SAM in USA LLC ("SAM," "we," "us") is committed to protecting the privacy of our business clients and website visitors. This Privacy Policy describes how we collect, use, store, and protect information you provide to us through saminusa.shop and portal.saminusa.shop (collectively, the "Platform"). By using the Platform, you agree to the practices described in this Policy.

This Policy applies to B2B business account holders and their authorized representatives. It does not create consumer privacy rights beyond those required by applicable law.

1. Information We Collect

1.1 Account Registration Information

• Business name, type, and registration details
• Contact person name, title, and business email address
• Business phone number and physical address
• Username and hashed password (we never store your password in readable form)

1.2 Transaction and Order Data

• Purchase orders, order history, invoices, and payment confirmations
• Shipping addresses and delivery instructions
• Product quantities and pricing information
• Payment method type (we do not store full card numbers, bank account numbers, or wire transfer credentials)

1.3 Usage Data

• Pages visited, search queries, products viewed, and catalog browsing activity
• IP address, browser type, operating system, and device identifiers
• Session duration and clickstream data
• Portal feature usage (pallet calculator, customs calculator, saved lists)

1.4 Communications

• Messages sent to us via email, WhatsApp, Telegram, or the portal's messaging feature
• Support tickets, product requests, and customer service communications
• Newsletter subscriptions (opt-in only)

1.5 Automatically Collected Information

We use standard server logs and session cookies to operate the platform. We do not use third-party advertising trackers, Google Analytics, Facebook Pixel, or other cross-site behavioral advertising technologies.

2. How We Use Your Information

• Account management: Creating, maintaining, and securing your portal account
• Order processing: Fulfilling orders, generating invoices, coordinating shipments, and sending confirmations
• Customer service: Responding to inquiries, resolving disputes, and processing claims
• Communication: Sending order updates, shipping notifications, and — if subscribed — promotional newsletters
• Platform improvement: Analyzing usage patterns to improve catalog search, portal features, and user experience
• Legal compliance: Complying with applicable laws, regulations, and court orders; enforcing our Terms and Conditions
• Fraud prevention: Detecting and preventing unauthorized access, fraudulent orders, and abuse

3. AI-Assisted Processing Disclosure

SAM uses the Anthropic Claude API (an artificial intelligence service operated by Anthropic, PBC) to assist with internal operations, including product data enrichment, HS code classification, and automated content generation. When our AI systems process product-related queries, they may interact with our product database — but we do not transmit your personal account data, order history, or business information to Anthropic's API. Only anonymized product data and catalog information is processed through AI tools.

You may receive product descriptions, HS code recommendations, or catalog information that was partially generated using AI assistance. Such content is reviewed by our team but may contain inaccuracies; we recommend independent verification for compliance purposes.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal or business information to any third party. We may share your information only in the following limited circumstances:

• Service providers: We engage trusted third-party vendors to operate the platform, including our web hosting provider (Hostinger), email delivery provider, and payment processors. These vendors are contractually required to protect your data and use it only to provide services to us.
• Freight and logistics: Your shipping address and order details are shared with freight carriers and logistics partners as necessary to fulfill your order.
• Legal requirements: We may disclose information if required by law, court order, subpoena, or government regulation, or to protect the rights, property, or safety of SAM, our clients, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of SAM's assets, your information may be transferred to the successor entity, subject to the same privacy protections.

5. International Data Transfers

SAM is based in the United States. If you are located outside the United States, your information is transferred to and processed in the U.S., where data protection laws may differ from those in your country. By using the Platform, you consent to this transfer. For clients in the European Economic Area (EEA) or the United Kingdom, we rely on Standard Contractual Clauses (SCCs) as the legal basis for international data transfers where required.

6. Data Security

We implement industry-standard technical and organizational security measures to protect your information, including:

• All platform traffic encrypted via HTTPS/TLS
• Passwords stored as one-way BCrypt hashes (cost factor 12) — never readable by our team
• Session-based authentication with automatic 8-hour expiry
• CSRF token protection on all authenticated actions
• API access restricted to production domains only
• Regular automated backups of all data

No method of electronic transmission or storage is 100% secure. While we use best practices to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

7. Data Retention

We retain your account information and order records for as long as your account is active and for a minimum of seven (7) years after your last transaction to comply with U.S. tax, accounting, and commercial record-keeping requirements. You may request deletion of personal data not required for legal compliance by contacting us (see Section 9 below).

8. Cookies and Tracking

The portal uses session cookies strictly necessary to maintain your logged-in state and CSRF security tokens. We do not use persistent tracking cookies, advertising cookies, or third-party analytics cookies.

The main website (saminusa.shop) may use a first-party analytics cookie to understand aggregate traffic patterns. This cookie does not identify you personally and is not shared with any advertising network.

You may disable cookies in your browser settings; however, disabling session cookies will prevent you from logging into the portal.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate personal data (you can update most account information directly in the portal)
• Deletion: Request deletion of personal data not required for legal compliance or active contract performance
• Portability: Request your order and account data in a structured, machine-readable format
• Opt-out: Unsubscribe from marketing emails at any time using the unsubscribe link in any newsletter

California residents have additional rights under the California Consumer Privacy Act (CCPA). EEA/UK residents have rights under GDPR/UK GDPR. To exercise any of these rights, contact us at support@saminusa.shop. We will respond within 30 days.

10. Children's Privacy

Our platform is intended for business use by adults. We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has provided information to us, please contact us immediately.

11. Links to Third-Party Sites

The platform may contain links to third-party websites (e.g., freight carrier tracking pages). This Policy does not apply to those sites, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last Updated" date. For significant changes, we will notify active account holders by email. Continued use of the Platform after notice of changes constitutes your acceptance of the updated Policy.

13. Contact — Privacy Questions

For questions, concerns, or requests related to this Privacy Policy or your personal data, contact our Privacy Officer at: