Zobook Ltd is committed to protecting the data entrusted to us by our customers and the platforms they connect. This statement summarises our data-protection practices and our specific commitments for data accessed through the Amazon Selling Partner API (SP-API). It complements our Privacy Policy and Security overview, and reflects our obligations under UK GDPR, the Amazon Data Protection Policy, the Amazon Acceptable Use Policy, and the Solution Provider Agreement.
1. Our commitments for Amazon data
Used only for the authorising seller. Information we obtain through the SP-API is used solely to provide analytics and inventory services back to the selling partner whose account it came from.
Never aggregated or sold. We do not aggregate or combine one selling partner's data with another's to create, publish, or sell benchmarks, market data, or insights — to anyone, including competing sellers.
No insights about Amazon. We do not promote, publish, or share insights about Amazon's business.
Minimum necessary. We request only the data needed to deliver the analytics described on our Amazon analytics page.
2. Authorisation & revocation
We access your Amazon data only after you explicitly authorise our application through Amazon's official OAuth consent flow. We never request or store your Amazon password. You can review what is shared and revoke access at any time from Amazon Seller Central; on revocation we stop syncing immediately and delete retained SP-API data within 30 days, unless law requires retention.
3. Personally Identifiable Information (PII)
Where order data includes PII (such as buyer name or address), we treat it under the Amazon Data Protection Policy: it is encrypted in transit and at rest, access is restricted to authorised users on your account on a least-privilege basis, it is never used for purposes other than fulfilling the Service, and it is retained no longer than necessary. We do not store payment card numbers.
4. Encryption
All data is encrypted in transit using TLS 1.2 or higher. Data at rest, including database storage and backups, is encrypted using AES-256. Secrets and integration tokens are stored in a dedicated, access-controlled secret store.
5. Access control & monitoring
Access to production systems is limited to authorised personnel, protected by multi-factor authentication and role-based permissions. Administrative actions are logged. We monitor for anomalous activity and maintain audit trails within the platform so account owners can see who accessed or changed what.
6. Sub-processors
We use a small number of vetted sub-processors to deliver the Service, each under written data-protection terms:
| Sub-processor | Purpose | Region |
|---|---|---|
| Cloud hosting provider | Application & database hosting | UK / EU |
| Managed email provider | Transactional & contact email | UK / EU |
| Payment processor | Subscription billing | UK / EU |
| Error & uptime monitoring | Reliability & security monitoring | UK / EU |
A current, named list is available to customers on request at [email protected]. We give notice before adding a new sub-processor.
7. Data retention & deletion
We retain data only as long as needed to provide the Service or as required by law. SP-API data is deleted within 30 days of disconnection or a deletion request; general customer data within 90 days of account closure. You can request export or deletion at any time.
8. Incident response
We maintain an incident-response process. In the event of a personal-data breach, we will notify affected customers and the relevant authorities (and, where required, Amazon) without undue delay and in line with applicable law and the Amazon Data Protection Policy.
9. Data processing terms
For customers who require one, we offer a Data Processing Agreement (DPA) that sets out our role as processor, including UK International Data Transfer Agreement / Standard Contractual Clauses for any transfers outside the UK/EEA. Request a copy at [email protected].
10. Contact
Data protection team, Zobook Ltd, London, United Kingdom
Email: [email protected]