PRIVACY POLICY
MagicPackingList
Last updated: 23/02/2026
1. Data Controller
MagicPackingList SARL
Email: contact@magicpackinglist.com
MagicPackingList acts as Data Controller for personal data collected directly in relation to account management and website use.
For data processed within documents uploaded by clients, MagicPackingList acts as Data Processor, as specified in the Terms of Use.
2. Data Collected
2.1 Account Data
-
Name
-
Professional email address
-
Company name
-
Password (encrypted)
2.2 Data Imported by the User
-
Logistics data contained in packing lists
-
Commercial information
-
Product references
-
Shippers and consignees
MagicPackingList is not intended to process sensitive personal data.
2.3 Technical Data
-
IP address
-
Connection logs
-
Technical cookies strictly necessary for the operation of the platform
3. Purposes of Processing
Personal data are processed for the following purposes:
-
Providing the SaaS service
-
Enabling automated data extraction
-
Ensuring platform security
-
Improving the service (technical optimization and product enhancement)
4. Legal Basis
Processing activities are based on:
-
Performance of a contract (Terms of Use)
-
Legitimate interest (service improvement and security)
-
Compliance with legal obligations
5. Sub-processors
Data may be processed by the following service providers:
-
OVHcloud (hosting – France)
-
Stripe Technology Europe Ltd (payment processing)
-
Google Analytics (website only, not the SaaS application)
These providers comply with GDPR requirements.
6. Transfers Outside the European Union
Data are primarily hosted in France.
Certain technical providers (e.g., Stripe, Google) may involve transfers outside the European Union. Such transfers are governed by GDPR-compliant safeguards, including Standard Contractual Clauses where applicable.
Clients located in the United Kingdom are subject to the UK GDPR.
7. Data Retention Period
-
Account data: duration of use + 12 months
-
Uploaded documents: until deletion request by the client
-
Technical logs: 12 months
Data may be retained longer where required by law.
8. Users’ Rights
In accordance with the GDPR and UK GDPR, users have the following rights:
-
Right of access
-
Right to rectification
-
Right to erasure
-
Right to object
-
Right to restriction of processing
-
Right to data portability
Any request must be sent to: contact@magicpackinglist.com
Users also have the right to lodge a complaint with a competent supervisory authority.
9. Security Measures
MagicPackingList implements appropriate technical and organizational measures, including:
-
HTTPS encryption
-
Secure hosting with OVHcloud
-
Restricted access to data
-
Regular backups