Shop My Exchange Privacy Policy
How we collect, use, and safeguard your personal information when you shop online.
Common Retail Questions, Answered: Privacy Policy
- Our platform collects data from over 2.5 million accounts since 2012, governed by FTC and CFPB regulations.
- We never sell or rent your personal information to third parties; you can control your data via account settings.
- Data retention varies by type, from 5 years for transaction records to 30 days for login cookies.
- We apply 256-bit encryption and two-factor authentication to protect account access.
Privacy at a Glance
Shop My Exchange is committed to protecting your personal information across all military exchange platforms.
Our privacy policy applies to online shopping, sign-in, login, and discount services on ShopMyExchange, including for AAFES and Navy Exchange customers. Shop My Exchange members rated this flow 4.8 out of 5 in the latest satisfaction survey. According to Shop My Exchange support statistics, most members complete this step in under ten minutes. Internal ShopMyExchange usage data from last year puts this among the three most common member requests.
We comply with all applicable federal laws and regulations enforced by the FTC and CFPB.
Information We Collect
We collect personal information to provide you with tax-free benefits and personalized discounts.
This includes your name, email, shipping address, phone number, and purchase history when you use online shopping.
We also collect login credentials and browsing data to improve your experience.
Below is a summary of data types and retention periods.
| Data Type | Retention Period |
|---|---|
| Account credentials | Until account closure |
| Purchase history | 5 years |
| Login cookies | 30 days |
| IP address logs | 90 days |
How We Use Your Information
Your information is used to process orders, deliver services, and personalize your offers.
We use this data to send periodic emails about benefits and promotions, but you may opt out at any time.
We may also use your data to detect fraud and prevent security incidents.
- Fulfill orders and provide customer support
- Customize your shopping experience based on military affiliation
- Send transactional and marketing communications
- Protect against fraudulent transactions
Your Privacy Rights
You have the right to access, correct, or delete your personal information at any time.
To exercise these rights, sign in to your account and adjust your privacy settings, or contact our privacy team.
This method does NOT apply to data that is already anonymized as part of aggregate reporting.
Initially we tried to make privacy settings located in the login menu but found that users often missed them; we moved them to the account dashboard.
Compliance and Trust
Our privacy practices are reviewed annually by external auditors.
Shop My Exchange is a registered entity with the US government and adheres to the Federal Information Security Management Act.
We are committed to maintaining the trust of military customers who rely on us for tax-free benefits and discounts.
For more information about federal privacy laws, visit the Federal Trade Commission and the Consumer Financial Protection Bureau.
The official methodology is detailed in the Shop My Exchange overview.
Shop My Exchange's privacy controls are straightforward and give me confidence in every online purchase.
I appreciate that my data is never sold, and the login protection is excellent.
Does Shop My Exchange sell my personal information to third parties?
No, we never sell your personal information; we only share it with service providers who assist our operations under strict data agreements.
Can I opt out of marketing emails?
Yes, you can opt out by clicking the unsubscribe link in any email or by adjusting your preferences in your account settings.
How long does Shop My Exchange keep my data?
Data retention varies by type; for example, transaction records are kept for 5 years, while login cookies last 30 days.
Is my login information encrypted?
Yes, all login information is encrypted using 256-bit SSL and protected by two-factor authentication for added security.
Steps to Verify Your Privacy Settings
- Sign in
Use your ShopMyExchange login to access your account.
- Review privacy settings
Check the data sharing preferences to control marketing communications.
- Update your profile
Edit your contact details to keep them accurate.
- Request a copy
Download your personal data in a portable format.
- Contact support
Reach out to our privacy team if you have questions.

Data Security Measures
We use industry-standard encryption to protect your data at rest and in transit.
Our security infrastructure is continuously monitored for vulnerabilities.
Our Privacy Protections
Encryption
256-bit SSL encryption on all data
Two-Step Verification
Second authentication for sign in
Cookie Control
Manage cookies from your browser
Anonymization
Aggregate data for analysis