MRNMarket Seller Privacy / Buyer Data Handling Policy

Effective Date: 27 February 2026

Last Updated: 27 February 2026

Issued by: MRN Global Market LLC, doing business as MRNMarket

Website: https://www.mrnmarket.com

Address: 1001 S Main St, STE 500, Kalispell, MT 59901-1498, United States

Support Contact: support@mrnmarket.com

Legal Contact: legal@mrnmarket.com

1. Purpose of This Policy

This Seller Privacy / Buyer Data Handling Policy explains how Sellers must collect, access, use, store, protect, share, retain, and delete Buyer Personal Data or other User information received through MRNMarket.

This Policy is intended to protect Buyer privacy, support legal compliance, reduce data misuse, prevent fraud, and maintain marketplace trust.

This Policy applies to Sellers, Service Providers acting as Sellers, Seller representatives, employees, contractors, agents, fulfillment providers, support providers, and any person or entity that receives Buyer or User information through the Platform.

2. Relationship With MRNMarket Privacy Policy

MRNMarket’s collection, use, disclosure, storage, and processing of Personal Data is described in the MRNMarket Privacy Policy and related privacy notices.

This Policy applies specifically to how Sellers must handle Buyer Personal Data and other User information received through the Platform.

Sellers must comply with:

1. this Policy;
2. the Privacy Policy;
3. Seller Agreement;
4. Terms & Conditions;
5. Communication Policy;
6. Payment & Payout Policy;
7. Refund & Return Policy;
8. Shipping & Delivery Policy;
9. applicable privacy and data protection laws; and
10. any other applicable MRNMarket policies.

3. Definitions

For purposes of this Policy:

“Buyer Data” means Personal Data, Personal Information, order information, delivery information, communication information, transaction information, or other information about a Buyer or User received through or in connection with MRNMarket.

“Personal Data” or “Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an identifiable person, household, account, or device, as defined under applicable privacy laws.

“Permitted Purpose” means a specific, lawful, Platform-related purpose authorized by MRNMarket policies, such as fulfilling an Order, shipping a Product, providing customer support, processing an approved return, responding to a dispute, complying with legal obligations, or performing a service directly connected to a Platform Transaction.

4. Seller Role and Responsibility

Sellers are responsible for protecting Buyer Data they receive through MRNMarket.

Sellers must:

1. use Buyer Data only for permitted Platform-related purposes;
2. protect Buyer Data from unauthorized access, use, disclosure, alteration, or loss;
3. comply with applicable privacy and data protection laws;
4. limit access to Buyer Data to authorized personnel only;
5. avoid unnecessary collection or retention of Buyer Data;
6. delete or return Buyer Data where required;
7. cooperate with MRNMarket privacy, security, dispute, and compliance requests; and
8. notify MRNMarket of suspected unauthorized access, misuse, loss, or disclosure where required.

Sellers remain responsible for the actions of their employees, contractors, agents, representatives, fulfillment providers, and service providers who access Buyer Data.

5. Permitted Uses of Buyer Data

Sellers may use Buyer Data only for legitimate Platform-related purposes, including:

1. processing and fulfilling Orders;
2. shipping and delivering Products;
3. providing order-related customer support;
4. responding to Buyer questions about an Order;
5. processing returns, refunds, replacements, or exchanges;
6. resolving disputes;
7. cooperating with Buyer Protection review;
8. responding to chargebacks or payment disputes;
9. complying with tax, accounting, legal, customs, or regulatory obligations;
10. preventing fraud or abuse;
11. protecting legal rights;
12. maintaining required business records; and
13. performing obligations under MRNMarket policies.

Sellers must use the minimum Buyer Data reasonably necessary for the permitted purpose.

6. Prohibited Uses of Buyer Data

Sellers must not use Buyer Data for unauthorized, unrelated, deceptive, unlawful, or abusive purposes.

Prohibited uses include:

1. sending marketing messages without proper legal basis and consent where required;
2. adding Buyers to external mailing lists without authorization;
3. selling Buyer Data;
4. renting Buyer Data;
5. sharing Buyer Data with unauthorized third parties;
6. using Buyer Data for unrelated business purposes;
7. using Buyer Data to contact Buyers outside MRNMarket for unrelated sales;
8. requesting prohibited off-platform payments;
9. bypassing MRNMarket policies or fees;
10. harassing, threatening, or pressuring Buyers;
11. manipulating reviews, disputes, refunds, returns, or chargebacks;
12. identity theft;
13. fraud;
14. doxing;
15. profiling Buyers for unrelated purposes;
16. scraping, combining, or enriching Buyer Data for unauthorized purposes;
17. using Buyer Data to advertise competing services;
18. or any use prohibited by MRNMarket policies or applicable law.

7. Marketing Restrictions

Sellers must not use Buyer Data received through MRNMarket for marketing unless:

1. the marketing is expressly permitted by MRNMarket policies;
2. the Seller has a valid legal basis;
3. the Buyer has provided any required consent;
4. the communication complies with applicable marketing, privacy, and anti-spam laws;
5. the Buyer has a clear opt-out method where required;
6. and the communication does not violate MRNMarket policies.

