Privacy, Security & Legal Information

Privacy Policy

Swift Traders Inc ("we," "us," or "our") handles website inquiries and information needed to provide authorized marketplace services. This notice explains the information involved, permitted purposes, access, and privacy choices.

Website inquiries. Our contact form collects your name, email address, optional phone number, subject, and message. The form uses Netlify Forms to receive inquiries. Information you send by form, email, or phone is used to respond, discuss requested services, and maintain related business records. Do not send Amazon passwords, access keys, or buyer information through the public contact form.

Marketplace services. Depending on the service and permissions granted, information may include seller business details, listings, inventory, orders, fulfillment records, and account-performance information. Buyer details, such as names and shipping addresses, may be accessed only where authorized and necessary for a permitted purpose. The service agreement must identify the information required and the reason for access before work begins.

Who may access information. Our authorized employees perform marketplace services. Agents or contractors may participate only within the disclosed service scope and approved permissions. Anyone requiring Amazon access must complete Amazon's applicable user-registration and verification requirements. Access must be limited by role and business need, with confidentiality obligations and security training.

Service providers and disclosures. Website hosting and inquiry handling involve Netlify. Other providers, such as authorized fulfillment or shipping providers, may receive only information necessary for an agreed, permitted service. Relevant recipients and purposes must be disclosed to the seller before sharing. Required legal disclosures must be limited to their lawful scope. We do not sell inquiry information for marketing. Amazon Information must never be sold or used for unrelated marketing.

See the policies below for permitted data use, security, retention, deletion, and how to request access or correction.

Organizational Change Notification Policy

Swift Traders Inc maintains a policy requiring Amazon to be notified within 30 calendar days of any organizational change or event that materially changes our organization's need for, access to, or use of Amazon Information. This includes changes in ownership, business structure, legal entity information, service operations, authorized personnel, data-access requirements, security practices, or other circumstances affecting our Solution Provider relationship with Amazon. Management is responsible for reviewing relevant organizational changes and ensuring required notifications are submitted to Amazon within the required period.

Management must submit the notice through Amazon Solution Provider Support, retain the notification record, and update affected business and access information. Suspected security incidents follow the separate incident-response deadline.

Network Protection Policy — Swift Traders Inc

This policy requires protection of every system and device used to access, process, or store Amazon Information. Management is responsible for implementation and retaining evidence of the controls.

• Use firewalls, access rules, and identity controls to deny unauthorized connections. Separate sensitive business environments from guest or untrusted systems, and use intrusion detection and prevention or equivalent protection.
• Protect internet-facing endpoints with application-layer filtering, such as a web application firewall or equivalent controls appropriate to the endpoint.
• Maintain current malware or endpoint detection protection. Enable automatic updates where supported; otherwise update at least monthly. Prevent users from disabling or altering protection.
• Require encrypted endpoint storage, controlled administrative access, removable-media restrictions, and automatic screen locking within 15 minutes. Personal or unmanaged devices must not access Amazon Information unless managed security controls enforce these requirements.
• Maintain network diagrams, approved configurations, patch records, and evidence of deployed protections. Review changes before implementation and investigate security alerts promptly.

Amazon Information & Acceptable Use

Amazon Information means information accessed through Amazon services, portals, or interfaces, including seller and buyer data. Personnel must use it only for the authorized seller's permitted service. Access must not exceed the permissions or information needed for that service.

Buyer personal information must be used only for permitted merchant-fulfilled shipping or applicable legal, tax, or regulatory obligations. It must not be used for promotional contact, review manipulation, or unrelated profiling. Combining different sellers' data for sale, competing sellers, or unrelated business insights is prohibited. Seller information must be kept distinguishable and access separated.

We must use Amazon's authorized access process. Sellers must not share portal passwords, access keys, or data exports to bypass permission restrictions. Any provider receiving data must have an authorized purpose, suitable security safeguards, and required contractual protections.

Access & Credential Management

Management must approve, record, and review access based on a documented business need. Each person must use a unique account, complete required verification and annual security training, and use multi-factor authentication. Shared, generic, or default user accounts are prohibited.

Access reviews must take place at least quarterly and be recorded. Remove personnel access within 24 hours of termination or role change; revoke unnecessary or compromised programmatic access promptly. Lock accounts after no more than ten consecutive failed login attempts and investigate unusual authentication activity.

