubscribe and suppression data is retained as long as necessary to ensure that we do not send further marketing emails to an unsubscribed address by mistake. Technical and security logs are retained for limited periods necessary for website operation, troubleshooting, security and abuse prevention, unless longer retention is required for an incident investigation or legal reason.

If comments are enabled and you leave a comment, the comment and its metadata may be retained indefinitely so that we can recognize and approve follow-up comments automatically instead of holding them in a moderation queue. For users who have an account on the website, if any, we may store the personal information provided in their user profile. Users can see, edit or delete their personal information at any time, except for their username. Website administrators can also see and edit this information.

15. Data Security

We apply reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure or destruction.

These measures may include access controls, secure authentication, limited access rights, website security tools, encrypted connections where available, backups, monitoring, operational access controls, internal documentation procedures and internal procedures for handling data protection requests or incidents.

However, no method of transmission over the Internet or electronic storage is completely secure. We make reasonable efforts to protect personal data, but we cannot guarantee absolute security.

16. Your Rights Over Your Personal Data

Under the GDPR, you may have the right to be informed about the processing of your personal data, the right of access to your personal data, the right to rectification of inaccurate or incomplete personal data, the right to erasure of your personal data, the right to restriction of processing, the right to object to processing based on legitimate interests, the right to object to direct marketing at any time, the right to data portability where applicable, the right to withdraw consent at any time where processing is based on consent, and the right to lodge a complaint with a competent supervisory authority.

You may request an exported file containing the personal data we hold about you, including any data you have provided to us. You may also request that we erase your personal data. This does not include data we are required or permitted to keep for administrative, legal, tax, accounting, customs, disposal, operational security, suppression or compliance purposes.

To exercise your rights, contact us through the contact form on the website or at [email protected].

We may ask for additional information to verify your identity before processing your request. This helps us protect personal data against unauthorized disclosure or deletion.

17. Right to Withdraw Marketing Consent and Unsubscribe

If you have subscribed to the FLEX. operational digest or other marketing communications, you can withdraw your consent at any time by clicking the unsubscribe link included in our marketing emails where available, contacting us directly at [email protected], or using another unsubscribe or preference mechanism made available in the relevant email.

After you unsubscribe, we may retain limited information necessary to record your unsubscribe request and make sure we do not send you further marketing emails by mistake.

18. Automated Decision-Making

We do not use personal data collected through this website to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Some tools may provide analytics, segmentation, email performance metrics, anti-spam scoring, operational routing information or service workflow information, but these are used to support website operation, communication management, security, logistics coordination, operational service delivery or marketing analysis rather than to make legally significant automated decisions about individuals.

19. Children’s Data

This website and our FBA returns, reverse logistics and marketplace operations services are intended for business users and are not directed at children. We do not knowingly collect personal data from children through this website.

If you believe that a child has provided personal data to us through the website, please contact us so that we can review and, where appropriate, delete the data.

20. Special Categories of Personal Data

We do not intentionally request or collect special categories of personal data through the website, such as health data, biometric data, political opinions, religious beliefs or similar sensitive information.

Please do not include sensitive personal data in contact forms, operational files, return documents, shipment documents, labels, photos or messages unless it is strictly necessary for your request. If you provide such information voluntarily, we will process it only where permitted by law and necessary for the relevant purpose.

21. Complaint to a Supervisory Authority

You have the right to lodge a complaint with the competent data protection supervisory authority in your EU Member State of residence, place of work or place of the alleged infringement.

For Poland, the competent supervisory authority is:

Prezes Urzędu Ochrony Danych Osobowych
ul. Stawki 2
00-193 Warszawa
Poland

Depending on where you are located and how your personal data is processed, you may also have the right to contact another competent supervisory authority in the EU Member State of your residence, place of work or place of the alleged infringement.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, forms, cookies, technical tools, email marketing setup, FBA returns services, reverse logistics workflows, rework workflows, disposal workflows, logistics workflows, operational systems, legal requirements or internal processes.

The version published on this page is the currently applicable version. The “Last updated” date at the top of this Privacy Policy indicates when the latest changes were made.