POPCSUSTOMS & PILLAR SUPPLY LLC standard operating policy includes controls to manage risk to the confidentiality, integrity and availability of sensitive data in any form and represent a minimum standard for protection of this data. Controls required under applicable laws, regulations, or standards governing Personally Identifiable Information “PII” also apply. Each individual who creates, uses, processes, stores, transfers, administers, and/or destroys sensitive Data within POPCSUSTOMS & PILLAR SUPPLY LLC is responsible and accountable for complying with these standards.

Data Creation

Data Records within POPCUSTOMS & PILLAR SUPPLY LLC are primarily created via secure data acquisition from an online Marketplace (Amazon, eBay, Walmart, etc) or website. These data records are occasionally created or edited by the Seller who owns & operates the online store on said marketplace or website. Virtually all records include PII and are used to fulfill product orders for online Buyers.

It is essential that all records are created and maintained appropriately throughout their entire life cycle. Personally Identifiable Information (PII) contained in POPCSUSTOMS’s data records constitutes an area of critical concern because of the severe risk to POPCSUSTOMS, its clients and connectivity partners should records be mishandled or information inappropriately accessed or disclosed. As a consequence, records containing sensitive information & PII should exist only in areas where there is a legitimate and justifiable business need.

Access Management

POPCUSTOMS & PILLAR SUPPLY LLC uses a unique ID assigned to each individual with computer access to Sensitive Information. Under no circumstances do we create or use generic, shared, or default login credentials or user accounts. We have implemented baselining mechanisms to ensure that at all times only the required user accounts have access Sensitive Information. We review the list of people and services with access to Sensitive Information on a monthly basis and remove accounts that no longer require access. We restrict employees from accessing or storing Sensitive data on personal devices. We maintain and enforce “account lockout” by detecting anomalous usage patterns and log-in attempts and disabling accounts with access to Sensitive Information as needed.

Data Governance

POPCSUSTOMS & PILLAR SUPPLY LLC keeps inventory of all software and physical assets with access to PII. This inventory is updated every 60 days. We keep records of all data processing activities, including but not limited to, specific data fields as well as how they are collected, processed, stored, used, shared, and disposed of as they apply to PII. This record is maintained for the purpose of establishing accountability and compliance with regulations. We follow our posted Privacy Policy as it applies to customer consent and data rights per all applicable data privacy regulations.

Network Protection

All POPCSUSTOMS & PILLAR SUPPLY LLC servers and systems employ VPC subnet/Security Groups as well as network firewall network protection controls for the purpose of denying access to unauthorized IP addresses. Public access is restricted to approved users only.

Encryption and Storage

All PII is encrypted at rest using AES-256 industry standards. All cryptographic materials (encryption/decryption keys) and cryptographic capabilities used for encryption of PII at rest are only accessible to POPCUSTOMS  & PILLAR SUPPLY LLC system processes and services. We do not store PII in removable media (USB, Flash Drives, Etc.) or unsecured public cloud applications (Google Drive, Drop Box, Etc). No documents containing PII are ever printed on paper.

Encryption in Transit

POPCUSTOMS & PILLAR SUPPLY LLC encrypts all Sensitive Information in transit, when the data traverses a network, or is otherwise sent between hosts using HTTP over TLS (HTTPS). We enforce this security control on all applicable external endpoints used by customers as well as internal communication channels and during operational tooling. We don’t use communication channels which do not provide encryption in transit even if unused. In addition, POPCUSTOMS & PILLAR SUPPLY LLC uses message-level encryption where channel encryption terminates in untrusted multi-tenant hardware.

Data Retention and Recovery

We retain PII only for the purpose of fulfilling product orders on behalf of our clients (online Sellers). This retention period is for no more than 60 days (“Hold Period”) from shipment and online confirmation of delivery to the Buyer (our client’s Customer). POPCSUSTOMS is not required by law to retain archival copies of PII, therefore beyond the 60-day Hold Period, we do not maintain backup media of any kind for PII. In the event that PII is lost, erased or unavailable for processing due to system crash or ransomware during the 60-day Hold Period, POPCSUSTOMS & PILLAR SUPPLY LLC maintains a backup copy of all PII. This copy is encrypted and meets all security requirements noted in this policy. All security backups are purged with the original at the end of the 60-day Hold Period.

