Privacy Policy

This Privacy Policy explains how Unified Retail Services Ltd ("we", "us", or "our"), a company registered in England and Wales (company number 15752391) with its registered office at Norfolk House, 4 Station Road, St. Ives, Cambridgeshire, PE27 5AF, United Kingdom, collects, uses, stores, and protects your personal data when you use the UnifiedArk platform and website at unifiedark.com.

Unified Retail Services Ltd is the data controller responsible for your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy is effective as of 24 March 2026 and applies to all users of unifiedark.com and the UnifiedArk platform, including any associated services, features, and tools provided through the platform.

By accessing or using UnifiedArk, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please do not use our services.

We collect the following categories of data in order to provide and improve the UnifiedArk service:

Account Data

• Full name
• Email address
• Company or business name
• Role or job title

Amazon Selling Partner API Data

• Order data (order history, order status, fulfilment details)
• Inventory data (stock levels, FBA inventory, replenishment data)
• Advertising metrics (campaign performance, spend, impressions, conversions)
• Brand analytics (search terms, market basket analysis, repeat purchase behaviour)

Amazon SP-API data is accessed only with your explicit authorisation through Amazon's official Selling Partner API authorisation flow. We do not access any Amazon data without your prior consent and the specific scopes you have granted.

Usage Data

• Pages viewed and features used within the platform
• Device information (browser type, operating system, screen resolution)
• IP address
• Date and time of access
• Referring URLs

Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your session, authenticate your identity, and collect anonymised usage analytics. For full details, see the Cookies section below.

We use the data we collect for the following purposes:

• Providing the UnifiedArk dashboard service — displaying your Amazon selling data in a unified dashboard, generating insights, and enabling you to manage your Amazon business more effectively.
• Generating reports and analytics for your account — producing reports, charts, and analytics based solely on your own Amazon data to help you make informed business decisions.
• Service improvement and debugging — understanding how the platform is used so we can fix issues, improve performance, and develop new features.
• Communication — sending you product updates, service announcements, security alerts, and responding to your support requests.
• Legal and regulatory compliance — meeting our obligations under applicable laws, regulations, and legal processes, including tax and accounting requirements.

This section specifically addresses how we handle data obtained through the Amazon Selling Partner API (SP-API). We take the protection and proper use of this data extremely seriously.

• Amazon SP-API data is accessed only via the authorised scopes explicitly granted by you through Amazon's official SP-API authorisation flow. We never request access beyond what is necessary to provide the features you have chosen to use.
• Your Amazon data is used solely to provide the UnifiedArk dashboard features and services that you have requested. It is not used for any other purpose.
• Your Amazon data is never sold, licensed, or shared with any third parties. Under no circumstances do we make your Amazon data available to other companies, partners, advertisers, or any external entities.
• Your Amazon data is not used for any purposes beyond providing the UnifiedArk service directly to you, the authorising seller. We do not use it for market research, competitive analysis, or any purpose unrelated to your use of UnifiedArk.
• Your Amazon data is never aggregated across sellers. Each seller's data is completely private and isolated to their own account. No seller can view, access, or benefit from another seller's data.
• We do not use Amazon data with any non-Amazon resources, tools, or services. Your Amazon data remains within the scope of the UnifiedArk platform and is processed exclusively for the purpose of delivering the Amazon-specific features you have authorised.
• Your Amazon data is retained only for as long as your UnifiedArk account remains active and you maintain your SP-API authorisation.
• Upon account termination, authorisation revocation, or user request, all Amazon SP-API data associated with your account is permanently deleted within 30 days.

We take the security of your data seriously and implement industry-standard measures to protect it:

• Infrastructure — All data is stored on Amazon Web Services (AWS) in the EU West (London) region (eu-west-2), ensuring your data remains within a jurisdiction subject to strong data protection laws.
• Encryption at rest — All stored data is encrypted using AES-256 encryption, one of the strongest block ciphers available.
• Encryption in transit — All data transmitted between your browser and our servers is protected using TLS 1.2 or higher, ensuring secure communication at all times.
• Role-based access control — Access to data within our systems is strictly limited to authorised personnel on a need-to-know basis, with granular role-based permissions.
• Audit logging — We maintain comprehensive audit logs of data access and system operations to detect and respond to any unauthorised activity.
• Regular security assessments — We conduct regular security reviews and assessments of our infrastructure, code, and processes to identify and address potential vulnerabilities.

