Updated September 2026
Packsize values and recognizes the importance of protecting personal data. We are committed to managing personal data in a transparent, secure and lawful manner, in full compliance with applicable data protection laws and regulations.
This policy applies to the processing of personal data relating to former, current and prospective suppliers, customers and contractors of Packsize, across Packsize’s global operations, as well as to individuals that visit Packsize Websites. Where reference is made to cookies, please see our Cookie Policy for further information on cookie options and placement.
In this Packsize Data Privacy Policy External Parties (Privacy Policy):
Affiliated company means, with respect to any specified entity, any other entity that directly or indirectly controls, is controlled by, or is under common control with such specified entity.
GDPR refers to the EU General Data Protection Regulation (GDPR) and the UK General Data Protection Regulation (UK GDPR) (except where explicitly referred to these regulations separately).
Packsize, we, us or our means the Packsize entity that processes your Personal Information.
Packsize entity means a subsidiary or affiliated company of Packsize International LLC.
Packsize Website means websites, social media platforms or other online media platforms owned or controlled by a Packsize entity.
Personal Information means information that is about You and that is information that identifies You.
You or your means any individual, whether or not on behalf of an entity, that (i) visits a Packsize Website or (ii) otherwise provides or purchases services and/or goods to respectively from a Packsize entity, including potential new business relationships, and/or is a partner of Packsize, including any contact person, employee, representative, contractor, or owner acting on behalf of an entity that Packsize does business with, as well as any individual acting in a personal capacity.
This Privacy Policy (together with any contract you have with us and any other documents referred to therein) sets out the basis on which we collect and use Personal Information about you. This Privacy Policy describes:
This is to ensure that there is full transparency on how we collect and use your Personal Information. A summary of your right to object (along with your other rights under data protection law) and details of who to contact if you want to exercise your rights can be found at the How to Contact Us section below. For further information on your rights, please see the Your Rights section below and Annex 3.
Global Applicability and Local Law
This Privacy Policy is intended to apply globally across Packsize’s operations. The GDPR is one of the most comprehensive data protection frameworks, and we have therefore aligned our global privacy policies and practices with its standards.
However, data protection and privacy laws may vary by jurisdiction. In particular, certain U.S. federal and state laws, as well as regulations in other countries, may impose additional or different requirements regarding the collection, use, and disclosure of Personal Information. Where such laws apply, we will comply with the relevant local legal requirements in addition to the standards set out in this Privacy Policy, and where applicable local laws provide for higher standards of protection or impose additional obligations, such local laws will take precedence over this Privacy Policy.
For the purposes of data protection laws and regulations, we act and identify as the Data Controller for the Personal Information we collect and use in connection with our business relationship with you. This means that we determine the purposes for which your Personal Information is processed and how it is used
In the course of the receipt by us, or purchase by you from us, of goods and services, we collect and use personal information about you.
When you visit a Packsize Website we may also collect information about your activities on Packsize Websites through the use of Cookies. You will always be provided the right to opt out of our use of any cookies, other than cookies that are technically necessary for the functionality of the Website, as outlined in our Cookie Policy and opt-out tools embedded in Packsize Websites.
We only collect and use Personal Information that is adequate, relevant, and strictly limited to what is necessary and proportionate for the specific purposes for which it is processed. The type of Personal Information we collect about you, may depend on whether you are a contractor, partner, supplier, customer, or website visitor of Packsize.
The Personal Information about you that we process includes, without limitation, the following categories (as updated from time to time):
Contact information
Name, address, user name, email address, telephone number and job title.
Communications between you and Packsize
Communications between you and Packsize in relation to requests made through the Website and/or submitting your Personal Information for contact purposes
Communications between you and Packsize in relation to the goods or services supplied to, OR purchased from, us and the respective obligations of the parties to the contract. Informing you about our products and/or for establishing a new business relationship.
Details of your expertise
Details relating to professional qualifications and experience relevant to services provided, and details included in any pitch or tender response that you or the supplier submit to us.
Telephone recordings
Recordings/transcripts of telephone calls with our representatives (e.g. through Zoom AI or a similar application)
Photographs and video recordings
Images (including photographs and pictures) or video recordings created in connection with our activities, as well as CCTV recordings captured by equipment on our premises.
User Data / IT Information
Includes: user activity logs, log files, IP addresses and other system-generated usage data with respect to use of our software, web properties, social media accounts, the website etc.
Website / social media data
Usage data and demographic information collected through our websites, cookies, and similar tracking technologies, and personal information shared through Packsize Websites.