Order-related communications are not permission to send unrelated marketing.

A Buyer purchasing from a Seller through MRNMarket does not automatically authorize the Seller to send external promotional messages.

8. Off-Platform Contact

Sellers must not use Buyer Data to move Transactions, payments, refunds, returns, disputes, or communications outside MRNMarket where prohibited by MRNMarket policies.

Sellers may contact Buyers outside the Platform only where:

1. it is necessary for a permitted Order-related purpose;
2. MRNMarket policies allow it;
3. applicable law allows it;
4. the contact is limited to the permitted purpose; and
5. the Seller does not use the contact to bypass Platform rules.

Transactions conducted outside MRNMarket may not be eligible for Buyer Protection, dispute review, refund review, return review, payout support, delivery confirmation review, or platform-level assistance.

9. Data Minimization

Sellers must collect, access, use, and retain only the Buyer Data reasonably necessary for the permitted purpose.

Sellers must not request unnecessary information from Buyers, including:

1. government identification unless legally required and permitted;
2. payment card numbers;
3. bank account details;
4. passwords;
5. login credentials;
6. tax identification numbers unless required and permitted;
7. health information unless legally required and permitted;
8. biometric information;
9. unrelated personal details;
10. or other sensitive information not necessary for the Transaction.

If sensitive information is required for a lawful purpose, Sellers must handle it with appropriate safeguards and in compliance with applicable law.

10. Data Security Requirements

Sellers must implement reasonable administrative, technical, and organizational safeguards to protect Buyer Data.

Safeguards may include:

1. limiting access to authorized personnel;
2. using secure passwords;
3. enabling multi-factor authentication where available;
4. securing devices and systems;
5. using encrypted or secure storage where appropriate;
6. avoiding unnecessary downloads of Buyer Data;
7. restricting access by employees and contractors;
8. training personnel on privacy and security;
9. protecting printed records;
10. securely transmitting data;
11. monitoring for unauthorized access;
12. promptly disabling access for former personnel;
13. and securely deleting data when no longer needed.

Sellers must not store Buyer Data in unsecured spreadsheets, public folders, personal email accounts, unprotected devices, or unauthorized systems.

11. Sharing Buyer Data With Third Parties

Sellers may share Buyer Data only with third parties who need the information for a permitted purpose, such as:

1. shipping carriers;
2. delivery partners;
3. fulfillment providers;
4. return processing providers;
5. customer support providers;
6. tax or accounting providers;
7. legal advisers;
8. compliance providers;
9. insurance providers where necessary;
10. or other authorized service providers.

Sellers must ensure that any third party receiving Buyer Data:

1. receives only the minimum necessary information;
2. uses the data only for the permitted purpose;
3. protects the data appropriately;
4. does not sell or misuse the data;
5. complies with applicable privacy laws;
6. and complies with any contractual or policy obligations required by MRNMarket or applicable law.

Sellers remain responsible for unauthorized use or disclosure by their service providers where applicable.

12. International Transfers

Sellers must not transfer Buyer Data across borders unless:

1. the transfer is necessary for a permitted purpose;
2. applicable law allows the transfer;
3. appropriate safeguards are used where required;
4. the recipient protects the data appropriately;
5. and the transfer complies with MRNMarket policies.

Sellers are responsible for understanding and complying with applicable international data transfer requirements.

13. Data Retention

Sellers may retain Buyer Data only for as long as reasonably necessary for permitted purposes, including:

1. fulfilling Orders;
2. processing returns or refunds;
3. resolving disputes;
4. responding to chargebacks;
5. complying with tax, accounting, customs, legal, or regulatory obligations;
6. preventing fraud;
7. maintaining required business records;
8. and protecting legal rights.

Sellers must not retain Buyer Data indefinitely unless required by law or necessary for a legitimate legal purpose.

When Buyer Data is no longer needed, Sellers must securely delete, anonymize, or return it where required.

14. Deletion and Return of Buyer Data

MRNMarket may require Sellers to delete, return, restrict, or stop using Buyer Data where:

1. the data is no longer needed;
2. the Buyer exercises a privacy right;
3. the Seller’s account is suspended or terminated;
4. MRNMarket policy requires deletion;
5. legal requirements apply;
6. unauthorized use is suspected;
7. or MRNMarket determines deletion or restriction is necessary to protect Users or the Platform.

Sellers must promptly comply with lawful deletion, restriction, or return requests unless retention is required by applicable law.

15. Buyer Privacy Requests

Buyers may have rights under applicable privacy laws, including rights to access, correct, delete, restrict, object, opt out, or request portability of Personal Data.

If a Seller receives a privacy request relating to Buyer Data obtained through MRNMarket, the Seller must:

1. promptly notify MRNMarket where required;
2. not misrepresent the Seller’s authority;
3. respond only where legally required and authorized;
4. cooperate with MRNMarket;
5. preserve relevant records where appropriate;
6. and not delete records needed for disputes, fraud prevention, legal claims, or compliance unless required by law.