Least Privilege Principle

POPCSUSTOMS & PILLAR SUPPLY LLC employs fine-grained access control mechanisms when granting rights to any party using the Application, as well as the Application’s operators, following the principle of least privilege. Application sections or features that vend PII are protected under a unique access role, and access is only granted on a “need-to-know” basis.

Last Updated: 2024-08-02

1. Introduction

POPCUSTOMS & PILLAR SUPPLY LLC is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your personal data when you use our website https://popcustoms.com and related services (collectively, the “Services”).

By using our Services, you agree to the terms of this policy. If you do not agree, please do not use our Services.

2. Data We Collect

We may collect the following categories of personal data:

A. Information You Provide

• Contact Details: Name, email, phone number, shipping/billing address.
• Account Data: Username, password, profile information.
• Payment Information: Credit/debit card details (processed via secure payment gateways).
• Communications: Customer service inquiries, feedback, survey responses.

B. Data Collected Automatically

• Device & Usage Data: IP address, browser type, operating system, pages visited, clickstream data.
• Cookies & Tracking Technologies: We use cookies, pixels, and similar tools to enhance user experience and analyze trends.

C. Data from Third Parties

• Social media platforms (if you log in via Facebook/Google).
• Payment processors (e.g., PayPal, Stripe).
• Analytics providers (e.g., Google Analytics).

3. How We Use Your Data

We process your data for the following purposes:

• Service Delivery: To process orders, manage accounts, and provide customer support.
• Personalization: To recommend products, customize content, and improve user experience.
• Marketing: To send promotional emails (only with your consent; opt-out anytime).
• Security & Fraud Prevention: To detect and prevent fraudulent activities.
• Legal Compliance: To meet tax, accounting, or regulatory requirements.

4. Data Sharing & Disclosure

We may share your data with:

• Service Providers: Payment processors, logistics partners, IT support.
• Legal Obligations: To comply with laws, court orders, or government requests.
• Aggregated/Anonymized Data: For analytics or marketing (non-identifiable).

We do not sell your personal data to third parties.

5. Data Security

We implement industry-standard measures to protect your data, including:

• Encryption: SSL/TLS for data transmission.
• Access Controls: Restricted access to authorized personnel only.
• Regular Audits: Security assessments to mitigate risks.

6. Updates to This Policy

We may update this policy periodically. The “Last Updated” date will reflect changes. Continued use of our Services constitutes acceptance of the revised policy.

7. Contact Us

For privacy-related questions or requests, contact us: https://popcustoms.com/contact-us

Applicable to: All employees, contractors, and third parties handling POPCUSTOMS & PILLAR SUPPLY LLC data or systems.

1. Purpose

POPCUSTOMS & PILLAR SUPPLY LLC is committed to maintaining a secure environment for our customers, employees, and partners. This Incident Response Policy (IRP) establishes clear procedures for identifying, containing, eradicating, and recovering from security incidents to minimize business impact and ensure compliance with legal and regulatory requirements.

2. Scope

This policy applies to all:

• IT systems, cloud infrastructure, and corporate networks
• Employees, contractors, and authorized third parties
• Data breaches, cyberattacks, system failures, and other security events

3. Incident Classification

We categorize incidents based on severity:

Level	Impact	Example	Response Time
P1 (Critical)	High business/customer impact	Ransomware, major data breach	Immediate (24/7)
P2 (Major)	Significant operational disruption	Unauthorized access, DDoS	Within 4 hours
P3 (Minor)	Limited impact	Phishing attempt, malware detection	Within 24 hours

4. Roles & Responsibilities

• Security Team (CSIRT): Lead technical investigation and containment.
• Legal/Compliance: Ensure GDPR, CCPA, or other regulatory reporting.
• IT Operations: Execute system recovery and patches.
• PR/Communications: Manage customer/partner notifications.
• Executive Management: Approve major actions (e.g., system shutdown).

