I've had a company on the side that's an online distributor of particular goods for an offline company. I work with them directly, however I set my own prices for their goods, and they do all the shipping from their factory (so there's no loss in revenue of shipping it to me first). However this brings up obvious concerns of them having every one of my customer's (1000s) contact information. I'm not really worried in this particular case, but I'd like to start expanding and am reluctant to without some kind of agreement protecting me. I'm sure I'm not the only one in a setup like this, so something must be available... Thanks.