Data Policies

We're pretty open about how we collect and use data. Here's exactly what we do and don't do.

• Bad Customer does not store payment information, or information about what specific products were purchased. Our system stores only stores only the amount of the chargeback, the customer e-mail address, and the billing and shipping details provided for the charged-back order.
• Customer names, email addresses, and physical addresses are not shared with users, sellers, or third party agencies, and cannot be made available by request.
• To prevent abuse, chargeback data is collected directly from payment processors and eCommerce platforms, and cannot be manually added or edited by sellers. Data is discarded after two years.
• Customers who provide proof of legal ownership or tenancy reserve the right to opt out of the BadCustomer.org database. If a customer has opted out, our API will return an OPTOUT status when their address or email is queried.

Security Incident Response Policy

While the data we collect is limited, any individual who suspects that a theft, breach, or exposure of customer data must immediately describe what happened via email sent to [email protected].

Our IT/Data team will be responsible for ensuring that notification and communication both internally and with third parties (customers, vendors, law enforcement, etc.) based on legal, regulatory, and contractual requirements take place in a timely manner. All Information concerning an incident is considered confidential, and at no time should any information be discussed with anyone outside of our company without approval of executive management and our legal counsel.

Questions & Feedback

We welcome your questions, comments, and concerns about privacy. Please send us any and all feedback pertaining to privacy, or any other issue.