Privacy Policy

This Privacy Policy explains what Weldon Hastings d/b/a WeldonPC.com (“we”, “us”) collects when you use Shelf2Shelf, why we collect it, who we share it with, and what you can ask us to do with it.

1. Information you give us

• Account: name, username, email address, password (stored only as a salted hash — we never see or store your plaintext password), and the ZIP code used to confirm you are in our service area.
• Profile and listings: display name, avatar, item descriptions and photographs you upload.
• Transactions: shipping and pickup addresses, phone number where you provide one, order and bid history, and messages you exchange with other users through the site.
• Seller verification: if you sell, we may need identity or business documents to satisfy payment and anti-fraud obligations. Verification documents are encrypted at rest and are stored outside the public web root.
• Support: anything you send us in a support request or feedback submission.

2. Information collected automatically

• Session cookies needed to keep you signed in and to protect forms against cross-site request forgery. These are strictly necessary; the site cannot function without them.
• Technical data: IP address, browser user-agent, and pages requested, recorded in server logs and used for security, abuse prevention and debugging.
• Login attempts: recorded to rate-limit brute-force attacks.
• Push notifications: only if you opt in, we store the browser subscription needed to deliver them.

We do not use advertising trackers or third-party analytics profiling on this site.

3. Why we use it

• To create and operate your account and show your listings.
• To process payments, payouts and refunds.
• To send transactional email you need — email verification, password resets, bid and outbid notices, auction results, and order updates.
• To prevent fraud, abuse and unauthorised access, and to meet legal obligations.
• To respond to your support requests.

We do not send marketing email unless you have opted in, and every marketing email includes a way to unsubscribe.

4. Who we share it with

We do not sell your personal information. We share it only as follows:

• Stripe processes payments and seller payouts, and receives the transaction and identity data needed to do so. Stripe handles that data under its own policy — see the Stripe Privacy Policy. We do not collect or store full card numbers.
• Other users, only as needed to complete a transaction: a buyer and seller see each other’s display name, and the delivery address is shared with the seller (and with a driver, if driver delivery is used) so the item can reach you.
• Service providers who host the site and deliver email on our behalf.
• Legal: where we are required to disclose by law, or to protect the rights, property or safety of our users or the public.

5. How long we keep it

• Account and transaction records are kept while your account is open and afterwards as needed for tax, accounting and dispute-resolution purposes.
• Queued email records, which can contain order details, are pruned automatically after 30 days.
• Session records expire and are cleaned up automatically.
• Server logs are rotated on a routine schedule.

6. Security

The site is served over HTTPS only, with HSTS. Passwords are hashed. Session and CSRF cookies are marked Secure and HttpOnly. Verification documents are encrypted at rest. Access to production systems is restricted. No system is perfectly secure, so we cannot guarantee absolute security, but we take these measures seriously and review them.

If a breach affecting your personal information occurs, we will notify affected users, consistent with Ohio’s breach-notification law (Ohio Rev. Code § 1349.19), which requires notice within 45 days of discovery.

7. Your choices and rights

Ohio does not currently have a comprehensive consumer data-privacy statute, so many of the rights you may have read about apply to residents of other states. We nevertheless offer the following to every user, wherever you live:

• Access: ask us what personal information we hold about you.
• Correction: update your details in your account, or ask us to correct them.
• Deletion: ask us to close your account and delete your personal information. We may need to retain records of completed transactions for tax, accounting and fraud-prevention purposes.
• Email preferences: opt out of non-essential email at any time. Transactional messages about your own orders cannot be switched off while your account is active.
• Push notifications: revoke permission in your browser at any time.

To exercise any of these, email support@shelf2shelf.com from the address on your account.

8. Children

Shelf2Shelf is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

9. Changes

We may update this policy. Where a change is material we will give reasonable notice. The effective date is shown at the top of this page.

Advertising

The Service is supported by on-site advertising served by AdEngine (adengine.us), an advertising platform operated by the same operator as this Service. Ad requests share your IP address and browser user-agent with AdEngine for the purposes of ad delivery, frequency capping and fraud prevention. AdEngine does not build cross-site behavioural profiles and does not sell your personal information. Ad impressions and clicks are counted in aggregate.

10. Contact

Weldon Hastings d/b/a WeldonPC.com
Email: support@shelf2shelf.com