Privacy Policy

01Who we are

Ascenda Digital Commerce Limited is an independent Amazon and marketplace agency based in Cardiff, Wales, United Kingdom. For the purposes of UK data protection law we are the "data controller" for information collected through this website.

If you have any question about this policy, or about how we handle your information, email hello@ascendadigitalcommerce.com.

02The information we collect

We only collect information you choose to give us. There is no account system on this website and no hidden collection.

If you complete the enquiry form, or contact us by email, we receive:

• Your name and the company you represent
• Your email address
• Your website or marketplace store address
• The nature of the challenge you are facing and the type of support you are interested in
• Your preferred timing, and any additional context you choose to share
• If you use the Contact form instead, your reason for contacting us and your message

If you accept analytics cookies, we also receive the information described under "Cookies, analytics and tracking" below. That is measurement data about pages and visits, not information that identifies you by name.

03Why we use it, and our lawful basis

We use the information you send us to reply to your enquiry, to arrange and prepare for the conversation you asked for, and to follow up with relevant recommendations or a proposed scope of work.

Our lawful basis for handling your enquiry is legitimate interests: you have approached us about a possible working relationship, and replying to you is the obvious and expected use of what you sent. Where we would like to contact you about anything beyond your original enquiry, we will ask for your consent first.

Our lawful basis for analytics is your consent, which is why nothing loads until you give it and why withdrawing it is a single click at the foot of any page.

We do not sell your information, and we do not use it for automated decision-making or profiling.

04Marketing

We do not operate a marketing mailing list from this website. Submitting an enquiry does not subscribe you to anything. If that changes, this policy will be updated and consent will be requested separately.

05Cookies, analytics and tracking

This website uses Google Analytics 4 to understand which pages are read, roughly where visitors arrive from, and which activity leads to an enquiry. It sets cookies in your browser.

Nothing from Google is loaded until you accept. If you have not answered the banner, or you have declined, no Google script is requested by this site at all, so no analytics cookie is set and no data reaches Google. This is stricter than the common approach, which loads the tag immediately and asks it to hold back.

Declining costs you nothing. Every page works identically either way, and we do not ask again on the next page you open.

You can change your mind at any time using the "Cookie settings" link at the foot of any page. If you withdraw consent we delete the analytics cookies already in your browser.

To remember your answer we store a single value in your browser’s local storage. It is never sent to us or to anyone else, and it exists only so that you are not asked the same question repeatedly.

We use no tag manager, no advertising or social media pixels, no session recording or heatmaps, and no cross-site tracking. We do not build profiles of visitors and we run no advertising from this site today. If that changes, this policy will be updated and consent asked for again rather than assumed from an answer you gave about something else.

06Who else sees your information

Your enquiry is read by Amanda and, where relevant to answering it, by the specialists working with Ascenda.

We use reputable third parties to host this website and to provide our business email. They process information on our behalf under contract and are not permitted to use it for their own purposes.

The two enquiry forms on this website are delivered by Formspree, a form service that receives what you submit, emails it to us and keeps a copy so that no enquiry is lost in transit. It acts as our processor under contract and does not use your information for its own purposes.

If you accept analytics cookies, Google Ireland Limited processes the resulting measurement data as our processor, under Google’s own terms. If you decline, Google receives nothing from your visit.

If you book a call with us, that booking is made on a Google Calendar scheduling page. It is Google’s page rather than part of this website, so what you enter there is handled under Google’s terms as well as ours, and this policy does not govern it.

We will disclose information if we are legally required to do so, and we may share it with our professional advisers where necessary.

07How long we keep it

If your enquiry does not lead to us working together, we keep the correspondence for up to 24 months so that we have context if you come back to us, then delete it.

If we do work together, the relevant records are kept for as long as the engagement continues and afterwards for the period our legal, tax and accounting obligations require.

08Where your information is held

We aim to keep information within the UK or the European Economic Area. Where a provider we rely on transfers information outside those areas, we satisfy ourselves that an appropriate safeguard recognised under UK data protection law is in place.

