隐私与数据处理政策

最后更新：2026年7月4日

本政策说明【深圳市海松兄弟电子商务有限公司】（以下简称“我们”）在通过亚马逊销售伙伴 API 获取、处理、存储买家个人信息（PII）时所遵循的规范。

1. 数据收集
   我们仅收集履行订单所必需的 PII：买家姓名、收货地址、联系电话。获取基于您的授权及亚马逊许可。
2. 数据处理与用途
   所收集 PII 的唯一用途为：生成物流面单、安排包裹递送、处理退换货以及与买家沟通交付事宜。我们严禁将 PII 用于营销、分析或任何非履约目的。
3. 数据存储与保留
   PII 存储于加密的云数据库中，保留期限为订单完成后 90 天（或根据税法），超期自动删除或安全匿名化。
4. 数据共享
   我们仅在完成配送的必要范围内，将 PII 提供给签约的物流承运商（如 UPS、DHL）。所有承运商均签有数据保护协议。除法律规定外，绝不出售或向无关第三方披露 PII。
5. 数据安全
   我们已实施行业标准的物理、技术和管理防护措施，包括静态与传输加密、访问控制、日志审计和定期漏洞扫描，以保障 PII 免遭未经授权的访问、篡改或丢失。
6. 数据主体权利
   如法律适用，买家可要求访问、更正或删除其个人信息。此类请求请联系：【[email protected]】，我们将在 30 日内响应。
7. 政策变更
   政策如有更新将发布在此页面，并标注生效日期。

联系方式：如有疑问，请联系 【[email protected]】。

Privacy and Data Processing Policy

Last Updated: July 4, 2026

This policy describes how 【Shenzhen Haisong Brothers E-Commerce Co., Ltd.】 (hereinafter “we”) collects, processes, stores, and protects buyer personal information (PII) obtained through the Amazon Selling Partner API.

1. Data Collection
   We only collect PII that is strictly necessary to fulfill orders: buyer name, shipping address, and phone number. Collection is based on your authorization and Amazon’s permission.
2. Data Processing and Purpose
   The collected PII is used solely to generate shipping labels, arrange parcel delivery, process returns/exchanges, and communicate with buyers regarding delivery matters. We strictly prohibit the use of PII for marketing, analytics, or any purpose other than order fulfillment.
3. Data Storage and Retention
   PII is stored in an encrypted cloud database. Retention period is 90 days after order completion (or longer if required by tax law), after which it is automatically deleted or securely anonymized.
4. Data Sharing
   We only share PII with contracted logistics carriers (e.g., UPS, DHL) to the extent necessary for delivery. All carriers are bound by data protection agreements. Unless required by law, we never sell or disclose PII to unrelated third parties.
5. Data Security
   We have implemented industry-standard physical, technical, and administrative safeguards, including encryption at rest and in transit, access controls, log auditing, and regular vulnerability scanning to protect PII from unauthorized access, tampering, or loss.
6. Data Subject Rights
   Where applicable law permits, buyers may request access, correction, or deletion of their personal information. Such requests should be directed to: 【[email protected]】. We will respond within 30 days.
7. Policy Changes
   Any updates to this policy will be published on this page with an updated effective date.

Contact: For questions, please contact 【[email protected]】.