Financial information and account details
Bank account number, or other financial account number, VAT number (sole trader) and account details in order that we can make payments to you pursuant to the terms of the contract between you and Packsize
We may also collect certain sensitive personal information from you (including any special categories of personal data), where necessary and only if permitted by law. Where we do so we will rely on your explicit consent or we will notify you if we can rely on a different Lawful Basis for processing this type of information.
We use your Personal Information for a range of purposes before, throughout and after the business relationship we have with you. Your Personal Information may be used by Packsize, its employees, and authorized service providers, and may also be shared with third parties for the purposes outlined in the table in Annex 1. For each purpose, we have identified the corresponding lawful basis for processing your Personal Information under GDPR. In addition, for information collected in other jurisdictions, we will also ensure it is processed in accordance with applicable data protection laws and regulations.
Examples of where we have a Lawful Basis to process your personal information, include when:
Under GDPR, we must tell you which Lawful Basis we are relying on when we use your personal information. The Lawful Basis we rely on is set out in Annex 1 together with the purposes that we use your personal information for.
We may share your Personal Information third parties, as listed in Annex 2 (as may be amended from time to time). Such Personal Information will only be shared to the extent necessary and if a Data Processing Agreement, and/or other applicable safeguards, are in place with such third party.
We may also disclose your Personal Information to other third parties, for example:
We will process your Personal Information both within and outside the European Economic Area and the United Kingdom, this includes the United States of America.When we transfer Personal Information from within to outside the EEA, Switzerland, or the UK, we will implement appropriate and suitable safeguards to ensure that such data will be protected as required by applicable data protection laws and regulations. Packsize remains responsible for Personal Information that we receive, including where we transfer such Personal Information to a third party acting as our agent.
We may use the standard data protection clauses (“Standard Clauses”) which have been approved by the European Commission in accordance with Article 46 of the GDPR, or of the UK Information Commissioner's Office in accordance with Article 46 of the UK GDPR. For sharing personal information between Packsize entities (within EEA/UK/Switzerland to outside of EEA/UK//Switzerland) there is an Intra-Group Personal Data Transfer Framework Agreement in place which includes the Standard Clauses to ensure adequate protection of personal information. For further information as to the safeguards we implement, please contact Packsize through privacy@packsize.com.
In addition, Packsize complies with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”) and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) as set forth by the U.S. Department of Commerce. Packsize International, Inc. has certified to the U.S. Department of Commerce that it, and each of its direct and indirect U.S. subsidiaries, namely Packsize LLC, Sparck Technologies, Inc., and Sparck Technologies Services, Inc. (together the “U.S. Packsize Subsidiaries”), adhere to the EU-U.S. Data Privacy Framework Principles (“EU-U.S. DPF Principles”) with regard to the processing of Personal Information received from the European Union and the United Kingdom in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF. Packsize has certified to the U.S. Department of Commerce that it, and its U.S. Packsize Subsidiaries, adhere to the Swiss-U.S. Data Privacy Framework Principles (“Swiss-U.S. DPF Principles”) with regard to the processing of Personal Information received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Packsize, and its U.S. Packsize Subsidiaries, commit to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK individuals and Swiss individuals with inquiries or complaints regarding our handling of Personal Information received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF should first contact privacy@packsize.com with the subject "Data Privacy Framework".
In compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, Packsize, and its U.S. Packsize Subsidiaries, commit to refer unresolved complaints concerning our handling of Personal Information received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF to JAMS, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://www.jamsadr.com/DPF-Dispute-Resolution for more information or to file a complaint. The services of JAMS are provided at no cost to you. If neither Packsize nor our dispute resolution provider resolves your complaint, you may have the possibility to engage in binding arbitration through the Data Privacy Framework Panel. For more information on this option, please see Annex I of the EU-U.S. Data Privacy Framework Principles.
The Federal Trade Commission has investigatory and enforcement power over Packsize’s compliance with the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.
We will retain your Personal Information for no longer than is necessary to fulfil the purposes for which the Personal Information is or has been processed. The length of time we hold on to your Personal Information will vary according to what that information is and the reason for which it is being processed and stored.
When deciding how long to retain your Personal Information, we take into account the amount, nature, and sensitivity of the data, the potential risk of harm from unauthorized use or disclosure, and the purposes for which the data is processed, including whether those purposes can be achieved in other ways.
We also take into consideration any applicable legal, regulatory, tax, accounting, or other legal requirements that may specify or require a longer retention period.
