What we hold, and why.

The first is our clients' business information — the sellers who send us their returns. Contact details, the goods they send, what they decide to do with them, and what we bill them.

The second is buyer information from marketplaces. When a client asks us to liquidate an item and it sells, the marketplace gives us the buyer's name and address so we can post the parcel. We keep that only as long as we need it, and we delete it when the buyer asks the marketplace to delete it.

We do not sell personal information, and we do not use it for advertising.

Account and contact details — business name, your name, email address, telephone number and postal address. Used to run your account, send you notices about your goods, and invoice you.

Payment information — handled by our payment processor. We do not store full card numbers on our systems.

Your inventory and its history — what arrived, its condition, photographs taken at intake, what you decided, where it went, what it sold for and what you were paid. Photographs are a record of condition as received, and we may rely on them if there is a disagreement about the state of an item.

Usage records — sign-ins, actions taken in the application, and routine server logs. Used to operate the service and investigate problems.

When a client's item is listed for liquidation and sells, we receive from the marketplace the information needed to fulfil that order: the buyer's username, name, delivery address, and sometimes a telephone number or email address. We receive the order totals, taxes and fees so the client can be paid correctly.

We use this only to pick, pack, label and despatch the parcel, to pass tracking back to the marketplace, and to settle the sale with our client. We do not contact buyers for marketing, and we do not pass their details to anyone other than the carrier delivering the parcel.

eBay marketplace account deletion. We are subscribed to eBay's account deletion notifications. When eBay tells us a user has asked for their personal data to be deleted, we remove that person's name, address, contact details and username from our systems. We keep the transaction record itself — order number, item, amounts — because we are required to retain records of money received and paid, and because a client was paid out of that sale. The record that remains does not identify the buyer.

Carriers — UPS and other shipping companies receive the delivery address on a parcel, because that is what a shipping label is.

Marketplaces — eBay and other sites where a client's goods are listed receive the listing information and the tracking number.

Service providers — hosting, databases, email delivery, payment processing and error monitoring, each handling only what their function requires, and under terms that restrict them to providing that service to us.

We may disclose information where the law requires it, or to establish or defend a legal claim.

Client account and transaction records are kept for as long as the account is open, and afterwards for as long as tax and accounting obligations require.

Buyer personal data is kept for as long as it is needed to complete the sale and handle any return or dispute arising from it, and is removed on request from the marketplace as described above.

Item photographs are kept with the item's record. Shipping label images are kept for 30 days and then deleted.

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Write to hello@returnworx.com and we will respond within 30 days.

If you are a California resident, you have rights under the California Consumer Privacy Act to know what personal information we collect, to request deletion, to correct inaccurate information, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by that Act.

Some information we cannot delete on request, because we are required to keep records of transactions. Where that applies, we will tell you what we are keeping and why.

Security. Access to client and buyer data is restricted to staff who need it to do their work. Data is held on managed cloud infrastructure and transmitted over encrypted connections. No system is perfectly secure, and we do not claim otherwise.

Children. ReturnWorx is a service for businesses. It is not directed at children and we do not knowingly collect information from them.

Changes. If we change this policy we will update the date at the top of this page. If a change materially affects how we handle your information, we will tell account holders directly.

Contact. PrepWorx LLC, Independence, Oregon, United States — hello@returnworx.com.