PRIVACY POLICY
Accessory Power Privacy Policy
Last updated: October 2, 2026
AP Global, Inc. d/b/a Accessory Power (“Accessory Power,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, secure, and retain personal information when you use our websites (including https://www.accessorypower.com and our brand sites), contact us by email, web forms, live chat, or telephone, purchase our products, or otherwise interact with us (together, the “Services”).
We operate a separate online store at https://store.accessorypower.com, which is hosted by Shopify. Only customers who voluntarily use that site—such as to make direct purchases, register a warranty, request a return or exchange, or contact product support—have their information processed by Shopify. Marketplace order information obtained from Amazon, Walmart, eBay, or other platforms is never sent to or processed through Shopify.
This Policy also includes (1) a California Notice at Collection and Privacy Notice and (2) an Additional Information for EEA/UK/Swiss Residents section to address requirements under the EU/UK General Data Protection Regulation (“GDPR”) and ePrivacy rules. If any part of this Policy conflicts with local law, we will comply with applicable law.
If you have a disability and need this Policy in an alternative format, contact us at support@accessorypower.com.
Contents
1) Personal Information We Collect
a) Information you provide to us
Contact details (e.g., name, email address, phone number, billing/shipping address)
Account, warranty registration and product information
Order, invoicing, and customer service communications (including recordings of calls or chat transcripts where permitted by law)
Preferences and any content you submit through forms or support tickets
b) Information we collect automatically
Device and usage data (e.g., IP address, device identifiers, browser type, pages viewed, referring/exit pages, and timestamps)
Cookie and similar technology data (see Cookies & Similar Technologies)
c) Information from third parties
Payment processors (limited payment information; we do not store full card numbers)
Fulfillment and logistics partners
Marketplace platforms (Amazon, Walmart, eBay) to the extent needed to fulfill merchant-fulfilled orders—see platform-specific sections below.
We do not import, upload, or transfer any marketplace customer data (including Amazon, Walmart, eBay, or other marketplace buyer information) into Shopify. Marketplace customer PII remains entirely segregated and is processed only as required by each marketplace’s rules.
2) How We Use Personal Information
Provide, operate, secure, and improve the Services
Process orders, payments, shipments, returns, and warranty claims
Communicate with you about your account, orders, and requested support
Maintain business records, accounting, tax, and compliance
Analyze Service performance and troubleshoot
With your consent where required (e.g., for non-essential cookies/analytics in the EEA/UK/CH)
Marketplace buyer personal information (Amazon, Walmart, eBay) is used only to fulfill orders and required program/legal obligations—not for advertising or marketing. Shopify analytics, tracking technologies, and Network Intelligence features apply only to visitors of https://store.accessorypower.com and never to customers whose orders originate from Amazon, Walmart, eBay, or any other marketplace. Marketplace order data is excluded from all Shopify analytics, tracking, and customer insight features.
3) Amazon Selling Partner API (SP-API) Data
When we access Amazon Information (including Amazon customer personal information) to fulfill FBM/MFN orders, we follow Amazon’s Data Protection Policy and related security requirements. We commit to:
Purpose limitation: Use Amazon Information only to fulfill orders, remit taxes, produce legally required documents, and meet legal requirements.
Retention: Delete Amazon customer PII no later than 30 days after order delivery. If required by law to keep records, we retain only encrypted, offline (“cold”) archives until the legal retention period ends, after which we delete them.
No marketing: Do not use Amazon customer PII for advertising or any marketing purpose.
Encryption: Protect Amazon Information in transit (e.g., TLS 1.2+) and at rest (e.g., AES-128/256 or RSA-2048+). Keys are access-controlled.
Access controls: Unique user IDs, least-privilege access, quarterly access reviews, account lockout on anomalous activity; no storage on personal devices or public links.
Logging & monitoring: Maintain security logs (without PII) for at least 90 days; monitor and alert on suspicious activity.
Vulnerability management: Code scans prior to release; vulnerability scans/penetration testing at least every 180 days; timely patching.
Incident response: Maintain an incident response plan; notify Amazon as required; cooperate with audits and remediation.
For clarity, “Amazon Information” has the meaning given by Amazon’s policies.
4) Walmart Marketplace API Data
When we access Walmart Marketplace APIs or receive Walmart data to fulfill orders, we comply with the Walmart API License Agreement and its Information Security Addendum. In particular, we commit to:
Purpose limitation: Use Walmart data only as necessary to provide services permitted under the Walmart agreements (e.g., order fulfillment, taxes, required documents).
Retention & deletion: Delete Walmart personal information when it is no longer necessary for the purpose collected (and in any case we apply our internal standard to delete marketplace buyer PII within 30 days after order delivery, unless a longer period is required by law). We will also support Walmart-directed data subject requests.
No unsolicited communications: Do not use Walmart personal information to send or enable unsolicited communications or marketing.