5. Incident Response Process

Step 1: Detection & Reporting

• Employees report incidents via:
  • Email: business@popcustoms.com
  • Automated monitoring alerts (SIEM/SOC).

Step 2: Assessment & Containment

• CSIRT evaluates severity and isolates affected systems.
• Legal team determines breach notification requirements.

Step 3: Eradication & Recovery

• Remove threats (e.g., malware, compromised accounts).
• Restore systems from clean backups.

Step 4: Post-Incident Review

• Conduct a Root Cause Analysis (RCA).
• Update policies/training to prevent recurrence.

6. Communication

• Internal: Updates to stakeholders via [Slack/Email].
• Regulators: Reported per legal requirements (e.g., 72 hours under GDPR).
• Customers/Public: Disclosed only if data is compromised (approved by Legal/PR).

7. Training & Testing

• Annual tabletop exercises for CSIRT.
• Employee security awareness training.

8. Policy Compliance

Violations may result in disciplinary action. Exceptions require CISO approval.

The following terms and conditions (the “Agreement”) set out the legally binding terms of your participation in the POPCUSTOMS affiliate program (the “Affiliate Program”). The Program is owned and operated by POPCUSTOMS, Inc. (“POPCUSTOMS”). The Program is offered subject to your (the “User” or “you”) acceptance without modification of any of the terms and conditions contained herein and all other operating rules, policies and procedures that may be published occasionally on the POPCUSTOMS.com website (the “Site”) by POPCUSTOMS. If you do not agree with this Agreement, do not use the Program.

You indicate your acceptance of this Agreement and all of the terms and conditions contained or referenced in this Agreement by completing the application process.

1.  Commissions

For each referred customer who visits the Site through your unique URL and signs up as a customer, you will only receive commission if POPCUSTOMS products are sold through POPCUSTOMS-approved E-commerce platforms and integrations. You will not receive commission for sample orders. Additionally, taxes and shipping are excluded from the calculations, but discounts are included.

The affiliate period of each customer lasts 12 months after your referred customer’s first order. Referring a prospective customer who previously was or currently is a POPCUSTOMS customer does not qualify for commission. You can track affiliate commissions by logging into your Affiliate Dashboard on the Site. Affiliate commission is credited once the customer’s order is fully shipped, meaning that if part of the order has been shipped, commission will not be credited until the final part of the order gets shipped.

To avoid confusion, all tax-related reporting to relevant tax authorities is entirely your responsibility. We will withhold taxes from payments that are due (including international payments) if you do not provide POPCUSTOMS with relevant documentation (such as the W8-BEN form or other).

2. Payment

You will receive commission after the order has been fully shipped, meaning that if part of the order has been shipped, commission will not be credited until the final part of the order gets shipped. Commission is calculated after any refunds if any refund is given to orders. In the event that the customer’s order is canceled, returned or refunded for any reason, we will deduct the relevant amount from your accrued earnings. If a refund is made after we have paid commission to you, we will deduct the respective amount from your account (any future payments).

The minimum withdrawal amount is $25 USD. If for any reason this Agreement is terminated prior to your first commission being due and the account balance does not exceed $25 USD, then no referral commission will be due. If commission is not withdrawn from the balance within 1 (one) year, then this past due commission is voided and removed from the commission balance. All payments will be made via PayPal. You must have a PayPal account for this purpose. Payments are made via PayPal in USD within 1-3 business days after your request is received.

3. Advertising

You must not use any misleading or deceptive claims in advertising copy. You are solely responsible for following all federal, state and local laws, regulations and rules regarding advertising claims, including but not limited to the Federal Trade Commission’s Disclosure Guidelines. You must adhere to all the editorial guidelines and search advertising terms and conditions set forth by each search engine (Google, Yahoo, Bing and other), including any updates to those terms in the future. Where search engine guidelines and this Agreement conflict, you must follow this Agreement.