Passwords must meet Amazon's applicable requirements, including at least 12 characters, mixed character types, exclusion of the user's name, a minimum age of one day, expiry within 365 days, and prevention of reuse of the last ten passwords. Programmatic credentials, if used, require a named owner, encryption at rest, restricted access, and rotation at least annually and upon suspected compromise.

Data Retention & Secure Deletion

Keep information only for its documented, authorized purpose and the minimum necessary period. Website inquiry records must be reviewed and deleted when no longer needed for the inquiry, service relationship, or applicable legal obligations.

Amazon buyer personal information must be removed within 30 days after order delivery unless a law requires longer retention for a specific legal, tax, or regulatory purpose. Any required legal archive must remain encrypted, restricted, and unavailable for unrelated business use.

Securely delete Amazon Information, including live and network-accessible copies, within 30 days of the earliest applicable trigger: Amazon's deletion notice, the seller revoking authorization or ending access, loss of our authorization to process it, or the end of participation in the relevant Amazon service. Legally required exceptions must be documented. Deletion must cover applicable exports and retained copies using industry-standard sanitization. Management must retain deletion evidence and supply confirmation when required.

Security Incident Response

Personnel must immediately escalate suspected unauthorized access, data loss, malware, or compromise to management. Management must designate an incident contact, maintain a reachable escalation route, and coordinate containment, investigation, recovery, and corrective action. Reports can be sent to admin@swifttradersusa.com; urgent reports should also use our listed telephone number. Do not include passwords or unprotected buyer data.

Notify Amazon at security@amazon.com within 24 hours of detecting a Security Incident. Preserve evidence, record decisions and remediation, and make required notifications to affected parties or authorities. Do not speak on Amazon's behalf without its written direction.

Management must maintain incident-specific runbooks, review and verify them every six months and after major changes, and review risk assessments annually. The 30-day organizational-change notification period does not extend the security-incident deadline.

Data Security & Governance

Management must document what information is collected, why it is needed, where it is processed, who can access it, and when it must be deleted. Transmission across public networks and untrusted boundaries must use TLS 1.2 or higher or an equivalent approved secure protocol.

Where Amazon personal information is handled, the applicable additional controls must be implemented: encryption at rest with managed keys, controlled storage and disposal, an up-to-date asset inventory, access logging and monitoring, vulnerability management, vendor assessments, and recovery procedures. Security logs must be protected, reviewed at least every two weeks or continuously, and retained for at least 12 months without unnecessary personal information.

Changes affecting information security require documented testing and approval. Personnel and service providers must follow applicable confidentiality obligations. Management must maintain operational evidence and review the current Amazon requirements when services, access, or systems change.

Cookie & Local Storage Policy

The website's own scripts use your browser's Local Storage to remember your light or dark theme and whether you have dismissed the preference notice. These values remain on your device; they are not uploaded by our scripts. The website's scripts do not set advertising or analytics cookies.

You can delete these stored preferences through your browser settings. This resets the saved theme and notice choice. Our hosting provider may process connection information needed to deliver and protect the website. See Data Collection for external font requests and hosting information.

User Rights

Depending on applicable law, you may request access to, correction of, deletion of, or restrictions on the use of personal information, and withdraw consent where processing relies on consent. Contact admin@swifttradersusa.com or write to our business address below. Provide enough information to identify your request, but do not send account passwords or unnecessary identity documents.

We must verify requests appropriately, respond within applicable legal deadlines, and explain any lawful retention exception. Where we act on behalf of a seller, requests must be coordinated with that seller or Amazon as appropriate to our role. A seller can revoke our Amazon permissions through Amazon's access-management tools.

Data Collection

This website has no third-party analytics or advertising pixels. Netlify receives the information submitted through the contact form. Hosting infrastructure may also process IP addresses, browser details, request times, and technical logs to serve and secure the website.

Fonts are loaded from Google Fonts. Your browser connects to Google to retrieve those files, which exposes connection information such as your IP address and browser details. External marketplace or social links open services governed by those providers' own privacy notices.

Marketplace data access is governed by the service scope and the Amazon Information policies above. This public website does not provide a login for Amazon accounts or an upload facility for seller exports or buyer information.