16. Data Incidents and Security Breaches

Sellers must promptly notify MRNMarket if they know or suspect that Buyer Data has been:

1. accessed without authorization;
2. disclosed without authorization;
3. lost;
4. stolen;
5. altered;
6. misused;
7. exposed;
8. compromised;
9. or affected by a security incident.

The notice should include, where available:

1. description of the incident;
2. type of data involved;
3. affected Users or Orders;
4. date or estimated date of incident;
5. cause of incident;
6. steps taken to contain the incident;
7. corrective actions taken;
8. and contact information for follow-up.

Sellers must cooperate with MRNMarket, affected Users, service providers, regulators, law enforcement, and other relevant parties where required or appropriate.

17. Confidentiality

Sellers must treat Buyer Data and nonpublic MRNMarket information as confidential.

Sellers must not disclose confidential information except:

1. as needed for a permitted purpose;
2. to authorized personnel or service providers;
3. as required by law;
4. to professional advisers under confidentiality obligations;
5. or as expressly permitted by MRNMarket.

Confidentiality obligations may continue after a Seller stops using the Platform.

18. Employee, Contractor, and Service Provider Access

Sellers must ensure that employees, contractors, agents, representatives, and service providers with access to Buyer Data:

1. have a legitimate need to access the data;
2. are bound by confidentiality obligations;
3. are trained or instructed on privacy and security obligations;
4. use the data only for permitted purposes;
5. protect the data appropriately;
6. and comply with applicable law and this Policy.

Sellers are responsible for managing and terminating access where appropriate.

19. Prohibited Data Practices

Sellers must not:

1. sell Buyer Data;
2. rent Buyer Data;
3. disclose Buyer Data for unrelated purposes;
4. use Buyer Data for unauthorized marketing;
5. scrape or harvest Buyer Data;
6. combine Buyer Data with external data for unauthorized profiling;
7. use Buyer Data to bypass MRNMarket;
8. request unnecessary sensitive information;
9. store Buyer Data insecurely;
10. share Buyer Data with unauthorized persons;
11. retain Buyer Data longer than necessary;
12. use Buyer Data to harass or threaten Buyers;
13. publish Buyer Data;
14. expose Buyer Data in Listings, reviews, messages, or public areas;
15. or otherwise misuse Buyer Data.

20. Monitoring and Compliance

MRNMarket may review Seller compliance with this Policy where permitted by law and policy.

MRNMarket may request:

1. explanation of data practices;
2. evidence of deletion;
3. security information;
4. service provider information;
5. incident details;
6. privacy compliance documentation;
7. records related to Buyer Data use;
8. or other information needed to assess compliance.

Failure to cooperate may result in Enforcement Actions.

21. Enforcement

MRNMarket may take Enforcement Actions if a Seller violates this Policy, MRNMarket policies, applicable privacy laws, or data protection obligations.

Enforcement Actions may include:

1. warning;
2. request for corrective action;
3. deletion request;
4. restriction of access to Buyer Data;
5. communication restriction;
6. Listing restriction;
7. payout review;
8. payout hold where permitted;
9. Account restriction;
10. Account suspension;
11. Account termination;
12. reporting to regulators, law enforcement, affected Users, Payment Processors, or other relevant parties where permitted or required;
13. record preservation;
14. legal action;
15. and other actions permitted by policy and law.

MRNMarket is not required to take the same action in every case and may consider severity, risk, harm, history, intent, legal obligations, and platform integrity.

22. No Guarantee

MRNMarket may provide policies, tools, controls, and review processes to support privacy and data protection.

However, MRNMarket does not guarantee that all unauthorized use, misuse, disclosure, privacy violations, security incidents, or Seller violations will be detected, prevented, removed, or resolved.

Sellers remain responsible for their own privacy and data handling practices.

23. Relationship With Other Policies

This Policy should be read together with:

1. Terms & Conditions;
2. Privacy Policy;
3. Cookie & Tracking Policy;
4. Seller Agreement;
5. Seller Verification Policy;
6. Communication Policy;
7. Payment & Payout Policy;
8. Refund & Return Policy;
9. Shipping & Delivery Policy;
10. Buyer Protection Policy;
11. Acceptable Use Policy;
12. Platform Rules & Governance Policy;
13. Definitions Policy; and
14. other applicable MRNMarket policies.

If this Policy conflicts with the Terms & Conditions, Privacy Policy, or another controlling MRNMarket policy, the controlling policy will apply, subject to rights that cannot be waived under applicable law.

24. Changes to This Policy

MRNMarket may update this Seller Privacy / Buyer Data Handling Policy from time to time to reflect changes in the Platform, applicable law, privacy requirements, data security practices, marketplace practices, risk controls, operational needs, or other policies.

Updated versions will be published on the Platform with a revised effective date or last updated date.

Continued use of the Platform after updates are published means the Seller acknowledges the updated Policy.

Where required by law, MRNMarket may provide additional notice or request consent for material changes.

25. Contact Information

For questions about this Seller Privacy / Buyer Data Handling Policy, contact:

MRN Global Market LLC

1001 S Main St, STE 500

Kalispell, MT 59901-1498

United States

Website: https://www.mrnmarket.com

Support Contact: support@mrnmarket.com

Legal Contact: legal@mrnmarket.com