When creating ads, videos, or other online content that publishes your affiliate URL on websites, POPCUSTOMS’s brand image needs to be kept in mind. Sites where you advertise cannot be associated with content that’s vulgar, racist, sexual, or otherwise deemed offensive by POPCUSTOMS. You must remove all ads and videos from websites deemed offensive within 24 hours of being notified by POPCUSTOMS. The POPCUSTOMS logo cannot be altered or changed. You are prohibited from creating groups or specific web pages in social communities to publicize POPCUSTOMS offers.

Users can engage in search engine optimization and pay per click activities. If you are sending paid traffic (PPC, PPV, Media Buys) to POPCUSTOMS, it is required that you send the traffic through a landing page or web property first. We do not allow direct linking. We restrict Users from using keywords that include our brand name: POPCUSTOMS, The POPCUSTOMS, POPCUSTOMS.com, or any variation or combination therein. You must also not knowingly serve ads that appear in a higher position than POPCUSTOMS managed ads. You shall not promote POPCUSTOMS on coupon sites.

You must not purchase or use domain names containing any POPCUSTOMS trademark, including domain names that combine a POPCUSTOMS trademark with one or more additional words, letters, numbers, or other characters, or domain names containing any misspelling or other confusingly similar variation of any POPCUSTOMS trademark.

We don’t approve self-referrals – you cannot refer yourself, and you will not receive commission on your own accounts.

Clickjacking, linkjacking, typosquatting or any sort of domain spoofing methods are prohibited.

Pixel, cookie stuffing or any other type of cookie stuffing without source website visitor’s knowledge is prohibited.

Using traffic generated by pay to read, PPC (pay to click), banner exchanges, click exchanges, PPV advertising, pop-up/under, or similar methods is prohibited.

4. Release

You release POPCUSTOMS (and its officers, directors, agents, subsidiaries, joint ventures and employees) from claims, demands and damages (actual and consequential) of every kind and nature, known and unknown, arising out of or in any way connected with such disputes. You agree that POPCUSTOMS shall be released from any and all damages resulting from the failure to receive any benefits of an anticipated collaboration.

5. Trademarks

If you use any of our trademarks in reference to our services and/or products, you must include a statement attributing that trademark to us. You must not use any of our trademarks (i) in or as the whole or part of your own trademarks; (ii) in connection with activities, products or services that are not ours; (iii) in a manner that may be confusing, misleading or deceptive; (iv) or in a manner that disparages POPCUSTOMS or its information, products or services (including the Site).

6. Indemnity

You will indemnify and hold POPCUSTOMS (and its officers, directors, agents, subsidiaries, joint ventures and employees) harmless from any claim or demand, including reasonable attorneys’ fees, made by any third party due to or arising out of your breach of this Agreement, or your violation of any law or the rights of a third party.

7. Limitation of Liability

POPCUSTOMS will not be liable for indirect, special or consequential damages (or loss of revenue, profits, or data) arising in connection with this Agreement, even if POPCUSTOMS has been advised of the possibility of such damages. Further, POPCUSTOMS’s aggregate liability arising with respect to this Agreement will not exceed the total referral commissions paid or payable to you under this Agreement.

8. Law & Jurisdiction

If a dispute arises between you and POPCUSTOMS, we strongly encourage you to first contact us directly to seek a resolution. We will consider reasonable requests to resolve the dispute through alternative dispute resolution procedures, such as mediation or arbitration, as alternatives to litigation. This Agreement will be governed by and construed and interpreted in accordance with the internal laws of the State of California. Any dispute or claim arising out of or in connection with this Agreement or its formation (including non-contractual disputes or claims) must be resolved by a court located in the State of California.

9. General

This Agreement shall be governed and interpreted in accordance with the English language, regardless of any translations made for any purpose whatsoever.

