Privacy Policy

We collect information you provide directly and automatically through your use of the Platform: **Information You Provide:** • Account information (name, email, password, business details) • Payment information (processed securely by third-party providers) • Store configuration and product listings • Customer order data and shipping addresses • Communications with our support team **Information Collected Automatically:** • Device information (browser type, operating system, IP address) • Usage data (pages viewed, features used, time spent) • Cookies and similar tracking technologies • Log data and error reports

We use your information for the following purposes: • **Provide Services**: Process orders, manage your stores, and facilitate transactions • **Improve Platform**: Analyze usage patterns to enhance features and user experience • **Communication**: Send account updates, order notifications, and support responses • **Marketing**: Share relevant offers and updates (with your consent) • **Security**: Detect and prevent fraud, abuse, and security threats • **Legal Compliance**: Meet legal obligations and respond to lawful requests We do not sell your personal information to third parties.

We share information only as necessary to provide our services: **With Suppliers**: Order details necessary for fulfillment (shipping address, product info) **With Payment Processors**: Transaction data for payment processing **With Service Providers**: Third parties that help us operate (hosting, analytics, support) **For Legal Reasons**: When required by law or to protect our rights **With Your Consent**: When you explicitly authorize sharing All third parties are bound by confidentiality agreements and data protection requirements.

We implement industry-standard security measures: • **Encryption**: TLS 1.3 for data in transit, AES-256 for data at rest • **Access Controls**: Role-based access with multi-factor authentication • **Monitoring**: 24/7 security monitoring and intrusion detection • **Audits**: Regular security assessments and penetration testing • **Compliance**: SOC 2 Type II certified infrastructure While we strive to protect your data, no system is 100% secure. We encourage strong passwords and vigilance against phishing.

You have the following rights regarding your personal data: • **Access**: Request a copy of your personal data • **Correction**: Update or correct inaccurate information • **Deletion**: Request deletion of your personal data • **Portability**: Export your data in a machine-readable format • **Opt-Out**: Unsubscribe from marketing communications • **Restriction**: Limit how we process your data To exercise these rights, contact privacy@dropshipbuys.com or use the settings in your account dashboard.

We use cookies and similar technologies for: **Essential Cookies**: Required for login, security, and basic functionality **Analytics Cookies**: Help us understand how you use the Platform **Preference Cookies**: Remember your settings and preferences **Marketing Cookies**: Enable personalized ads (with consent) You can manage cookie preferences in your browser settings. Disabling essential cookies may affect Platform functionality. We may use third-party analytics services like Google Analytics. These services have their own privacy policies.

We retain your data for as long as necessary to provide services and meet legal obligations: • **Account Data**: Retained while your account is active, plus 7 years after closure • **Transaction Records**: 7 years for tax and legal compliance • **Support Communications**: 3 years after resolution • **Usage Logs**: 90 days for security and analytics • **Marketing Preferences**: Until you opt out You can request earlier deletion, subject to legal retention requirements.

Your data may be processed in countries outside your residence: • We primarily store data in the United States • For EU/EEA users, we rely on Standard Contractual Clauses • We ensure adequate protection regardless of location • Data centers meet international security standards By using the Platform, you consent to international data transfers as described.

The Platform is not intended for users under 18 years of age: • We do not knowingly collect data from children • If we discover child data, we will delete it promptly • Parents/guardians can contact us about child data concerns If you believe we have collected information from a minor, please contact us immediately.

We may update this Privacy Policy periodically: • Material changes will be communicated via email or Platform notice • Continued use after changes constitutes acceptance • Previous versions are available upon request • Check the "Last Updated" date for the current version We encourage you to review this policy regularly.

For privacy-related questions or to exercise your rights: **Email**: privacy@dropshipbuys.com **Mail**: DropShipBuys Privacy Team 123 Commerce Street, Suite 400 Wilmington, DE 19801 **Data Protection Officer**: dpo@dropshipbuys.com We aim to respond to all requests within 30 days.