Privacy Policy

Last updated: 20 August 2026

This policy explains how Eve SellerOps uses personal data when you visit eve-sellerops.com, use the Eve SellerOps application or communicate with us.

Eve SellerOps is the controller for personal data used to operate our website, accounts and business. Where we handle personal data contained in selling or business data on a customer's instructions, that customer is normally the controller and Eve SellerOps acts as its processor. In that case, the customer's privacy notice also applies and rights requests about that data should usually be directed to the customer.

1. Personal data we use

• Account data: name, email address, organisation, role, authentication and invitation information.
• Service data: Amazon account identifiers and authorised catalogue, listing, order, sales, offer, pricing and fee data; and information you add, such as costs, supplier details, workflows and ship-from details.
• Billing and communications: subscription and transaction references, invoices, support requests, feedback and related correspondence. Payment providers receive card details directly; we do not receive full card numbers.
• Technical and usage data: IP address, device and browser information, timestamps, session and security records, feature usage and diagnostic information.
• Website and marketing data: pages and actions, referring site, campaign parameters and approximate location derived from an IP address.
• Enquiries from this website: if you use the contact form, the name, email address, company and message you send, together with the page you sent it from, your IP address, browser information and any campaign parameters. We use it to answer you and to prevent abuse of the form, and we keep the correspondence while it remains relevant to that enquiry or to a resulting business relationship.

We obtain this information from you, your organisation, Amazon and other services you connect, payment and technical providers, and your browser or device. Information marked as required is needed to create an account or provide the relevant feature; without it, we may be unable to provide that part of the service.

2. Why we use it and our lawful bases

• Provide and administer the service: to create accounts, authenticate users, connect requested services, provide features, manage subscriptions and support users. We rely on performance of a contract or, where the contract is with your organisation, our legitimate interests in providing the service.
• Keep the service secure and reliable: to prevent abuse, enforce permissions, investigate incidents, diagnose faults and maintain the service. We rely on our legitimate interests in protecting users, the service and our business.
• Understand and improve the service: to measure use, evaluate acquisition channels and improve functionality and communications. We rely on legitimate interests where appropriate and on consent where required by law.
• Meet legal and business requirements: for tax, accounting, compliance, legal claims and lawful requests. We rely on legal obligations and our legitimate interests in managing and protecting our business.

Where we rely on consent, you may withdraw it at any time without affecting earlier processing. We do not make solely automated decisions about individuals that produce legal or similarly significant effects.

3. Who receives personal data

We disclose personal data where necessary to:

• hosting, storage, email, payment, analytics, monitoring, security and support providers;
• Amazon and other integrations you or your organisation choose to use;
• authorised users and administrators within your organisation;
• professional advisers, authorities or other parties where required by law or needed to establish, exercise or defend legal rights; and
• a buyer, investor or successor in connection with a proposed or completed business transaction, subject to appropriate confidentiality and data-protection measures.

Providers act as processors where applicable. Some recipients, such as payment providers or connected services, may also act as controllers for their own purposes. We do not sell personal data.

4. International transfers and security

Our providers and connected services may process personal data outside the UK. Where transfer rules apply, we use a permitted mechanism such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses, together with any assessment required by law. You may request further information about relevant safeguards using the contact route below.

We use technical and organisational measures appropriate to the nature and risk of the processing. No method of storage or transmission is completely secure.

5. Retention

We keep personal data only for as long as reasonably needed for the purposes above. We determine periods by considering the status of the account, the type and sensitivity of the data, security and support needs, legal and accounting duties, and limitation periods for disputes. Account and service data is generally kept while the account is active; operational logs and analytics use shorter rolling periods. After closure, data is deleted or anonymised when no longer required, although limited records may remain for legal purposes or until backup cycles complete. Customer-controlled data is also handled in accordance with the customer's instructions and our agreement with it.

6. Cookies and similar technologies

The website and application use cookies, local or session storage, scripts and similar technologies. Some are necessary for functions such as authentication, security and user preferences. We may also use limited analytics, diagnostics and referral or campaign information to understand and improve the service. We do not use advertising cookies on the marketing website.

Where PECR requires consent for a non-essential technology, we will request it before use. Where the law permits an exception, such as for qualifying service statistics, we will provide the information and objection control required by that exception. Necessary technologies cannot be disabled through those controls because the requested service may not work without them.

7. Your rights

Depending on the circumstances, you may have rights to access, correct, erase or obtain a copy of your personal data, and to restrict or object to its use. Where processing is based on consent, you may withdraw consent. Where processing is based on legitimate interests, you have the right to object; we will consider your request in accordance with applicable law.

You may complain to the UK Information Commissioner's Office. We would appreciate the opportunity to address your concern first.

8. Contact and changes

Eve SellerOps, operator of eve-sellerops.com, is the relevant controller. To ask a privacy question or exercise a right, use Support in the application, the contact form on our home page, or the contact details in communications sent to your organisation.

We may update this policy as the service and our processing change. We will post the current version here and bring material changes to account holders' attention where required by law.