No agency, partnership, joint venture, employee-employer, franchisor-franchisee relationship, etc. is intended or created by this Agreement. You acknowledge that you have all necessary permits to grant us with personal data to fulfill this Agreement. If any provision of this Agreement is held to be invalid or unenforceable, such provision shall be struck and the remaining provisions shall be enforced. In our sole discretion, we may assign this Agreement upon notice to you. Headings are for reference purposes only and do not limit the scope or extent of such section. Our failure to act with respect to a breach by you or others does not waive our right to act with respect to subsequent or similar breaches. We do not guarantee that we will take action against all breaches of this Agreement. The User waives any applicable rights to require an original (non-electronic) signature or delivery or retention of non-electronic records, to the extent not prohibited under applicable law.

We make no express or implied warranties or representations with respect to the Program or this Agreement or any products or services sold by POPCUSTOMS. In addition, we make no representation that the operation of the Site will be uninterrupted or error-free and we will not be liable for the consequences of any interruptions or errors.

Upon notice from POPCUSTOMS you must immediately remove all references to POPCUSTOMS, including its name, logo, trademark, service mark or any other identifying material immediately.

You understand that the Site and policies are created and operated to abide by all such rules and regulations and you agree to defend, indemnify and hold POPCUSTOMS harmless from any of your violations of laws and regulation, including but not limited to, intellectual property rights, customers’ privacy rights, etc.

You certify that you: (i) are not controlled, supervised, instructed by POPCUSTOMS and are free from work rules and discipline; (ii) are free to set your own work schedule; (iii) pay your own business expenses, can hire assistants and provide your own office and all associated services, including computer, printing, telephone; (iv) will be reimbursed only for work done in accordance with this Agreement; (v) are allowed to have other clients account.

The following terms and conditions (the “Agreement”) set out the legally binding terms of your participation in the POPCUSTOMS affiliate program (the “Affiliate Program”). The Program is owned and operated by POPCUSTOMS, Inc. (“POPCUSTOMS”). The Program is offered subject to your (the “User” or “you”) acceptance without modification of any of the terms and conditions contained herein and all other operating rules, policies and procedures that may be published occasionally on the POPCUSTOMS.com website (the “Site”) by POPCUSTOMS. If you do not agree with this Agreement, do not use the Program.

You indicate your acceptance of this Agreement and all of the terms and conditions contained or referenced in this Agreement by completing the application process.

1. Affiliate Agreement

The User certifies to POPCUSTOMS that if the User is an individual (i.e., not a company) the User is at least 18 years of age. If the User is a legal entity, you certify that you are an officer of the company or you are otherwise authorized to act on behalf of the company. POPCUSTOMS at its own discretion may limit or terminate the access to or participation in the Program for certain individuals and/or entities, such as but not limited to E-commerce platforms, online marketplaces, and other partners not eligible for joining our Program according to POPCUSTOMS’s determination. The User also certifies that it is legally permitted to use the Program, and takes full responsibility for the selection and use of the Program. This Agreement is void where prohibited by law, and the right to access the Program is revoked in such jurisdictions.

2. Registration & Account

In order to enjoy all the benefits of the Program, the User must register with POPCUSTOMS and become a member. Membership requires that the User registers on the Site (including by filling out all required personal information). The User may opt out of marketing and promotional emails. The User may cancel participation in the affiliate program by deleting POPCUSTOMS account. To complete registration, the User shall provide an email address and a password. The User may never use another’s POPCUSTOMS account without permission from that user. The User is solely responsible for the activity that occurs on the User’s account, and the User must keep its account password secure. The User must notify POPCUSTOMS immediately of any breach of security or unauthorized use of its account. Although POPCUSTOMS will not be liable for the User’s losses caused by any unauthorized use of its account, the User may be liable for the losses of POPCUSTOMS or others due to such unauthorized use.

3. Modifications

POPCUSTOMS reserves the right, at its discretion, to change, modify, suspend or discontinue this Agreement, Program, fees, charges, and terms at any time, including the availability of any feature, or content. POPCUSTOMS may also impose limits on certain features or restrict the User’s access to parts or all of the Program without notice or liability. The User shall be responsible for reviewing and becoming familiar with any such modifications. Use of the Program by the User following such notification constitutes the User’s acceptance of the terms and conditions of changes as modified.