For further information on our policy and how long we will keep your information for, please contact us at privacy@packsize.com or by one of the other means of communication set out in the How to Contact Us section below.
We have put in place appropriate security measures to seek to prevent your Personal Information from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. These measures include, but are not limited to, password policy and management, physical security, network security, endpoint security, internal policies, staff training, vendor management and incident response.
In addition, we limit access to your Personal Information to those employees, agents, contractors, subcontractors and other third parties who have a business need to know. They will only process your Personal Information at our instructions and they are subject to a duty of confidentiality. Details of these measures may be obtained by sending a request to privacy@packsize.com.
We have further, put in place procedures to deal with any (suspected) data security breach and will notify you and any applicable regulator of a breach where we are legally required to do so.
You have certain rights with respect to your Personal Information. These rights are listed in Annex 3 and these apply to individuals located in the EEA/UK/Switzerland or that are employed by an Packsize entity established in the EEA/UK//Switzerland. The rights may only apply in certain circumstances and are subject to certain exemptions. Please see the table in Annex 3 for a summary of your rights. You may have additional rights, under local laws and regulations in the country where you reside and/or the Packsize entity that you work for is established.
You can exercise these rights using the contact details under How to Contact Us below. We will act on your request without undue delay and within due course of receiving your request.
If you have any questions or concerns about how your Personal Information is being handled, please contact us by using the details set out in the How to Contact Us section below.
You also have a right to lodge a formal complaint where you think we have not used your Personal Information in accordance with data protection law. Such complaints may be lodged with the applicable Data Protection Authority in particular in the place you work, the place you live or the place where any infringement occurred.
We will review this Privacy Policy regularly and we reserve the right to make any changes at any time to take account of changes in our business activities and legal requirements and how we process Personal Information.
The most recent version of this Privacy Policy will be made available and can be viewed on the Packsize website.
If you have any questions regarding this Privacy Policy or the way we use your Personal Information, you can contact us by e-mail through privacy@packsize.com or by regular mail to:
If you are located in the United States:
Packsize International LLC
Attn.: Legal Department
3760 W. Smart Pack Way
Salt Lake City, UT 84104
United States
If you are located in the European Union or the United Kingdom:
Packsize Netherlands B.V.
Attn.: Legal Department
Ankerweg 18
1041 AT, Amsterdam
the Netherlands
Packsize has a Data Protection Officer (DPO). The role of the DPO is to advise Packsize on data protection obligations, monitor compliance with applicable privacy laws, and to act as the contact point for regulators and individuals on data protection matters. If you would like more information on the DPO please reach out through privacy@packsize.com.
If a privacy complaint cannot be resolved directly with Packsize, Packsize has committed to cooperate with the following independent dispute resolution provider at no cost to the complainant.
In this Policy, the lawful basis for processing is based on the following GDPR articles:
Art. 6( 1 )(a), Art. 9( 2 )(a)
Contact information
Art. 6( 1 )(b), Art. 9( 2 )(a), Art. 9( 2 )(b)
Name, address, user name, email address, telephone number and job title.
Art. 6( 1 )(c), Art. 9( 1 )(e), Art. 9( 2 )(b),
Art. 9( 2 )(g)
Communications between you and Packsize in relation to requests made through the Website and/or submitting your Personal Information for contact purposes
Communications between you and Packsize in relation to the goods or services supplied to, OR purchased from, us and the respective obligations of the parties to the contract. Informing you about our products and/or for establishing a new business relationship.
Art. 6( 1 )(d), Art. 9( 2 )(c)
Details relating to professional qualifications and experience relevant to services provided, and details included in any pitch or tender response that you or the supplier submit to us.
Art. 6( 1 )(f), Art. 9( 2 )(f)
Recordings/transcripts of telephone calls with our representatives (e.g. through Zoom AI or a similar application)
To communicate with you in relation to our dealings with you and/or to inform you about our products and possibly establish a new business relationship
Legitimate interests: We require your personal information in order to enable us to purchase or sell the goods or services we need for the purposes of furthering our business or work together as a partner. We use personal information voluntarily shared through our website, to contact you to provide more information on our products and/or to possibly establish a new business relationship, to further our business.
Performance of a contract we have with you. This will only be applicable if you are a sole trader who is providing us with, or receiving from us, goods or services.
To make payments to you
Legitimate interests: It is in our legitimate interest to comply with the terms of a contract we have in place with you (or the company).
