Data Handling Policy

Customer identity, order, delivery, and Amazon operational information are classified as confidential. Credentials and encryption keys are restricted secrets. Public catalogue content is classified as public. Only fields required for the stated business purpose are collected.

The private SP-API workflow serves only Golden Hills Farm's own seller account. It reads the current waiting-for-pickup queue, maps SKU/ASIN values to local products, and prepares internal packing documents and local labels. Buyer contact, address, payment, and shipping-address columns are rejected before persistence or display. No Amazon order, shipment, pickup, buyer-message, or listing mutation is performed.

Production databases are not publicly exposed. HTTPS protects data in transit. Encrypted off-site backups use AWS S3 and AWS KMS. Access is assigned by job duty, protected with MFA for administrators, and limited to approved operational devices and permissions.

Amazon operational records are minimized and removed under the documented retention schedule, with temporary access records limited to their short validity period. Backups expire under lifecycle rules. Security evidence is append-only and retained for at least 12 months. Expired data is deleted by controlled purge procedures.

Application, access, host-protection, backup, and security evidence are reviewed on documented schedules. Suspected unauthorized access is contained, access is revoked, evidence is preserved, and incidents involving Amazon Information are reported to Amazon within 24 hours of detection.