Privacy & Data Handling Policy

1. Information We Collect

We collect only the minimum information necessary to fulfill customer orders:

• Buyer name and shipping address (received via the Amazon Selling Partner API for merchant-fulfilled orders);
• Order identifiers (Amazon Order ID), items ordered, and shipment/tracking numbers;
• Standard server logs (IP address, timestamps) for security monitoring.

We do not collect buyer email addresses, payment card data, or browsing information. We do not operate customer-facing tracking or advertising systems on this website.

2. How We Use Information

PII is used exclusively for order fulfillment:

• Generating shipping labels with our carriers (UPS, USPS, FedEx);
• Confirming shipment to Amazon (confirmShipment) and transmitting tracking numbers;
• Resolving delivery exceptions, returns and refunds;
• Meeting tax and accounting record-keeping obligations (order data without PII).

We do not use PII for marketing, profiling, or any purpose unrelated to fulfilling the buyer's order.

3. How We Share Information

We do not sell or rent customer information. PII is shared only with:

• Shipping label platform (ShipStation) and carriers (UPS, USPS, FedEx) — strictly the name and shipping address printed on the shipping label;
• Amazon — shipment confirmation and tracking data via the Selling Partner API;
• Authorities — where compelled by applicable law.

4. Storage and Security

• Amazon data is processed only on Company-managed cloud servers and the Company's access-controlled ERP instance (Jiandaoyun). Server access requires SSH key authentication; cloud and ERP accounts require multi-factor authentication (MFA);
• All data in transit is encrypted with TLS 1.2 or higher;
• All data at rest is encrypted with AES-256; encryption keys are managed by the cloud provider's key management service (KMS) with automatic rotation;
• Access follows the principle of least privilege. Only authorized employees with a documented business need may access fulfillment systems;
• Employees are prohibited from copying Amazon data to personal devices (USB drives, personal phones or computers). Violations are detected through audit logs and access-monitoring alerts and are investigated by the system administrator;
• All systems enforce a password policy of at least 12 characters with mixed case, numbers and symbols, 365-day expiration with annual rotation, MFA, and immediate revocation upon employee departure;
• Security-relevant events (failed logins, unauthorized access attempts, unusual access times or source IPs) are centrally logged, retained for at least 12 months, and trigger alerts that are reviewed by the administrator.

5. Data Retention and Disposal

Buyer PII is retained only as long as necessary for order fulfillment, returns handling and after-sales service. Buyer names and shipping addresses are automatically deleted within 180 days after order shipment. Deleted data is removed from production storage and is not archived. Non-PII order records may be retained longer for tax and accounting purposes, as required by law.

6. Backups

Encrypted backups (AES-256) are stored in a geographically separated cloud region from the primary system. Restore procedures are documented with a Recovery Time Objective (RTO) and Recovery Point Objective (RPO) of 24 hours or less, and restore capability is verified periodically.

7. Vulnerability Management

• Systems are scanned for vulnerabilities every 30 days and penetration-tested annually; findings are tracked to remediation with severity-based deadlines: Critical 7 days, High 30 days, Medium 90 days;
• Software dependencies are automatically monitored for known vulnerabilities (automated dependency scanning), and changes are reviewed before deployment;
• Operating system and platform security patches are applied promptly, with runtime error and anomaly monitoring in place.

8. Incident Response

The Company maintains an incident response plan comprising: (1) identification through alerts and logs; (2) containment, including isolating affected systems and revoking credentials; (3) eradication of the root cause; (4) recovery and verification of affected services; and (5) notification and post-incident review — including notification to Amazon ([email protected]) and affected customers within 24 hours of detection of any breach involving their data. The plan assigns responsibility to the Incident Management Point of Contact (administrator) and is reviewed every 6 months.

9. Your Rights and Deletion Requests

Customers may request confirmation of what personal data we hold about them, or request deletion of their personal data, at any time. Because our default retention period is 180 days after order shipment, data older than that will already have been deleted. To make a request, contact us using the details below; we will respond within 30 days.

10. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page will reflect the most recent revision.

11. Contact