Performance of a contract we have with you. This will only be applicable if you are a sole trader who is providing us with, or receiving from us, goods or services.
Necessary for compliance with a legal obligation to which we are subject.
To assess any tender response and decide whether your response is sufficient.
Legitimate interests: We require your personal information in order to process and assess your tender response to provide services to us and to enable us to manage and carry out our operations as a business.
Necessary to enter into or perform a contract we have with you. This will only be applicable if you are a sole trader.
To carry out our obligations arising from our contract with you or a company.
Legitimate interests: It is in our legitimate interest to comply with the terms of a contract we have in place with you or a company.
Performance of a contract we have with you. This will only be applicable if you are a sole trader.
To manage any service or quality related issues, complaints, feedback and queries in relation to the supply of goods or services in accordance with the terms of the supply contract.
To provide maintenance and support services
Legitimate interests: We require your personal information in order to ensure the goods or services we receive are fit for purpose and meet the needs of our organization, and to provide support and maintenance services to you on goods and services purchased by you.
Performance of a contract we have with you. This will only be applicable if you are a sole trader.
To comply with any legal or regulatory obligations (including in connection with a court order).
Necessary for compliance with a legal obligation to which we are subject
CCTV recordings captured by equipment on our premises to manage any complaints that you may have or that we may have in relation to your performance of the contract.
Legitimate interests: We require your personal information in order to manage access to our premises and ensure security.
To maintain internal compliance and audit records.
Legitimate interests. We require your personal information in order to ensure we manage and carry out our business operations in the best interests of our shareholders and customers.
To ensure the security, integrity, availability and proper use of our IT systems and Packsize portals
Legitimate interest. We have a legitimate in ensuring the security, integrity, availability and proper use of our IT systems and Packsize portals and services, and information assets, and in preventing and detecting unauthorised access, misuse, or security incidents.
To improve the quality of our website and place cookies for essential and non-essential purposes
Legitimate interest. We have a legitimate interest to ensure the proper functioning, security, and performance of our websites and digital services, including maintaining and improving user experience.
Consent. We need your consent to place cookies or use similar technologies for non-essential purposes, including analytics, statistical analysis of website usage, understanding user behaviour and preferences, and supporting marketing and communications activities.
To engage with you via social media
Legitimate interests. We require your personal information in order to enable us to manage and carry out our operations as a business.
Our group companies
Other companies and entities that are part of the Packsize Group. Where it concerns an entity outside of the EEA/UK//Switzerland, then this is subject to the Intra-Group Personal Data Transfer Framework Agreement.
Our service providers
Our business partners, suppliers and sub-contractors for the performance of any contract we enter into with you, or to communicate with you, for example:
A current list of these third party service providers with whom we share your personal information can be provided to you on request to privacy@packsize.com
Our professional advisers
Including accountants, lawyers and other professional advisers that assist us in carrying out our business activities, a current list of these third parties can be provided to you. Send your request to privacy@packsize.com.
Government authorities and third parties involved in court action
External agencies and organizations for the purpose of complying with applicable legal and regulatory obligations, the Courts in the relevant territories, and other regulators. For a full list of third parties with whom your particular Personal Information may be shared, please contact Packsize through privacy@packsize.com.
Right of access to your personal information
You have the right to receive a copy of your personal information that we hold about you, subject to certain exemptions.
We may require further information in order to respond to your request (for instance, evidence of your identity and information to enable us to locate the specific personal information you require).
Right to rectify your personal information
You have the right to ask us to correct your personal information that we hold where it is incorrect or incomplete.
Right to erasure of your personal information
You have the right to ask that your personal information be deleted in certain circumstances. For example:
Right to restrict the use of your personal information
You have the right to suspend our use of your personal information in certain circumstances. For example:
Right to data portability
You have the right to obtain your personal information in a structured, commonly used and machine-readable format and for it to be transferred to another organization, where it is technically feasible. The right only applies:
Right to object to the use of your personal information (including to object to direct marketing, automated decision making and profiling)
You have the right to object to the use of your personal information in certain circumstances and subject to certain exemptions. Examples of this right include;
Right to withdraw consent
You have the right to withdraw your consent at any time where we rely on consent to use your personal information.
Right to complain to the relevant data protection authority
You have the right to complain to the relevant Data Protection Authority where you think we have not used your Personal Information in accordance with data protection law. In the case of which Data Protection Authority you may complain to, this will depend on factors such as where you work or where you reside, or where the infringement occurred.
