1. Section Scope & Legal Intent
2. Mandatory Standards & Operating Requirements
All participants subject to this policy must strictly adhere to the following mandatory standards:
- Personal data is shared only on a strict need-to-know basis: delivery information is transmitted solely to the assigned courier for fulfillment.
- All third-party sub-processors must execute binding Data Processing Agreements (DPAs) guaranteeing equivalent confidentiality and security standards.
- Cross-border data transfers outside the originating jurisdiction comply with recognized adequacy decisions or approved transfer mechanisms.
3. Explicit Prohibitions & Violation Triggers
The following actions constitute direct non-compliance and trigger automatic intervention by the Warning and Violation System:
- Sellers or agencies exporting buyer personal databases outside the marketplace environment for unapproved third-party processing.
- Disclosing buyer payment card data, phone numbers, or residential addresses to unauthorized sub-contractors.
- Violating cross-border statutory data localization requirements.
4. Warning & Violation System Enforcement Matrix
Each violation under this section is mapped directly to the automated warning and sanction ladder:
| Violation Code | Offense Description | Detection Method | Severity Tier | Cure Window | Mandatory Sanction |
|---|---|---|---|---|---|
VIOL-313-01 |
Unauthorized export or leak of buyer shipping databases. | Data Loss Prevention (DLP) Audit | Tier 4 (Critical) | Immediate | Lifetime platform ban, legal notification to supervisory authorities, civil indemnity claims. |
VIOL-313-02 |
Transferring fulfillment data to unapproved, non-compliant courier software. | API Partner Integration Audit | Tier 2 (Moderate) | 48 Hours | Revocation of third-party shipping API integration access. |
VIOL-313-03 |
Failure to sign mandatory Sub-Processor DPA by enterprise seller. | Legal Compliance Gatekeeper | Tier 1 (Advisory) | 5 Days | Temporary restriction on bulk order export capabilities. |
5. Platform Safe Harbor & Limitation of Liability
Platform Intermediary Status: ePaisay provides the technological marketplace venue connecting independent counterparties. ePaisay is not a vendor, retailer, agent, or guarantor of any product, service, or transaction governed herein.
Total Disclaimer of Warranties: The platform disclaims all warranties of merchantability, fitness for particular purpose, and non-infringement to the fullest extent permissible by applicable law.
Limitation of Damages: In no event shall ePaisay, its officers, directors, or employees be liable for incidental, indirect, punitive, or consequential damages. Aggregate liability is strictly capped at the lesser of $100 USD or platform fees paid in the preceding three months.
Participant Indemnification: The participant agrees to defend, indemnify, and hold harmless ePaisay against any third-party claims, regulatory penalties, legal fees, or damages arising out of violations of this Section.