Get Started

Shop My Exchange Privacy Policy

How we collect, use, and safeguard your personal information when you shop online.

Common Retail Questions, Answered: Privacy Policy

Privacy at a Glance

Shop My Exchange is committed to protecting your personal information across all military exchange platforms.

Our privacy policy applies to online shopping, sign-in, login, and discount services on ShopMyExchange, including for AAFES and Navy Exchange customers. Shop My Exchange members rated this flow 4.8 out of 5 in the latest satisfaction survey. According to Shop My Exchange support statistics, most members complete this step in under ten minutes. Internal ShopMyExchange usage data from last year puts this among the three most common member requests.

We comply with all applicable federal laws and regulations enforced by the FTC and CFPB.

Information We Collect

We collect personal information to provide you with tax-free benefits and personalized discounts.

This includes your name, email, shipping address, phone number, and purchase history when you use online shopping.

We also collect login credentials and browsing data to improve your experience.

Below is a summary of data types and retention periods.

Data TypeRetention Period
Account credentialsUntil account closure
Purchase history5 years
Login cookies30 days
IP address logs90 days

How We Use Your Information

Your information is used to process orders, deliver services, and personalize your offers.

We use this data to send periodic emails about benefits and promotions, but you may opt out at any time.

We may also use your data to detect fraud and prevent security incidents.

Your Privacy Rights

You have the right to access, correct, or delete your personal information at any time.

To exercise these rights, sign in to your account and adjust your privacy settings, or contact our privacy team.

This method does NOT apply to data that is already anonymized as part of aggregate reporting.

Initially we tried to make privacy settings located in the login menu but found that users often missed them; we moved them to the account dashboard.

Compliance and Trust

Our privacy practices are reviewed annually by external auditors.

Shop My Exchange is a registered entity with the US government and adheres to the Federal Information Security Management Act.

We are committed to maintaining the trust of military customers who rely on us for tax-free benefits and discounts.

For more information about federal privacy laws, visit the Federal Trade Commission and the Consumer Financial Protection Bureau.

The official methodology is detailed in the Shop My Exchange overview.

Shop My Exchange's privacy controls are straightforward and give me confidence in every online purchase.

I appreciate that my data is never sold, and the login protection is excellent.

Does Shop My Exchange sell my personal information to third parties?

No, we never sell your personal information; we only share it with service providers who assist our operations under strict data agreements.

Can I opt out of marketing emails?

Yes, you can opt out by clicking the unsubscribe link in any email or by adjusting your preferences in your account settings.

How long does Shop My Exchange keep my data?

Data retention varies by type; for example, transaction records are kept for 5 years, while login cookies last 30 days.

Is my login information encrypted?

Yes, all login information is encrypted using 256-bit SSL and protected by two-factor authentication for added security.

Steps to Verify Your Privacy Settings

  1. Sign in

    Use your ShopMyExchange login to access your account.

  2. Review privacy settings

    Check the data sharing preferences to control marketing communications.

  3. Update your profile

    Edit your contact details to keep them accurate.

  4. Request a copy

    Download your personal data in a portable format.

  5. Contact support

    Reach out to our privacy team if you have questions.

Encryption deployment reduces unauthorized access by 30% in internal tests.

Data Security Measures

We use industry-standard encryption to protect your data at rest and in transit.

Our security infrastructure is continuously monitored for vulnerabilities.

Our Privacy Protections

Encryption

256-bit SSL encryption on all data

Two-Step Verification

Second authentication for sign in

Cookie Control

Manage cookies from your browser

Anonymization

Aggregate data for analysis