SECTION 3.1.3: DATA SHARING, SUB-PROCESSORS & CROSS-BORDER TRANSFERS

Visit Marketplace
Section 3.1.3: Data Sharing, Sub-processors & Cross-Border Transfers
Governing standards for third-party disclosures, international transfers, and courier DPAs.
Category: Privacy Policy Clause: CLAUSE-3.1.3 Ref Code: PRIV-313-DATA-TRANSFER Tier 3 (High Severity)
Compliance Safe & Safe Harbor Shielded

1. Section Scope & Legal Intent

Regulates the onward transmission of personal data to third-party logistics partners, payment processors, cloud hosting vendors, and international customs authorities under Standard Contractual Clauses (SCCs).

2. Mandatory Standards & Operating Requirements

All participants subject to this policy must strictly adhere to the following mandatory standards:

  • Personal data is shared only on a strict need-to-know basis: delivery information is transmitted solely to the assigned courier for fulfillment.
  • All third-party sub-processors must execute binding Data Processing Agreements (DPAs) guaranteeing equivalent confidentiality and security standards.
  • Cross-border data transfers outside the originating jurisdiction comply with recognized adequacy decisions or approved transfer mechanisms.

3. Explicit Prohibitions & Violation Triggers

The following actions constitute direct non-compliance and trigger automatic intervention by the Warning and Violation System:

  1. Sellers or agencies exporting buyer personal databases outside the marketplace environment for unapproved third-party processing.
  2. Disclosing buyer payment card data, phone numbers, or residential addresses to unauthorized sub-contractors.
  3. Violating cross-border statutory data localization requirements.

4. Warning & Violation System Enforcement Matrix

Each violation under this section is mapped directly to the automated warning and sanction ladder:

Violation Code Offense Description Detection Method Severity Tier Cure Window Mandatory Sanction
VIOL-313-01 Unauthorized export or leak of buyer shipping databases. Data Loss Prevention (DLP) Audit Tier 4 (Critical) Immediate Lifetime platform ban, legal notification to supervisory authorities, civil indemnity claims.
VIOL-313-02 Transferring fulfillment data to unapproved, non-compliant courier software. API Partner Integration Audit Tier 2 (Moderate) 48 Hours Revocation of third-party shipping API integration access.
VIOL-313-03 Failure to sign mandatory Sub-Processor DPA by enterprise seller. Legal Compliance Gatekeeper Tier 1 (Advisory) 5 Days Temporary restriction on bulk order export capabilities.

5. Platform Safe Harbor & Limitation of Liability

Platform Intermediary Status: ePaisay provides the technological marketplace venue connecting independent counterparties. ePaisay is not a vendor, retailer, agent, or guarantor of any product, service, or transaction governed herein.

Total Disclaimer of Warranties: The platform disclaims all warranties of merchantability, fitness for particular purpose, and non-infringement to the fullest extent permissible by applicable law.

Limitation of Damages: In no event shall ePaisay, its officers, directors, or employees be liable for incidental, indirect, punitive, or consequential damages. Aggregate liability is strictly capped at the lesser of $100 USD or platform fees paid in the preceding three months.

Participant Indemnification: The participant agrees to defend, indemnify, and hold harmless ePaisay against any third-party claims, regulatory penalties, legal fees, or damages arising out of violations of this Section.

Last updated: Oct 01, 2025