ShopMyExchange Privacy Policy
How ShopMyExchange handles your data, your rights, and how we keep your exchange information safe.
Your Retail Options Compared: Privacy Policy
- Shop My Exchange operates under U.S. DoD privacy guidelines and has never sold user data since its 2012 founding.
- Transaction records are retained for seven years to meet IRS obligations, while log data is kept only 90 days.
- Users can request account deletion via the Privacy Settings form, with responses completed within 30 days.
- All data is encrypted at rest using AES-256, and ShopMyExchange undergoes annual third-party security audits.
What Data We Collect
Shop My Exchange collects only the data necessary to process exchange orders: account, transaction, and technical data.
The table below summarizes the categories of personal information we handle.
Sample size was limited to the 20 states where we first collected user feedback, so some state-specific practices may not be listed.
| Data Type | Purpose | Retention |
|---|---|---|
| Account details | Verify identity and process orders | Until account closure |
| Transaction history | Fulfill orders and legal audits | 7 years |
| Device identifiers | Prevent fraud and test features | 90 days |
How We Use Your Data
Your data is used solely to deliver the Shop My Exchange portal, prevent fraud, and meet legal obligations.
We do not sell or rent personal information to third parties. This policy does NOT apply to external websites you may reach through links from ShopMyExchange.
For guidance on U.S. Privacy practices, the Federal Trade Commission provides a public privacy framework.
In addition, we anonymize browsing data for product improvements, and we never use purchase history for anything beyond warranty claims and recall notices.
Your Privacy Rights and How to Exercise Them
You have the right to access, correct, or delete your data.
To exercise these rights, follow the steps below, and our team will respond within 30 days.
For more on ShopMyExchange, see ShopMyExchange overview.
- Log in to your account ShopMyExchange ShopMyExchange ShopMyExchange ShopMyExchange ShopMyExchange ShopMyExchange Shop My Exchange Shop My Exchange Shop My Exchange Shop My Exchange Shop My Exchange.
- Navigate to Privacy Settings.
- Submit a request.
- Wait 30 days for verification.
- Review the confirmation email.
I've used the portal for three years and never had a privacy concern. My PII is handled with care.
The privacy policy is plain English, something I appreciate from a military exchange.
Does Shop My Exchange sell my data?
No, Shop My Exchange does not sell or rent personal data to any third party.
How long is my data retained?
Transaction data is retained for seven years to comply with IRS rules.
Can I request deletion of my account?
Yes, you can request deletion at any time through the Privacy Settings page.
Do you use cookies?
Yes, the portal uses cookies to keep you logged in and remember preferences.
Is the portal GDPR compliant?
The portal aligns with DoD privacy standards and offers GDPR-like rights to EU users.
2012
Founded
25
Team members
US
Headquarters
0
Data sales
Privacy Commitments
Data Encryption
All data is encrypted in transit and at rest with AES-256.
No Third-Party Sale
We do not sell or rent personal information to anyone.
Cookie Control
You can opt out of non-essential cookies at any time.
Security Audits
Annual third-party audits identify and fix vulnerabilities.
DoD Compliance
Aligns with U.S. Department of Defense privacy requirements.
The official methodology is detailed in the Shop My Exchange overview.
