Privacy Policy

Your privacy and data protection are our highest priorities

Last updated: 7/20/2025

Our Privacy Commitments

Secure & Protected

Your personal information is encrypted, secured, and protected with industry-standard security measures.

Transparent & Clear

We clearly explain what data we collect, how we use it, and give you control over your information.

Your Rights Respected

Complete compliance with GDPR, CCPA, and other privacy laws. You control your data and can request changes anytime.

Privacy Policy

Overview

FAME (First Americans Marketplace Exchange) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our platform. We comply with all applicable privacy laws, including GDPR, CCPA, and Oklahoma state data protection regulations.

Information We Collect

Personal Information

  • Name, email address, phone number, and mailing address
  • Payment information (processed securely through Stripe)
  • Account login credentials and preferences
  • Shipping and billing addresses for order fulfillment

Vendor-Specific Information

  • Business registration details and tax information
  • Tribal affiliation documentation and Indigenous heritage verification
  • Product listings, images, and descriptions
  • Banking information for payment processing

Technical Information

  • IP address, browser type, and device information
  • Website usage patterns and interaction data
  • Cookies and similar tracking technologies
  • Location data (when permitted)

Transaction Information

  • Purchase history and order details
  • Payment processing information
  • Customer support communications
  • Reviews and feedback

How We Use Your Information

Service Provision

  • Process orders, payments, and manage your account
  • Facilitate transactions between buyers and vendors
  • Provide customer support and resolve disputes
  • Generate and manage Certificates of Authenticity

Indigenous Heritage Verification & Legal Compliance

  • Verify tribal affiliation and Indigenous heritage to ensure compliance with the Indian Arts and Crafts Act of 1990
  • Authenticate vendor eligibility to sell Indigenous-made products on our platform
  • Protect against fraudulent misrepresentation of Indigenous authenticity
  • Maintain documentation required by federal law for Indigenous arts and crafts sales
  • Support the integrity of our Certificate of Authenticity system
  • Ensure only verified Indigenous artisans can market products as "Native American-made" or "Indian-made"
  • Preserve cultural authenticity and protect Indigenous intellectual property rights

Platform Improvement

  • Analyze usage patterns to enhance user experience
  • Develop new features and improve existing functionality
  • Prevent fraud and ensure platform security
  • Maintain compliance with legal requirements

Communication

  • Send order confirmations and shipping updates
  • Provide important platform updates and policy changes
  • Send marketing communications (with your consent)
  • Respond to customer service inquiries

How We Share Your Information

Important: We do not sell your personal information to third parties.

Service Providers

  • Stripe: Payment processing and financial transactions
  • Shippo & USPS: Shipping and logistics services
  • Cloud hosting providers: Data storage and platform hosting
  • Email service providers: Communication and marketing emails

Legal Requirements

  • Compliance with court orders, subpoenas, or legal processes
  • Enforcement of our Terms of Service and platform policies
  • Protection against fraud, security threats, or illegal activities
  • Cooperation with law enforcement when required by law

Business Transfers

  • In the event of a merger, acquisition, or sale of assets
  • Users will be notified of any ownership changes
  • Data protection obligations will transfer to the new entity

Data Security

  • Encryption: All data is encrypted in transit and at rest using industry-standard protocols
  • Access Controls: Strict access limitations with multi-factor authentication
  • Regular Audits: Periodic security assessments and vulnerability testing
  • Secure Infrastructure: Data hosted on secure, compliant cloud platforms
  • Employee Training: Regular privacy and security training for all staff
  • Incident Response: Established procedures for data breach notification and response

Your Privacy Rights

Universal Rights

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request removal of your personal data (subject to legal requirements)
  • Opt-out: Unsubscribe from marketing communications

GDPR Rights (EU Residents)

  • Data Portability: Receive your data in a structured format
  • Right to Object: Object to data processing for marketing purposes
  • Restriction: Request limitation of data processing
  • Withdrawal of Consent: Withdraw consent for data processing

CCPA Rights (California Residents)

  • Right to Know: Details about data collection and sharing
  • Right to Delete: Request deletion of personal information
  • Right to Opt-Out: Opt-out of data sharing for advertising
  • Non-Discrimination: Equal service regardless of privacy choices

Cookies and Tracking Technologies

Types of Cookies We Use

  • Essential Cookies: Required for basic platform functionality
  • Performance Cookies: Help us understand how you use our website
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Used to deliver relevant advertisements

Managing Cookies

  • You can control cookies through your browser settings
  • Disabling essential cookies may affect platform functionality
  • You can opt-out of marketing cookies at any time
  • We respect Do Not Track (DNT) browser settings

Data Retention

  • Account Data: Retained while your account is active and for legal/business purposes
  • Transaction Records: Kept for 7 years for tax and accounting purposes
  • Marketing Data: Removed immediately upon opt-out request
  • Support Communications: Retained for 3 years for quality assurance
  • Legal Compliance: Some data may be retained longer to meet legal obligations

Children's Privacy

  • Our platform is not intended for children under 13 years of age
  • We do not knowingly collect personal information from children under 13
  • Users between 13-18 must have parental consent to use our platform
  • If we discover we have collected data from a child under 13, we will delete it immediately

International Data Transfers

  • Your data is primarily stored and processed in the United States
  • We may transfer data to other countries for service provision
  • All international transfers comply with applicable privacy laws
  • Appropriate safeguards are in place to protect your data

Updates to This Policy

  • We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements
  • Significant changes will be announced via email or platform notification
  • Continued use of our platform after updates constitutes acceptance of the revised policy
  • The "Last Updated" date at the top of this policy indicates when it was last modified

Questions About Your Privacy?

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Email: fame.oklahoma@gmail.com

Address: 1011 Colony Drive, Ada, Oklahoma 74820, Pontotoc County

Subject Line: "Privacy Policy Inquiry" for faster response