We're Charming Holdings LLC. We sell consumer goods online through several marketplaces (Amazon, Walmart, eBay, Shopify), and we ship every order ourselves from our own warehouse. Our website at greendeals123.com is an internal tool used by our small team to manage those orders. This page explains what data we handle from buyers and how we look after it.
When you buy something we're selling on one of the marketplaces, the marketplace passes us the bits we need to ship your order: your name, your shipping address, and the items you bought. We get this through the marketplaces' official APIs (Amazon's Selling Partner API, Walmart's Marketplace API, eBay's Trading API). We don't see or store your payment information — the marketplace handles that. We only keep contact info (email or phone) where the marketplace or carrier requires it to notify you about your shipment, and we remove it once the order is delivered.
The data is used only to:
Print one shipping label per order. Pack the box. Track inventory and fulfillment internally. Reconcile refunds, returns, and fees for our books. That's it. We don't market to buyers, we don't profile them, and we don't feed the data into any analytics, advertising, or machine-learning system.
Four people on our team have accounts in our internal app. Each has their own login — no shared accounts. The admin can see full order details including buyer name and address. Our three fulfillment employees only see the order ID and product info they need to do their job; the address is filtered out at the server before the page loads for them. If someone leaves the team, their account is disabled the same day.
We don't sell, lease, or share buyer data with advertisers, analytics providers, brokers, or marketing services. The only outside parties that touch buyer data at all are: the marketplaces themselves (because they sent us the order), the shipping carriers we hand the package to (UPS, USPS, FedEx, etc.) to deliver it, and the infrastructure providers that host and secure our systems (our cloud host and our content-delivery provider). Each of those receives only the minimum information needed to do its job.
Buyer name and shipping address are automatically deleted from our database 90 days after the order ships. We keep them that long because Amazon, Walmart, and other marketplaces have return and claim windows that go that far back. After 90 days only anonymized order metadata (order ID, product, quantity, sale amount) remains, which we keep for accounting and inventory analysis.
The site is served only over HTTPS. The sensitive fields (your name and shipping address) are encrypted at rest in our database and the storage they live on is itself encrypted. Access to our application is restricted to the small set of accounts described above. We keep encrypted backups in a separate region so we can recover from a failure of the primary system. If you want a fuller technical description for security-review purposes, please contact us at the address below.
We have a written Incident Response Plan that we review every six months. If we ever detect a security incident that involves buyer data — unauthorized access, a leak, a database breach — we contain it (revoking credentials, blocking the source, killing sessions), investigate root cause, and rotate any keys that may have been exposed. If the affected data came from a marketplace we notify that marketplace's security team within 24 hours of detection:
If you bought something from us through a marketplace and want a copy of the data we have about your order, or want it deleted sooner than our 90-day window, reach out to us directly using the contact below. We'll typically respond within 7 business days.
Charming Holdings LLC
Email: [email protected]
For security incidents or data-handling questions, that same email
address reaches our Incident Management Point of Contact, Betzalel Bree.