Privacy Policy

1. Data Collection and Processing

S&J Retail Ltd collects and processes Amazon marketplace data solely for the purpose of providing our services to sellers and managing inventory across platforms. The specific data we collect includes:

• Order details and transaction information
• Shipping and delivery addresses
• BuyerCustomizedInfo for custom orders
• Product inventory and listing data
• Seller performance metrics

We collect only the necessary data required to operate our services effectively and maintain marketplace compliance.

2. Data Storage and Security

All data is stored securely in ISO 27001 certified data centers within the European Economic Area (EEA). For any data processing outside the EEA, we implement Standard Contractual Clauses (SCCs) and additional safeguards to ensure GDPR compliance. We implement industry-standard security measures including:

• End-to-end encryption for data in transit and at rest
• Regular security audits and penetration testing
• Multi-factor authentication and role-based access control
• Automated backup procedures with encryption

3. Data Usage

We use Amazon marketplace data exclusively for:

• Inventory management and optimization
• Order fulfillment and tracking
• Performance analytics and reporting
• Service improvement and maintenance

4. Data Sharing

We do not share Amazon marketplace data with any third parties except where necessary to provide our services. Our authorized third-party service providers may include:

• Cloud infrastructure providers for secure data storage
• Analytics services for performance monitoring
• Customer support and communication tools
• Security and compliance monitoring services

All service providers are carefully selected and bound by strict confidentiality agreements and data processing addendums that ensure GDPR compliance.

5. Data Retention and Disposal

We implement specific data retention periods:

• Order-related personal data is retained for 31 days after order fulfillment
• Inventory and listing data is retained for the duration of the service agreement
• Performance metrics are retained for 12 months for analytical purposes
• Financial records are retained for 7 years as required by UK law

When data reaches the end of its retention period, it is securely deleted using industry-standard data destruction methods that comply with GDPR requirements.

6. Compliance

We comply with all applicable data protection laws and regulations, including:

• General Data Protection Regulation (GDPR)
• UK Data Protection Act 2018
• Amazon Marketplace Developer Agreement
• ISO 27001 Information Security Standards

7. Contact Information

For any privacy-related inquiries, please contact our Data Protection Officer at:

8. Updates to This Policy

This privacy policy was last updated on March 19, 2024. We regularly review and update our privacy policy to ensure it accurately reflects our data handling practices and regulatory compliance. Any changes will be posted on this page with an updated revision date.