Legal
Last updated 19 October 2026
3eacon Logistics, a trading name of BERPAR LTD ("3eacon", "we", "us"), a company registered in England and Wales, operates a fulfillment warehouse in Romford, Essex and the client portal at app.3eacon.com. This policy explains what personal data we collect, why, and what rights you have over it. If you have any questions, contact us at hello@3eacon.com.
For account data (your staff and portal logins) and inquiry data, we are the data controller. For your customers' order and delivery details, which we only ever see in order to pick, pack and dispatch on your behalf, you are the controller and we act as your processor — see our Terms for how that relationship works.
To run the fulfillment service: receiving and counting your stock, picking, packing and shipping your orders, generating monthly invoices, and responding to inquiries. We also use it to send operational emails — shipment confirmations, discrepancy alerts, order shipped notices, invoices, and password reset links. We process this data because it's necessary to perform our contract with you (or take steps at your request before entering one), because we're legally required to for tax and accounting records, or, for account security measures like new-device sign-in alerts, because we have a legitimate interest in keeping your account secure that doesn't override your rights.
We use a small number of processors to run the service, and only share what's needed for them to do their job: Resend (transactional email delivery), Vercel and Neon (hosting and database infrastructure), Sentry (error monitoring), Stripe (payment processing), Sendcloud (generating shipping labels with your carrier), Cloudflare (privacy-friendly website analytics on our marketing site — see Cookies below), and Shopify (order sync, only if you've connected your store). Some of these providers may process data outside the UK; where they do, we rely on their standard contractual clauses or an applicable adequacy decision to keep it protected to UK standards. We don't sell personal data, and we don't share it with third parties for marketing.
We use two cookies on the client portal and staff system, both strictly necessary for the service to work and exempt from cookie consent requirements under UK rules: a session cookie that keeps you signed in, and — only if your account has two-factor authentication enabled — a short-lived (five-minute) cookie used while you're entering your code.
On our marketing website (not the portal), we use Cloudflare Web Analytics to see roughly how many people visit and which pages they read. It doesn't use cookies, doesn't collect or store any personal data, and can't identify or track you individually or across other websites — it only reports aggregate numbers. We don't run any advertising trackers.
We retain account and operational data for as long as you're an active client. Invoices and other financial records are kept for 6 years after the end of our relationship, as UK tax law requires. Other operational data is kept only as long as reasonably needed afterwards for legal or accounting purposes, then deleted. Contact form inquiries that don't convert to a client relationship are kept only as long as reasonably needed to follow up.
Under UK GDPR, you can ask us to access, correct, delete, or export your personal data, or object to or restrict how we use it. To exercise any of these, email hello@3eacon.com. If your data relates to an order placed with one of our clients rather than with us directly, we'll usually ask you to contact that business first, since they're the controller of that data. If you're not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ico.org.uk).
We may update this policy as the service evolves. Significant changes will be reflected here with an updated date.