Privacy Policy
Last updated: 2026-07-18
This policy explains how REDLINE MANAGEMENT LTD (the "Controller"), operator of ShipKit (shipkit.page), processes personal data under the EU GDPR (2016/679) and the UK GDPR.
1. Data controller
REDLINE MANAGEMENT LTD (company number 15938927, registered in England & Wales; VAT GB475397543), registered address: 35 Goldfinch Drive, Sandy, SG19 2SA, United Kingdom. Website: https://shipkit.page. Privacy contact: [email protected] (response within 30 days).
2. What data we process
Account data: email address, name (optional), and a securely hashed password (bcrypt — we never store your password in plain text), plus your public page handle.
Content you create: your pages and their sections, templates you save, images you upload, and the business descriptions or website URLs you submit for AI generation.
Custom domains: hostnames you connect to your published pages.
Payment data (when paid plans are enabled): payments will be processed by Stripe; we do NOT store card data. Billing details you provide are forwarded to Stripe.
Technical data: IP address and standard server/request logs, used for security and operating the service.
3. Purpose and legal basis
Providing the service — accounts, the page editor, AI generation, publishing, custom domains (performance of contract).
Billing and invoicing, when paid plans are enabled (legal obligation and performance of contract).
Security, abuse prevention and service operation, including server logs (legitimate interest).
We do not use your data for advertising, and the ShipKit app itself currently runs no analytics.
4. Processors
Anthropic (Claude — processing the business description or fetched website content you submit, to generate your page copy), Hetzner (hosting, EU), Cloudflare (DNS/CDN/security), and — once paid plans are enabled — Stripe (payments/invoicing). Each acts under its own privacy terms and a data-processing agreement.
5. Published pages and their visitors
Pages you create and publish on ShipKit (including on your custom domain) are your content. For data collected from visitors of YOUR published pages — including any tracking you enable on them (e.g. Google Tag Manager / first-party analytics) — YOU are the data controller and ShipKit acts as a hosting provider/processor. You are responsible for providing your own privacy notice and obtaining any required consent on your published pages.
6. Retention
Account and page data are kept while your account exists or as required by law (e.g. invoicing records). On account deletion, data is deleted except where retention is legally required.
7. Your rights
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. Send requests to [email protected] — response within 30 days. You may also lodge a complaint with a supervisory authority (UK: ICO; in the EU, your local authority).
8. Cookies
Cookie use is described in the separate Cookie Policy.