Privacy & Data Protection Policy

Welcome to Hiwin Digital. We respect your privacy and are committed to protecting the personal data of our users and Amazon customers. This policy outlines our strict compliance with Amazon’s Data Protection Policy (DPP) and Acceptable Use Policy (AUP).

1. Information We Collect

We only collect information necessary to fulfill your orders and improve our service. This includes:

• Personally Identifiable Information (PII): Customer names, shipping addresses, phone numbers, and email addresses retrieved via Amazon SP-API for order fulfillment.
• Order Details: Product identifiers (SKUs), quantities, prices, and purchase dates.
• Technical Data: IP addresses, browser types, and device information for security and diagnostic purposes.

2. How We Use Your Data

3. Data Security Measures

We employ enterprise-grade security controls to protect Amazon Information:

• Encryption at Rest: All sensitive PII is encrypted using AES-256 industry standards.
• Encryption in Transit: Data moving between servers and APIs is protected via TLS 1.2 or higher.
• Access Control: We implement Role-Based Access Control (RBAC) and Multi-Factor Authentication (MFA) to ensure only authorized personnel can access PII on a "need-to-know" basis.

4. Data Retention Policy

In compliance with Amazon's security requirements, we do not retain PII longer than necessary. All Amazon Customer PII is automatically deleted or anonymized within 30 days after the order has been shipped, unless required for legal, tax, or regulatory compliance.

5. Third-Party Sharing

We never sell or trade Amazon customer data. Information is only shared with authorized third-party service providers (e.g., shipping carriers like BlueDart, Delhivery, or USPS) strictly for the purpose of order delivery.

6. Your Privacy Rights

Users have the right to request access to their data, correct inaccuracies, or request permanent deletion. For any data-related inquiries, please contact our Data Protection Officer.

7. Contact Us