Privacy Policy

Effective date: 14 March 2026

Last updated: 14 March 2026

1. Who We Are

Elivor Ltd (Company Number: 15982280, VAT Number: GB480528973) is a company registered in England and Wales with its registered address at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ. We provide a software-as-a-service (SaaS) platform for Amazon sellers, offering inventory management, trading and profit-and-loss analysis, repricing, shipment management, claims recovery, and payout forecasting.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we are the data controller for the personal data we process through the Service.

Contact: support@elivor.com

2. Data We Collect

We collect and process the following categories of data when you use the Service:

2.1. Account Data

When you register for an account, we collect:

Your name
Email address
Password (stored as a cryptographic hash; we never store plaintext passwords)
Company name (if provided)

2.2. Amazon Seller Data (via SP-API)

When you connect your Amazon Seller Central account, we access the following data through Amazon's Selling Partner API:

Order data: order IDs, order status, item quantities, prices, and financial events associated with orders. We do not access or store buyer personal information such as names or shipping addresses.
Inventory data: FBA inventory levels, inventory age, stranded inventory, and inbound shipment information.
Product data: product listings, ASINs, SKUs, product attributes, pricing, and competitive offers.
Financial data: settlement reports, fee breakdowns, reimbursements, and financial events.
Notifications: feed processing results, order status changes, and other SP-API event notifications.

2.3. Payment Data

Subscription payments are processed through Stripe. We do not store your credit or debit card details on our servers. We retain:

Stripe customer ID
Subscription plan and billing cycle
Payment history (amounts, dates, invoice references)
Last four digits and brand of your payment card (for display purposes only)

2.4. Usage Data

We automatically collect certain information when you use the Service:

Pages visited and features used
Browser type and version
Device type and operating system
IP address
Date, time, and duration of visits
Error logs and performance data

3. Legal Basis for Processing

We process your personal data on the following legal bases under the UK GDPR:

Performance of a contract (Article 6(1)(b)): Processing your account data and Amazon seller data is necessary to provide the Service you have subscribed to.
Legitimate interest (Article 6(1)(f)): Processing usage data and analytics to improve the Service, ensure security, and prevent fraud. Our legitimate interests do not override your fundamental rights and freedoms.
Consent (Article 6(1)(a)): Where we process data based on your consent (such as marketing communications), you may withdraw consent at any time.
Legal obligation (Article 6(1)(c)): Where processing is necessary to comply with our legal obligations, such as tax and accounting requirements.

4. How We Use Your Data

We use the data we collect for the following purposes:

4.1. To Provide the Service

Inventory tracking and management across FBA and warehouse locations
Calculating true profit and loss, including all Amazon fees and product costs
Repricing your products based on competitive offers
Identifying reimbursement opportunities for lost, damaged, or missing stock
Forecasting upcoming payouts
Managing FBA shipments and tracking deliveries
Processing and matching supplier invoices to products

4.2. To Process Payments

Processing subscription payments via Stripe
Managing billing, invoices, and subscription changes

4.3. To Improve the Service

Analysing usage patterns to improve features and user experience
Identifying and fixing bugs, errors, and performance issues
Developing new features based on aggregated, anonymised usage data

4.4. What We Do NOT Do

We do not sell, rent, or lease your personal data to third parties.
We do not use Amazon Data for any purpose other than providing the Service to you.
We do not share your data with advertisers or marketing networks.
We do not use your data to compete with you as an Amazon seller.

5. Amazon SP-API Data Protection

This section describes our specific obligations and practices regarding data obtained through Amazon's Selling Partner API. These commitments are in compliance with Amazon's Data Protection Policy.

5.1. Purpose Limitation

Amazon Information (as defined by Amazon's Data Protection Policy) is used solely to provide services to the Amazon seller who authorised access. We do not use Amazon Information for any other purpose.

5.2. Security Measures

We maintain appropriate technical and organisational security measures to protect Amazon Information, including:

Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
Access controls limiting data access to authorised personnel only
Regular security assessments and vulnerability scanning
Audit logging of all data access
Logical separation of data between tenants (sellers)

5.3. Data Deletion

All Amazon Information is deleted from our systems within 30 days of the seller disconnecting their Amazon Seller Central account or cancelling their Profit Edge account. Backup copies are purged within 90 days.

Sellers may request immediate deletion of their Amazon Information at any time by contacting support@elivor.com.

5.4. No Sharing

We do not share Amazon Information with any third party except as strictly necessary to provide the Service (e.g., AWS for hosting and data storage). We do not sell Amazon Information under any circumstances.

5.5. Compliance

We comply with Amazon's Marketplace Developer Agreement and Amazon's Data Protection Policy. We will co-operate with Amazon in relation to any audit or investigation regarding our handling of Amazon Information.

7. Data Retention

We retain your data for the following periods:

Account data: Retained for the duration of your account plus 30 days after cancellation.
Amazon seller data: Retained for the duration of your Amazon connection plus 30 days after disconnection. Backups purged within 90 days.
Payment data: Retained for 7 years after the relevant transaction, as required by UK tax and accounting regulations.
Usage data: Retained for 12 months, then aggregated and anonymised.
Correspondence and support tickets: Retained for 2 years after resolution.

8. Your Rights (GDPR)

Under the UK GDPR and the Data Protection Act 2018, you have the following rights regarding your personal data:

Right of access: You have the right to request a copy of the personal data we hold about you.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data.
Right to erasure: You have the right to request that we delete your personal data, subject to certain legal exceptions.
Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
Right to restrict processing: You have the right to request that we restrict the processing of your personal data in certain circumstances.
Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests.
Right to withdraw consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at support@elivor.com. We will respond to your request within one calendar month.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

Encryption of data in transit using TLS 1.2 or higher
Encryption of data at rest using AES-256
Password hashing using industry-standard algorithms (bcrypt/scrypt)
Role-based access controls for all internal systems
Regular security assessments and penetration testing
Automated vulnerability scanning
Audit logging and monitoring
Multi-tenant data isolation at the application and database level

While we take all reasonable precautions to protect your data, no method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. Cookies

We use a minimal set of cookies that are essential for the operation of the Service:

Session cookie: Used to maintain your authenticated session. Expires when you close your browser or after a period of inactivity.
Theme preference: Stores your preferred colour theme (light/dark). Persistent, stored locally.

We do not use third-party tracking cookies, advertising cookies, or social media cookies. We do not use cookies for behavioural advertising or cross-site tracking.

11. International Data Transfers

Your data is primarily stored and processed in the United Kingdom (AWS eu-west-2, London). Where data is transferred outside the UK, we ensure that appropriate safeguards are in place, such as the UK's adequacy regulations or standard contractual clauses approved by the Information Commissioner's Office.

12. Children's Privacy

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child under 18, we will take steps to delete that information promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. If we make material changes, we will notify you by email or by posting a prominent notice on the Service at least 30 days before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.

14. Contact and Complaints

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Email: support@elivor.com
Company: Elivor Ltd
Company Number: 15982280
VAT Number: GB480528973
Registered Address: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Registered in: England and Wales

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF