We're Charming Holdings LLC. We sell consumer goods online through several marketplaces (Amazon, Walmart, eBay, Shopify, Temu), and we ship every order ourselves from our own warehouse. Our website at greendeals123.com is an internal tool used by our small team to manage those orders. This page explains what data we handle from buyers and how we look after it.
When you buy something we're selling on one of the marketplaces, the marketplace passes us the bits we need to ship your order: your name, your shipping address, and the items you bought. We get this through the marketplaces' official APIs (Amazon's Selling Partner API, Walmart's Marketplace API, eBay's Trading API, Shopify's Admin API, Temu's Open API). We don't see or store your payment information — the marketplace handles that. We only keep contact info (email or phone) where the marketplace or carrier requires it to notify you about your shipment, and we remove it once the order is delivered.
The data is used only to:
Print one shipping label per order. Pack the box. Track inventory and fulfillment internally. Reconcile refunds, returns, and fees for our books. That's it. We don't market to buyers, we don't profile them, and we don't feed the data into any analytics, advertising, or machine-learning system.
Four people on our team have accounts in our internal app. Each has their own login — no shared accounts. The admin can see full order details including buyer name and address. Our three fulfillment employees only see the order ID and product info they need to do their job; the address is filtered out at the server before the page loads for them. If someone leaves the team, their account is disabled the same day.
We don't sell, lease, or share buyer data with advertisers, analytics providers, brokers, or marketing services. The only outside parties that touch buyer data at all are: the marketplaces themselves (because they sent us the order), the shipping carriers we hand the package to (UPS, USPS, FedEx, etc.) to deliver it, and the infrastructure providers that host and secure our systems (our cloud host and our content-delivery provider). Each of those receives only the minimum information needed to do its job.
Buyer name and shipping address are automatically deleted from our database within 30 days of the order shipping. We keep them only as long as we need them to pack and ship your order. After that, only anonymized order metadata (order ID, product, quantity, sale amount) remains, which we keep for accounting and inventory analysis.
The site is served only over HTTPS (TLS 1.2+). Our database is not reachable from the internet — it accepts connections only from the application on the same server. Access to our application is restricted to the small set of individual accounts described above, and every request that touches buyer identity data is written to an audit log (who accessed it, when, and what was returned). The most sensitive fields — payment credentials and Temu buyer identity — are additionally encrypted at rest (AES-128 with authenticated encryption), with the key held outside the database. If you want a fuller technical description for security-review purposes, please contact us at the address below.
We have a written Incident Response Plan that we review every six months. If we ever detect a security incident that involves buyer data — unauthorized access, a leak, a database breach — we contain it (revoking credentials, blocking the source, killing sessions), investigate root cause, and rotate any keys that may have been exposed. If the affected data came from a marketplace we notify that marketplace's security team within 24 hours of detection:
If you bought something from us through a marketplace and want a copy of the data we have about your order, or want it deleted sooner than our 30-day window, reach out to us directly using the contact below. We'll typically respond within 7 business days.
Charming Holdings LLC
Email: [email protected]
For security incidents or data-handling questions, that same email
address reaches our Incident Management Point of Contact, Betzalel Bree.