4. Affiliate URL

You will be issued a unique URL once you become an approved User of the Program which will be unique to you only, and will allow you to be paid for affiliate referrals. You can place that URL on your website, emails, blogs, social network advertising, or similar campaigns from an account or platform that is registered in your name or which you are authorized to use. You expressly agree that POPCUSTOMS’s name, trademark, logo or any other identifying material placed by you will appear only in the form and according to technical specification supplied by POPCUSTOMS. POPCUSTOMS, at its sole discretion, may change your URL.

When an affiliate URL is opened, the cookie file is saved in the browser’s cache for 30 days. Customers need to sign up or place an order during this time to be linked with your affiliate account.

5. Restrictions

The User may use the affiliate URL for the sole purpose of promoting POPCUSTOMS and referring prospective customers to the Site. Except to the extent permitted by applicable law, the User shall not (i) send unauthorized (unsolicited commercial) emails or use any illegal method of advertising to promote the POPCUSTOMS products that include the URL, and the User shall be solely liable for any such unauthorized communications (all marketing practices must comply with all applicable laws and regulations); (ii) display the URL in any way that in POPCUSTOMS’s discretion disparages or creates a derogatory or negative image of POPCUSTOMS; (iii) make any false or misleading representations relating to POPCUSTOMS, or engage in any other practices that could harm the reputation of POPCUSTOMS; or (iv) display the URL or any content in a manner that contains or promotes (a) illegal activities or (b) content that is misleading, deceptive, or violates any third-party intellectual property, privacy or other rights of any kind.

You also agree that you are not the target of trade, financial, and economic sanctions, and that you do not appear on a sanctions-related list, including lists maintained by the U.S. Department of Treasury’s Office of Foreign Assets Control (“OFAC”), the U.S. Department of State, the U.S. Department of Commerce, the European Union, or Her Majesty’s Treasury of the United Kingdom. You also agree that you will not promote POPCUSTOMS in and refer prospective customers to the Site from countries or territories that are the target of comprehensive embargoes or sanctions (including Cuba, Iran, Syria, North Korea, and the Crimea region) or parties on the sanctions-related lists referenced above.

6. Customer information

Each customer who visits the Site through your URL must fill out their customer information. All customer information is the sole and exclusive property of POPCUSTOMS and the respective customer. You do not have any right to either (i) participate in any aspect of the information process, or (ii) receive any of the customer’s personal information. This policy prohibits you from receiving customer information directly from customers and subsequently forwarding the customer information to POPCUSTOMS. You may request personal information from customers directly related to your own activities, registrations, promotions, etc., but POPCUSTOMS will never reveal any personally identifying information about customers or a customer applicant.

7. Term & Termination

This Agreement is effective at the time your application is, at the sole discretion of POPCUSTOMS, accepted by POPCUSTOMS and you are notified of such acceptance either in writing or electronically. Either party may terminate this Agreement at any time with or without cause. Upon the termination of this Agreement for any reason, all licenses granted hereunder shall immediately terminate and you will immediately cease use of, and remove all links to the Site, and all POPCUSTOMS trademarks and logos, other marks and all other materials provided in connection with the Program.

POPCUSTOMS reserves the right to delete unconfirmed accounts or accounts that have been inactive for extended periods of time. By violating any applicable law or this Agreement, the Agreement will be terminated immediately and the User understands and agrees that any and all accrued commissions will be immediately forfeit and that the User’s account will be immediately terminated.

8. Release

You release POPCUSTOMS (and its officers, directors, agents, subsidiaries, joint ventures and employees) from claims, demands and damages (actual and consequential) of every kind and nature, known and unknown, arising out of or in any way connected with such disputes. You agree that POPCUSTOMS shall be released from any and all damages resulting from the failure to receive any benefits of an anticipated collaboration.