This policy explains how Nature’s Warehouse LLC handles information in the NW / MS Console, a login-protected application for authorized employees and contractors.
Effective September 9, 2026
Who this application is for
NW / MS Console supports internal customer service, warehouse, delivery, workforce, payroll, communication, and administrative work for Nature’s Warehouse and The Motherhood Shop. It is not intended for public customer accounts or for children.
Information the application handles
Depending on an authorized user’s job and permissions, the application may handle:
- employee identity, role, attendance, time-off, payroll profile, reimbursement, withholding, and employee-document information;
- customer and business records such as names, contact details, delivery addresses, orders, subscriptions, transaction status, support tickets, messages, and operational notes;
- practitioner appointment details, intake information, health concerns, and consultation notes, including sensitive information a client provides for a consultation, accessible according to the user's assigned permissions;
- warehouse, inventory, receiving, picking, packing, route, vehicle, and proof-of-delivery information;
- photos, receipt images, attachments, delivery signatures, and files that a user chooses to capture, upload, download, print, open, or share;
- microphone and calling information when a user uses the work softphone;
- precise foreground location while an authorized driver is actively using route-location features; and
- device, session, application-version, network-status, security, and diagnostic information needed to operate and protect the service.
The application does not sell personal information or use it for advertising. Full payment-card and bank-account numbers are sent directly through approved payment workflows and are not stored in the application bundle or ordinary application logs.
How information is used
Information is used only for legitimate business purposes: authenticating and authorizing employees; serving customers; fulfilling and delivering orders; managing inventory and warehouse work; processing approved workforce and payroll requests; supporting work calls and internal communication; creating audit records; preventing misuse; troubleshooting; and meeting legal or operational obligations.
Permissions and user choices
Camera, microphone, and location capabilities are used only for relevant work features. Users can decline a device permission, although the related feature may then be unavailable. Foreground route location stops when its route session ends or the user logs out. The application does not request background location. Files explicitly saved to a device’s Downloads area remain under the device user’s control until deleted.
Storage, security, and retention
When you register a personal phone, work calls and permitted notifications can remain available while the Console is locked. The Console locks after ten minutes without activity; unlocking requires your device authentication or employee PIN. Signing out stops local phone access and requests server revocation. If offline, the app retries revocation when connected. Administrators can also revoke a registered phone.
Incoming work calls use the phone’s calling interface and microphone during a call. Apple or Google notification services deliver call alerts and work notifications using device tokens. Notification previews are generic by default; optional chat previews may appear on the lock screen. Your device’s permissions and notification settings also apply. Voicemail recordings and transcripts remain work records; the app retrieves recordings only when you request playback.
Session credentials are stored using Android Keystore-backed or iOS Keychain-backed secure storage, not ordinary browser storage. Application traffic uses encrypted HTTPS connections. Access is limited by current employment status, job permissions, a unique employee PIN, device sessions, and server-side authorization.
Business records are retained in company systems for as long as reasonably necessary for the operational, employment, accounting, legal, security, and audit purposes for which they were collected. Local session information and sensitive application-managed caches are removed on logout, revocation, or expiration where technically applicable. Authorized administrators can revoke a device session.
Service providers and disclosure
Information may be processed by service providers that help operate the business and application, including Odoo hosting, the secured Console gateway, Google mapping services, telephony providers, shipping and payment providers, and platform services from Google and Apple. These providers receive information only as needed to perform their services. Information may also be disclosed when required by law, to protect people or the business, or as part of a business transfer subject to appropriate safeguards.
Requests and questions
Authorized users may review or request correction of relevant employee information through the application or company administration. For privacy questions, access or deletion requests, or concerns about this policy, contact tomlaudon@natureswarehouse.net. Some records may need to be retained for payroll, tax, accounting, safety, legal, or audit obligations.
Policy changes
We may update this policy when application features, service providers, or legal requirements change. The effective date above identifies the current version.