We do not sell, rent, or trade your personal data or Amazon data to any third parties. We share data only in the following limited circumstances:

• Infrastructure providers — We use Amazon Web Services (AWS) to host and operate the UnifiedArk platform. AWS acts as a data processor on our behalf and processes data solely in accordance with our instructions and applicable data protection agreements.
• Legal obligations — We may disclose your data if required to do so by law, regulation, legal process, or enforceable governmental request. Where permitted, we will notify you of such disclosure.
• Protection of rights — We may disclose data where we believe it is necessary to protect the rights, property, or safety of Unified Retail Services Ltd, our users, or the public.

We never share your data for marketing, advertising, or any commercial purpose unrelated to providing the UnifiedArk service.

We retain your data only for as long as necessary to provide our services and comply with our legal obligations:

• Amazon SP-API data — Retained while your account is active and your SP-API authorisation is in place. Upon account termination, authorisation revocation, or deletion request, all Amazon SP-API data is permanently deleted within 30 days.
• Account data — Retained while your account is active. After account termination, account data (such as name, email, and company name) may be retained for up to 12 months for legitimate legal, tax, and accounting purposes, after which it is permanently deleted.
• Usage data — Anonymised usage data may be retained for analytics and service improvement purposes. This data cannot be linked back to individual users.
• Deletion requests — You may request deletion of your data at any time by contacting us at privacy@unifiedark.com. We will process your request in accordance with applicable law and the timeframes described above.

Under the UK GDPR and applicable data protection legislation, you have the following rights in relation to your personal data:

• Right of access — You have the right to request a copy of the personal data we hold about you.
• Right to rectification — You have the right to request that we correct any inaccurate or incomplete personal data.
• Right to erasure — You have the right to request that we delete your personal data, subject to certain legal exceptions.
• Right to restriction of processing — You have the right to request that we restrict the processing of your personal data in certain circumstances.
• Right to data portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object — You have the right to object to the processing of your personal data in certain circumstances, including processing for direct marketing purposes.
• Right to withdraw consent — Where we rely on your consent to process your data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us at privacy@unifiedark.com. We will respond to your request within one month, as required by law.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling 0303 123 1113.

California residents (CCPA) — If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion of your personal information, and the right not to be discriminated against for exercising your privacy rights. We do not sell your personal information. To exercise your CCPA rights, please contact us at privacy@unifiedark.com.

UnifiedArk uses cookies and similar technologies to ensure the platform functions correctly and to improve your experience. Below is a summary of the cookies we use:

Essential Cookies

• Session cookies — Required to maintain your session while you use the platform. These expire when you close your browser or after a period of inactivity.
• Authentication cookies — Used to keep you signed in and to verify your identity across requests. These are necessary for the secure operation of your account.

Analytics Cookies

• We use analytics cookies to collect anonymised information about how the platform is used, such as which pages are visited most frequently and how users navigate between features. This data helps us improve the platform. Analytics data is not linked to your personal identity.

No Third-Party Advertising Cookies

We do not use any third-party advertising or marketing cookies. No data collected through UnifiedArk is used for targeted advertising.

Managing Cookies

You can manage or delete cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the platform. For more information on managing cookies, consult your browser's help documentation.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page.

If we make material changes that significantly affect how we handle your personal data or Amazon SP-API data, we will notify you via the email address associated with your account before the changes take effect.

Your continued use of UnifiedArk after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this page periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@unifiedark.com
• Post: Unified Retail Services Ltd, Norfolk House, 4 Station Road, St. Ives, Cambridgeshire, PE27 5AF, United Kingdom

We aim to respond to all enquiries within 5 working days. For data protection rights requests, we will respond within one month as required by applicable law.