Data Breach Response Policy
Our incident response and notification procedures
Last Updated: June 1, 2026
In the unlikely event of a data security incident, ShipUp has established a comprehensive response plan to minimize impact, notify affected parties, and prevent future occurrences.
1. Definition of a Data Breach
A data breach is any security incident that results in unauthorized access, disclosure, alteration, or destruction of personal consumer or business data, including:
- Unauthorized access to our marketing systems or databases
- Accidental disclosure of client or lead data to unauthorized parties
- Loss or theft of devices containing personal digital records
- Ransomware or malware attacks affecting information integrity
2. Incident Response Timeline
Immediate (0–4 Hours)
Security incident identified and contained. Incident Response Team activated. Initial assessment of scope and affected marketing data categories.
24 Hours
Preliminary investigation completed. Affected systems isolated. Executive leadership and legal counsel notified. Documentation of incident initiated.
48–72 Hours
Regulatory notification if required (GDPR: 72 hours; state breach laws: varies). Strategic business partners and affected clients notified.
30 Days
Affected consumers or partners notified with explanation of what occurred, what data was involved, and what steps they should take. Remediation measures fully implemented.
60–90 Days
Full post-incident review completed. Updated security protocols deployed. Regulatory reporting completed as required.
3. Consumer & Client Notification
In the event of a breach affecting personal data, we will notify affected individuals via:
- Email notification to the registered address on file
- Prominent notice on our website dashboard
- Direct mail if email communications are unavailable
- State-required notification channels where applicable
4. Regulatory Reporting
- State breach notification compliance standards (US markets)
- GDPR 72-hour notification requirement (for applicable global data subjects)
- FTC notification requirements where applicable
- Local and regional digital frameworks for integrated advertising vertical data
5. Report a Security Incident
To report a
suspected security incident: security@shipup.co.in
Emergency:
+91 7905477958
All reports are treated
confidentially and investigated immediately.