Formspree, which delivers the enquiry forms on this website, is based in the United States, so what you submit through a form is held there. That transfer is covered by the safeguards described above.

09Keeping it secure

This website is served over an encrypted connection. Access to enquiries is limited to the people who need it, and we review the tools we use so that access stays appropriate.

No method of transmission over the internet is completely secure, so please do not send sensitive information such as payment details by email.

10Working on client marketplace accounts

When a client engages us to manage an Amazon or other marketplace account, they may authorise us to access information inside that account so we can do the agreed work.

That information is commercial rather than personal: catalogue and listing data, advertising performance, inventory and fulfilment data, pricing and margin, account health, and the reporting built on top of them.

Our Account Management service is designed not to need restricted customer information such as shopper names, addresses or contact details. None of the work described on this website requires it. If a client asked us to take on something that did need that access, it would be agreed separately and approved through the marketplace first.

11How we use client and marketplace information

We use it only to provide the services agreed with that client: managing the account, catalogue and listing work, advertising, inventory planning, account-health monitoring, reporting, forecasting, content coordination and performance analysis.

We do not sell it, we do not share it with other clients, and we do not use it to market anything to anyone.

12Access to client accounts

Access is granted through the marketplace’s own permission mechanisms, such as Seller Central user permissions, rather than by sharing account credentials.

Access is limited to the people who actually need it for the agreed work, it is given to named individuals rather than shared, and it is role-based. It is reviewed when responsibilities change and removed when it is no longer required.

We take the technical and organisational measures appropriate to the information we hold, as UK data protection law requires. A client can withdraw our access at any time, directly from their own marketplace account.

13How long we keep client information

We keep client and marketplace information for as long as we need it to provide the agreed service, and afterwards only for the period our legal, tax and accounting obligations require.

Amazon and client information is retained only for as long as necessary for the authorised purpose. Where authorisation is withdrawn, access ends or the information is no longer authorised or required, relevant Amazon information is securely deleted within the applicable Amazon retention period, unless retention is required for legal, tax or regulatory purposes.

14Specialists and suppliers

Some work is delivered with the help of specialists or technology suppliers. Where that happens, they get access only to what that piece of work needs, they are required to keep it confidential and to handle it in line with data protection law, and they may not use it for anything of their own.

Specialists and contractors accept Ascenda’s Contractor Data Protection, Confidentiality and Amazon Access Schedule before they are given access to any client or marketplace information. It covers confidentiality, data protection, role-limited access, which client accounts they may work in, controls on subcontracting, their security responsibilities, and the obligations that continue after an engagement ends.

15If something goes wrong

Ascenda maintains a formally approved Information Security Incident Response Plan. It covers preparation, identification, containment, investigation, eradication, recovery and post-incident review, including incidents affecting Amazon information. A named primary contact and a documented secondary contact are responsible for running it.

If we become aware of a security incident affecting client or marketplace information, we act to contain it, work out what happened and what was affected, and put right whatever allowed it.

We tell the affected client. The plan includes escalation to Amazon within the applicable 24-hour notification requirement where an incident affects Amazon information or access. Where UK data protection law requires the Information Commissioner’s Office to be told, we do that too.

We keep a record of what happened and what we changed as a result.

16Your rights

Under UK data protection law you have the right to:

• Ask for a copy of the personal information we hold about you
• Ask us to correct information that is inaccurate or incomplete
• Ask us to delete information where there is no good reason for us to keep it
• Object to, or ask us to restrict, our use of your information
• Ask us to transfer your information to another provider, where that right applies
• Withdraw consent at any time, where we relied on consent

17Complaints

To exercise any of the rights above, email hello@ascendadigitalcommerce.com and we will respond within one month.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office, the UK supervisory authority, at ico.org.uk. We would appreciate the chance to put things right first.

18Changes to this policy

If we change how we handle personal information we will update this page and revise the date shown at the top.