Privacy Policy

BrandSKU ("BrandSKU," "we," "us," or "our") is committed to protecting the privacy of the merchants, suppliers, and visitors who use our dropshipping platform and related services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your personal data.

This Privacy Policy applies to all users of the Service, including visitors to our website, registered account holders, merchants who integrate their online stores with BrandSKU, and suppliers who list products through our platform. It does not apply to third-party websites, applications, or services that may be linked from or integrated with the Service, each of which is governed by its own privacy practices.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use the Service.

BrandSKU serves both as a Data Controller and as a Data Processor, depending on the type of data involved. When we collect and process information about Merchants, Suppliers, and visitors (such as account details, subscription information, and usage data), we act as the Data Controller. When Merchants use the Service to fulfill orders placed by their End Customers, we process End Customer Data (such as customer names, shipping addresses, and order contents) on the Merchant's behalf, and we act as a Data Processor. Merchants remain the Data Controller of their End Customer Data.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page and, where required by law, notify you through the Service or by email. Your continued use of the Service after any changes take effect constitutes your acceptance of the revised Privacy Policy.

Definitions

For the purposes of this Privacy Policy:

Account means the account you create to access and use the Service, including merchant accounts, supplier accounts, and administrative accounts.

BrandSKU (also referred to as "we," "us," or "our") means SYMON ECOM BASE INC, the entity that operates the Service.

Cookies are small text files placed on your computer, mobile device, or any other device by a website, containing details of your browsing history and preferences on that website.

Data Controller means the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data. BrandSKU acts as a Data Controller with respect to Merchant, Supplier, and visitor account data. BrandSKU does not act as a Data Controller with respect to End Customer Data.

Data Processor (or Service Provider) means any natural or legal person who processes personal data on behalf of the Data Controller. BrandSKU acts as a Data Processor with respect to End Customer Data, processing such data on behalf of the Merchant in accordance with the Merchant's instructions.

Data Subject means any living individual who is using the Service and whose Personal Data is being processed.

End Customer means a customer of a Merchant who purchases products through the Merchant's online store and whose data (such as name, shipping address, and order details) may pass through the Service for the purpose of order fulfillment.

End Customer Data means Personal Data relating to End Customers that Merchants provide to, or generate through, the Service, including order and fulfillment information.

Merchant means a user who operates an online store and uses BrandSKU to source products, fulfill orders, or manage dropshipping operations.

Personal Data means any information relating to an identified or identifiable individual, including but not limited to name, email address, postal address, phone number, payment information, IP address, and device identifiers.

Service means the BrandSKU website, platform, applications, integrations, and all related products and services provided by BrandSKU.

Supplier means a user who lists, sells, or ships products through the BrandSKU platform.

Third-Party Integration means any external platform, service, or application connected to the Service, including but not limited to Shopify, WooCommerce, TikTok Shop, and other e-commerce or advertising platforms.

Usage Data means data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit, IP addresses, browser type, and device information).

You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

Information We Collect

We collect several types of information from and about users of the Service. The categories of information we collect depend on how you interact with BrandSKU-as a visitor, merchant, supplier, or account holder.

Personal Data You Provide

While using our Service, we may ask you to provide certain personally identifiable information ("Personal Data") that can be used to contact or identify you. Personal Data may include, but is not limited to:

• Email address
• First name and last name
• Business name and store URL
• Phone number
• Billing address, shipping address, city, state, ZIP/postal code, country
• Payment information (processed by our third-party payment processors)
• Any other information you choose to provide when contacting us or using the Service

End Customer Data (Processed on Behalf of Merchants). When Merchants use the Service to fulfill orders, we receive information about their End Customers, including names, shipping addresses, and order contents. We process this data solely on the Merchant's behalf and in accordance with the Merchant's instructions. The Merchant, not BrandSKU, is the Data Controller of End Customer Data.

Usage Data

We automatically collect certain information when you access or use the Service ("Usage Data"). This data does not typically identify you personally. Usage Data may include:

• IP address and approximate location
• Browser type and version
• Operating system and device identifiers
• Pages of the Service you visit, and the time and date of your visit
• Other diagnostic data

Tracking Technologies and Cookies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information.

Cookies are files with a small amount of data which may include an anonymous unique identifier. Cookies are sent to your browser from a website and stored on your device. Tracking technologies also used are beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Examples of Cookies we use:

• Strictly Necessary Cookies. These cookies are essential for the Service to function properly and provide its basic services.
• Marketing Cookies. These cookies collect information about your interactions with the Service, allowing us to enhance the user experience and display the most relevant content to you.

Data from Third-Party Integrations

When you connect BrandSKU to a third-party platform such as Shopify, WooCommerce, TikTok Shop, or other e-commerce or advertising platforms, we receive data from those platforms as authorized by you and by the platform's terms. This data may include:

• Store metadata (store name, domain, currency, plan type)
• Product listings, inventory levels, and pricing
• Order data, including customer names, shipping addresses, order contents, and fulfillment status
• Sales analytics and performance metrics
• Access tokens and API credentials required to maintain the integration

We only access, use, and store data from third-party integrations to the extent necessary to provide the Service you have requested and in accordance with the authorizations granted by you and by the third-party platform.

How We Use Your Data

We use the information we collect for the following purposes:

• To provide and maintain the Service, including creating and managing your account, processing your orders, and delivering the features you request.
• To process transactions, including subscription payments, order fulfillment, and payouts to suppliers.
• To communicate with you, including responding to your inquiries, sending service-related notifications, and providing customer support.
• To send you marketing and promotional communications, such as newsletters, product updates, and special offers, where permitted by law. You may opt out of these communications at any time.
• To improve the Service, including analyzing usage patterns, developing new features, and enhancing user experience.
• To prevent fraud and ensure security, including detecting unauthorized access, verifying identities, and protecting against illegal activity.
• To comply with legal obligations, including responding to lawful requests from public authorities and enforcing our terms.

Legal Basis for Processing Personal Data under the GDPR

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, BrandSKU's legal basis for collecting and using the Personal Data described in this Privacy Policy depends on the specific data we collect and the context in which we collect it.

We may process your Personal Data on the following legal bases:

• Performance of a contract. We process your Personal Data to provide the Service you have requested, including creating your account, processing orders, and fulfilling our obligations under our Terms of Service.
• Legitimate interests. We process your Personal Data where it is necessary for our legitimate business interests, such as improving the Service, preventing fraud, and ensuring the security of our platform, provided that such interests are not overridden by your rights and freedoms.
• Compliance with legal obligations. We process your Personal Data where required by law, such as retaining transaction records for tax purposes or responding to lawful requests from public authorities.
• Consent. We process your Personal Data based on your consent, such as when you agree to receive marketing communications or accept non-essential cookies. You have the right to withdraw your consent at any time.

If you have any questions about the legal basis on which we process your Personal Data, please contact us at [email protected].

How We Share and Disclose Data

BrandSKU does not sell your Personal Data. We may share your Personal Data only in the following limited circumstances.

Service Providers and Sub-processors

We may work with trusted third-party companies to help us operate and improve the Service, such as providers of hosting, payment processing, email delivery, analytics, and customer support. These providers may access your Personal Data only to perform tasks on our behalf and are required to keep it confidential.

Business Transaction

If BrandSKU is involved in a merger, acquisition, or sale of assets, your Personal Data may be transferred as part of that transaction. We will provide notice before your Personal Data is transferred and becomes subject to a different privacy policy.

Disclosure for Law Enforcement

Under certain circumstances, BrandSKU may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities, such as a court or a government agency.

Legal Requirements

BrandSKU may disclose your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of BrandSKU
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

Data Retention

BrandSKU will retain your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

We will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of the Service, or we are legally obligated to retain this data for longer periods.

If you close your account or request the deletion of your Personal Data, we will delete or anonymize your information within a reasonable time frame, unless we are required to retain it to comply with applicable laws or for legitimate business purposes such as fraud prevention or dispute resolution.

International Data Transfers

Your information, including Personal Data, may be transferred to - and maintained on - computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction.

If you are located outside of the jurisdiction in which BrandSKU operates and choose to provide information to us, please note that we may transfer the data, including Personal Data, to our operating jurisdiction and process it there.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

BrandSKU will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. No transfer of your Personal Data will take place to an organization or a country unless there are adequate controls in place, including the security of your data and other personal information.

Data Security

The security of your data is important to us, but remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee its absolute security.

BrandSKU implements appropriate technical and organizational measures designed to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction.

In the event of a data breach that affects your Personal Data, we will notify you and the relevant authorities where required by applicable law.

