About Us
Pacific Ecommerce LLC is an ecommerce operations and online sales management firm located at 4015 Via Marina, Apt B213, Marina del Rey, CA 90292, United States.
This Privacy Policy explains how we collect, use, disclose and protect personal information belonging to prospective clients, clients, vendors, job applicants and visitors to this website.
By using this website or engaging our services, you acknowledge the practices described in this policy.
Our Two Roles
Because of what we do, we handle personal information in two distinct capacities, and different rules apply to each.
- As a business — for information about our own prospects, clients, vendors and applicants, we decide how and why the data is used. This policy governs that information.
- As a service provider — when we operate a client's storefront, marketplace account or support inbox, we access shopper data belonging to that client. Under the CCPA and CPRA we act as a service provider: we process that data only on the client's documented instructions, we do not sell or share it, and we do not use it for our own purposes or to build our own marketing lists.
If you are a shopper who bought from a brand we support, the merchant's own privacy policy governs your data. Contact the merchant directly, and we will assist them in responding to your request.
Information We Collect
- Identifiers — name, business email, phone number, job title, company name and business address.
- Commercial information — services inquired about, proposals issued, engagement history and billing records.
- Client operational data — catalog files, pricing, inventory counts, ad account performance and order volumes shared with us to run the engagement.
- Account credentials — access granted to storefronts, marketplace seller accounts and ad platforms, held under the controls described in Section 10.
- Payment information — processed by PCI-DSS compliant providers. We do not store full card numbers.
- Internet activity — IP address, browser type, device, pages viewed and time on site.
- Applicant information — resumes and materials submitted for open roles.
How We Use Information
- Respond to inquiries and prepare proposals and statements of work.
- Deliver the contracted services and report on their performance.
- Invoice, collect payment and maintain accounting records.
- Communicate project status, findings and recommendations.
- Send newsletters and industry updates, only where consent has been given.
- Secure our systems, prevent fraud and investigate misuse.
- Meet tax, accounting and other legal obligations.
We do not use client operational data to benchmark against other clients, train external models or inform work for a competitor.
Legal Basis for Processing
We process personal information on the following grounds:
- Performance of a contract — to deliver the services you engaged us for and take pre-contractual steps at your request.
- Legal obligation — to satisfy tax, accounting and record-keeping requirements.
- Legitimate interests — to secure our systems, prevent fraud and improve our services, balanced against your rights.
- Consent — for marketing communications, withdrawable at any time.
How We Share Information
We do not sell or share personal information as those terms are defined by the CCPA and CPRA. Disclosure is limited to:
- Subprocessors — cloud hosting, email, project management and analytics platforms, each under written data-processing terms.
- Platforms and marketplaces — where operating your account requires transmitting data to Amazon, Shopify, Google, Meta or similar, under their own terms.
- Logistics partners — 3PLs and carriers, limited to what is required to fulfill and ship an order.
- Professional advisors — legal and accounting counsel, under confidentiality.
- Legal authorities — where required by law, subpoena, court order or valid government request.
- Business transfers — in connection with a merger or acquisition, with equivalent protections carried over.
Cookies and Tracking
- Essential cookies — required for this site and its forms to function. These cannot be disabled.
- Analytics cookies — anonymized usage data used to improve site content and structure.
- Marketing cookies — measure campaign performance, enabled only with explicit consent.
We honor Global Privacy Control and Do Not Track signals in accordance with CalOPPA and the CPRA. Tracking technologies deployed on a client's storefront are configured under that client's instructions and disclosed in the client's own policy.
Data Retention
- Engagement contracts and deliverables: 7 years after completion, consistent with business and tax record requirements.
- Client operational data: for the term of the engagement plus 90 days, then deleted or returned at the client's election.
- Account credentials: revoked at the end of the engagement and removed from our password manager within 7 days.
- Financial and billing records: 7 years, per IRS and California requirements.
- Prospect and proposal records: 24 months from last contact.
- Website analytics: 26 months.
- Applicant materials: 12 months, unless a longer period is agreed.
Your Privacy Rights
California residents hold the following rights under the CCPA and CPRA:
- Right to know — what personal information we collect, use and disclose.
- Right to access — obtain a copy of the personal information we hold about you.
- Right to correct — request correction of inaccurate personal information.
- Right to delete — request deletion, subject to legal retention obligations.
- Right to limit — restrict use of sensitive personal information.
- Right to opt out — of sale or sharing. We do not sell or share personal information.
- Right to non-discrimination — exercising these rights will never affect the service or pricing you receive.
Submit requests to [email protected]. We verify identity before acting and respond within 45 days, with one permitted extension. Authorized agents may submit on your behalf with proof of authority.
Information Security
- TLS encryption across this website, our forms and all client file transfers.
- Client credentials stored in an encrypted password manager, never in email, spreadsheets or chat.
- Individual named logins wherever a platform supports them, so every action is attributable.
- Multi-factor authentication required on all internal systems and every client account we access.
- Role-based access limiting each account to the operators assigned to that engagement.
- Access revoked within one business day when a team member leaves or an engagement ends.
- Documented incident-response plan with prompt notification to affected clients and individuals.
A note on credentials. We will never ask you to email or message us a password. Access is granted through each platform's own user-invitation flow, so it can be revoked by you at any time without changing your password.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, internal practices or applicable law. The effective date above is revised with each update, and active clients are notified by email of any material change at least 30 days before it takes effect.
Contact Us
Privacy Contact
[email protected]Address
4015 Via Marina, Apt B213Marina del Rey, CA 90292
United States
Compliance
CCPA · CPRA · CalOPPACalifornia & federal law
You may also file a complaint with the California Privacy Protection Agency at cppa.ca.gov or the California Attorney General at oag.ca.gov.