Not a nostr DM. You could use pgp. But a lot of people dont use that. I would prolly use something like simplex or whatever to get their address from them and then delete it as soon as I'm done creating a shipping label and putting the product out.