Encryption: Transmit data using strong TLS (equivalent to or stronger than 128‑bit SSL) and protect data at rest.
Access controls & scopes: Use unique credentials; protect API keys; and request only the minimum OAuth scopes necessary.
Security program: Maintain an information security program aligned to recognized standards (e.g., NIST/ISO), and maintain certifications/assessments as required.
Monitoring & audits: Maintain logs and cooperate with Walmart’s monitoring/audit requests.
Incident response: Notify Walmart and cooperate per the Walmart Information Security Addendum.
Sensitive data: Do not upload/store Sensitive Personal Information in Walmart API data stores.
5) eBay API Data
When we access eBay APIs or receive eBay data to fulfill orders, we comply with the eBay Developers Program Terms of Use & API License Agreement and related Data Protection guidance. In particular, we commit to:
Purpose limitation: Use eBay Personal Information only to facilitate eBay Services (e.g., order and customer support) as permitted by the API License Agreement and our posted privacy policy.
Retention & deletion: Promptly delete Personal Information when (i) requested by eBay or the user, (ii) no longer necessary for the specific legitimate purpose, or (iii) upon termination of access; and in any case we apply our internal standard to delete marketplace buyer PII within 30 days after order delivery, unless a longer period is required by law.
No unsolicited communications: Do not use eBay Personal Information to send unsolicited communications; contact only Your Users or as initiated by Your Users consistent with eBay rules.
Encryption: Encrypt or hash sensitive data in transit and at rest using NIST-recommended algorithms (e.g., TLS 1.2+).
Access controls: Protect keys/tokens; do not collect or store eBay user IDs/passwords; follow least-privilege.
Monitoring & audits: Cooperate with eBay’s monitoring and audit requests and provide information/certifications as required.
DPA & international transfers: Adhere to eBay’s DPA (including SCCs/UK addendum as applicable) for any cross-border transfers.
AI/derivation limits: Do not use eBay content or Personal Information to train AI or derive restricted insights except as expressly permitted by eBay.
6) Shopify Data
We use Shopify to operate our direct-to-consumer online store at https://store.accessorypower.com. Shopify processes information only for users who actively engage with that store—for example, by placing an order, registering a product, submitting a warranty claim, requesting a return or exchange, or contacting customer support through the Shopify-hosted interface.
Shopify may collect device information, usage data, and necessary transaction information to operate the store, detect fraud, maintain platform security, and provide analytics or performance insights. You can review Shopify’s own privacy practices at: https://www.shopify.com/legal/privacy.
No marketplace customer PII is ever transmitted to, stored in, or processed within Shopify.
7) Cookies & Similar Technologies
We use cookies and similar technologies for essential site functionality and analytics.
United States (including California): We limit analytics to measurement and improvement. You may manage cookies through your browser settings and our cookie controls (where available).
EEA/UK/Switzerland: We do not set non-essential cookies (including analytics) unless you opt-in through our cookie banner or preferences center. You may withdraw consent at any time via the same controls.
Cookies and tracking used by Shopify apply only on https://store.accessorypower.com. These cookies do not run on our marketplace sales channels and are not applied to marketplace customer data.
For details (names, providers, purposes, and lifetimes), see our Cookie Policy.
8) How We Disclose Information
We share personal information with:
Service providers (e.g., payment processors, hosting, analytics, logistics, customer support tools) under contracts that restrict use to providing services to us
Government, law enforcement, or regulators when required by law
Business transfers (e.g., merger, acquisition) consistent with this Policy
We do not sell or share personal information as “sell” or “share” are defined by California law. We do not use or disclose Sensitive Personal Information for purposes requiring a “Limit the Use of My Sensitive Personal Information” link.
We disclose information to Shopify only for customers who voluntarily engage with our Shopify store. Shopify does not receive, access, or process marketplace customer information from Amazon, Walmart, eBay, or other third-party platforms.
9) SMS/Text Messaging
If you join the Accessory Power VIP Club and provide your mobile number, you agree to receive recurring automated informational text messages from Accessory Power (AP Global, Inc.) about your VIP Club membership and your orders, such as membership confirmations and shipping and delivery updates. We do not send marketing or promotional text messages. Message frequency varies. We collect your mobile number and a record of your consent and use them only to send these text messages.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories of information sharing described in this Policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.
Consent to receive text messages is not a condition of any purchase. Message and data rates may apply. Reply HELP for help or STOP to cancel at any time. After you reply STOP, you will receive one confirmation message and no further texts unless you opt in again. For assistance, email support@accessorypower.com.
10) Your Privacy Rights & Choices
Global Privacy Control (GPC)
If we ever engage in selling or sharing personal information, we will honor browser/device Global Privacy Control signals as a valid opt-out. Because we do not sell or share personal information today, GPC has no effect on our Services.
