2/26/2026
To comply with the requirements of our third-party marketplace partners, including Amazon, any customer data originating from these platforms is subject to the following strict handling protocols. These rules supersede our general e-commerce privacy terms for marketplace transactions:
Collection: We collect Personally Identifiable Information (PII), such as customer names and shipping addresses, strictly on a need-to-know basis for the sole purpose of merchant-fulfilled order delivery.
Processing and Usage: Marketplace PII is processed exclusively within our secure infrastructure to fulfill orders and generate shipping labels. It is never used for marketing, promotional campaigns, or customer profiling.
Storage: Data is stored encrypted at rest (AES-256) within our secure databases. Employees are strictly prohibited from storing this information on local hard drives, removable media, or unsecured public cloud applications.
Sharing: We share marketplace PII only with necessary, vetted shipping and logistics integrations (e.g., ShipStation) via encrypted channels (TLS 1.2+) strictly for label generation. We do not sell, rent, or share marketplace PII with any other third parties.
Retention and Disposal: Marketplace PII is retained for a maximum of 30 days following order delivery. Upon expiration of the 30-day window, all PII is permanently and securely destroyed from our live and backup systems in accordance with NIST 800-88 sanitization guidelines. We retain only anonymized, non-PII transaction data required for tax and legal accounting purposes.
