Privacy & Information Security Policy

Bustle Ecommerce LLC

Bustle Ecommerce LLC ("Company", "we", "our", or "us") is committed to protecting the confidentiality, integrity, and availability of personal and business information processed through our systems, including data accessed via TikTok Shop APIs.

1. Scope

This policy applies to all employees, contractors, systems, applications, and third-party service providers involved in the collection, processing, storage, and transmission of personal data related to Print-on-Demand (POD) services and customer support operations.

2. Data We Collect

• Seller and shop identifiers authorized via TikTok Shop
• Order and fulfillment information
• Customer contact and shipping details (as required for POD fulfillment)
• Support-related communications

3. Purpose of Data Processing

• Order processing and fulfillment
• Customer service and after-sales support
• Operational and system integrity
• Compliance with TikTok Shop Partner requirements

4. Data Protection Measures

• Encryption of sensitive data in transit (HTTPS/TLS) and at rest
• Role-based access control and least-privilege principles
• Multi-factor authentication for administrative access
• Secure password and session management
• Endpoint protection and malware prevention

5. Access Control

Access to personal data is strictly limited to authorized personnel who require such access to perform their job responsibilities. All access activities are logged and monitored.

6. Data Sharing

We do not sell or rent personal data. Data may only be shared with:

• TikTok Shop and its authorized systems
• Fulfillment and logistics partners strictly for order completion
• Legal or regulatory authorities when required by law

7. Data Retention & Deletion

Personal data is retained only for as long as necessary to fulfill business and legal obligations. Upon termination of service or contractual relationship, all customer data is securely deleted or anonymized.

8. Incident Response

The Company maintains an incident response process with clearly defined roles and responsibilities. Any suspected or confirmed data breach will be promptly investigated and reported to relevant parties, including TikTok Shop, when applicable.

9. User & Seller Rights

Sellers and users may request access, correction, or deletion of personal data through TikTok Shop or by contacting us directly. We support TikTok Shop in fulfilling such requests.

10. Updates to This Policy

This policy is reviewed and updated regularly to reflect changes in legal, regulatory, and operational requirements.