Access, deletion, correction, and portability
Subject to legal limits, you may request access to, deletion of, correction of, or a portable copy of your personal information.
How to make a request
Submit a privacy request by emailing privacy@accessorypower.com. You may also use the web form, live chat, or telephone contact options on our website. We will verify your identity and respond within the time required by law. Authorized agents may submit requests subject to verification.
We will not discriminate against you for exercising your rights.
11) Data Retention
We keep personal information only as long as necessary for the purposes described, including to meet legal, tax, accounting, or security obligations. Illustrative retention periods:
Account and order records (non-marketplace): typically 7 years (tax and accounting)
Customer support records: typically 3 years after last interaction
Warranty records: for the warranty term plus 2 years
Website logs: typically 90–365 days (security and operations)
Marketplace buyer PII (Amazon/Walmart/eBay): deleted within 30 days after order delivery; any legal-required archives are encrypted and maintained offline until no longer required
When retention ends, we delete or de-identify information.
12) Security
We use administrative, technical, and physical safeguards to protect personal information, including encryption in transit and at rest, access controls, logging/monitoring, vulnerability management, least-privilege, and employee training. No system is 100% secure; if we learn of a security incident that affects your information, we will notify you and regulators as required by law.
13) Children’s Privacy
Our Services are not directed to children and we do not knowingly collect personal information from children under 16. If you believe a child provided us information, contact support@accessorypower.com and we will delete it where required by law.
14) International Data Transfers
If you are located outside the United States, your personal information may be processed in the U.S. and other countries that may have different data protection laws than your country of residence. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect cross-border transfers.
15) California Residents (Notice at Collection & Privacy Notice)
We collect the categories of personal information listed below for the purposes and from the sources described in this Policy. We do not sell or share personal information and we do not use/disclose Sensitive Personal Information for purposes that require a “Limit SPI” link.
If you interact with us through our Shopify store, certain data may be considered “sharing” for limited analytics purposes under California law. This applies only to Shopify-store users and not to marketplace customers. Marketplace customer data is never shared with Shopify.
Category (Cal. Civ. Code §1798.140) | Examples | Sources | Business Purposes | Disclosed to |
Identifiers | name, email, phone, IP address, postal address, order ID | you; your devices; service providers; marketplaces (e.g., Amazon/Walmart/eBay) | provide Services; fulfill orders; customer support; security; compliance | service providers (payments, hosting, logistics, support); government if required |
Customer records | account/profile, billing/shipping, order history | you; marketplaces; service providers | fulfillment, customer service, accounting/tax | service providers; government if required |
Commercial info | products purchased, cart and warranty data | you; your devices | fulfill orders; analytics (U.S.) with minimal identifiers | service providers |
Internet/technical | device info, logs, cookie IDs | your devices; analytics | security/operations; analytics (with consent in EEA/UK/CH) | service providers (hosting/analytics) |
Geolocation (approx.) | derived from IP | your devices | security/fraud prevention; content localization | service providers |
Inferences | basic preferences from interactions | derived from above | improve Services | service providers |
Retention: See Data Retention above.
Your California Rights: know/access, delete, correct, portability, non-discrimination, and to opt-out of “sale”/“sharing” (not applicable because we do not sell/share).
How to Exercise: email, web form, live chat, or phone via our website contact options, or privacy@accessorypower.com. Authorized agents may use the same methods with proof of authority.
16) EEA/UK/Swiss Residents (GDPR)
Controller: Accessory Power (AP Global, Inc.). Contact:privacy@accessorypower.com.
Purposes & Legal Bases
Purpose | Legal Basis |
Provide the Services, fulfill orders, customer support | Contract (Art. 6(1)(b)) |
Accounting, tax, legal obligations | Legal obligation (Art. 6(1)(c)) |
Security, fraud prevention, and service improvement | Legitimate interests (Art. 6(1)(f)) — balanced against your interests |
Analytics (non-essential cookies) | Consent (Art. 6(1)(a)) |
Your GDPR Rights: access, rectification, erasure, restriction, portability, and objection; withdraw consent at any time (does not affect lawfulness before withdrawal); lodge a complaint with your local supervisory authority.
International Transfers: where required, we use Standard Contractual Clauses or other lawful mechanisms.
Data Required/Consequences: certain information is required to fulfill orders; failure to provide may prevent us from completing a transaction.
17) Changes to this Policy
We may update this Policy from time to time. We will post the updated version with a new “Last updated” date and take additional steps if required by law.
18) Contact Us
For privacy questions or to exercise your privacy rights, email privacy@accessorypower.com. For other questions, email support@accessorypower.com or use the contact options on our website. Mailing address: AP Global, Inc. (dba Accessory Power), Attn: Privacy, 2326 Townsgate Rd., Westlake Village, CA 91361.
This Privacy Policy is provided for transparency and does not create contractual rights or obligations except as required by law.