Your Privacy Rights Under GDPR (EU/UK Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain data protection rights under the General Data Protection Regulation (GDPR). BrandSKU aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

You have the right to access, update, or request deletion of your Personal Data. You also have the right to object to processing, request restriction of processing, request data portability, and withdraw your consent at any time where we rely on consent to process your Personal Data.

If you are an End Customer of a Merchant who uses BrandSKU to fulfill orders, please note that BrandSKU acts as a Data Processor with respect to your Personal Data. To exercise your GDPR rights (such as access, correction, or deletion) regarding End Customer Data, please contact the Merchant directly. If you contact BrandSKU, we will forward your request to the relevant Merchant and provide reasonable assistance in fulfilling it.

To exercise any of these rights, please contact us at [email protected]. We may ask you to verify your identity before responding to your request. You also have the right to lodge a complaint with your local data protection authority.

Your Privacy Rights Under CCPA/CPRA (California Users)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

As a California resident, you have the right to know what Personal Information we collect about you, to request deletion or correction of your Personal Information, to opt out of the sale or sharing of your Personal Information, and to non-discrimination for exercising these rights.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request promptly.

Your Privacy Rights Under Other U.S. State Laws

If you are a resident of Virginia, Colorado, Connecticut, Utah, Texas, or another U.S. state with applicable privacy laws, you may have rights similar to those described above, including the right to access, correct, or delete your Personal Information, and to opt out of certain types of processing such as targeted advertising.

To exercise any of these rights, please contact us at [email protected].

"Do Not Track" Signals under CalOPPA

We do not support Do Not Track ("DNT"). Do Not Track is a preference you can set in your web browser to inform websites that you do not want to be tracked.

You can enable or disable Do Not Track by visiting the Preferences or Settings page of your web browser.

Third-Party Platform Data Use

BrandSKU may integrate with various third-party platforms and services to provide the Service, including e-commerce platforms, advertising platforms, analytics services, and authentication providers. When you connect BrandSKU to a third-party platform, we may access and use data from that platform solely to provide the Service you have authorized, in accordance with the applicable platform's terms of service and the authorizations you have granted.

We do not sell data received from third-party platforms, nor do we use it for purposes unrelated to the Service. If you disconnect a third-party platform from BrandSKU, we will stop accessing data from that platform and will handle any retained data in accordance with our data retention practices.

Use of Google User Data

BrandSKU's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We may access and use Google user data (such as your name, email address, and profile information) solely to provide and improve the Service, including enabling you to sign in to BrandSKU using your Google account.

We do not sell Google user data, use it for advertising purposes, or share it with third parties for purposes unrelated to the Service. We do not use Google user data to train generalized artificial intelligence or machine learning models.

Payment Processing

BrandSKU uses third-party payment processors to handle subscription payments and other transactions on the Service. When you make a payment, your payment card information is submitted directly to the payment processor and is not stored on BrandSKU servers.

Our payment processors are compliant with the Payment Card Industry Data Security Standard (PCI-DSS), which sets requirements for the secure handling of payment card information.

We may retain information about your transactions (such as amount, date, and subscription plan) for accounting, tax, and dispute resolution purposes.

Links to Third-Party Websites

The Service may contain links to third-party websites or services that are not operated by BrandSKU. If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the privacy policy of every site you visit.

BrandSKU has no control over and assumes no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Children's Privacy

The Service is not intended for use by anyone under the age of 18 ("Children"). BrandSKU does not knowingly collect personally identifiable information from anyone under the age of 18.

If you are a parent or guardian and you become aware that your child has provided us with Personal Data, please contact us at [email protected]. If we become aware that we have collected Personal Data from a child under 18 without verification of parental consent, we will take steps to remove that information from our servers.

How to Request Data Access or Deletion

You may request access to, correction of, or deletion of your Personal Data at any time by contacting us at [email protected].

When submitting a request, please include enough information for us to verify your identity and locate your data, such as the email address associated with your BrandSKU account. We may ask for additional information to confirm your identity before processing your request.

We will respond to your request promptly. In some cases, we may be unable to fulfill your request in full, such as when we are required to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the effective date shown at the top of this page.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised Privacy Policy.

Contact Us

If you have any questions about this Privacy Policy, or if you would like to exercise any of your rights described above, please contact us:

SYMON ECOM BASE INC

3207 Pomona Blvd, Pomona, CA 91768, USA

[email protected]