Privacy policy

weprepforyou is the client portal of LVT Distribution Ltd, an Amazon FBA prep centre in the United Kingdom (company number 15710736, VAT GB519809656, 28 Trade City, Weybridge, Surrey, KT13 0YF, United Kingdom). We are the data controller for the personal data described here. Questions go to hello@weprepforyou.uk.

We only hold what is needed to receive, prepare and forward your stock and to bill you for it:

• Account and contact details: your name, business name, email address, phone number and billing address.
• Amazon seller data you authorise us to read through Amazon’s Selling Partner API: your seller ID, FBA listings (titles, SKUs, ASINs, FNSKUs, images, barcodes), inventory levels, and the inbound shipments and labels we create on your behalf.
• Stock data you enter: what you send us, quantities, expiry dates, prep instructions, courier and tracking references.
• Warehouse records we create: counts, photos of cartons and units at goods-in and during prep, damage notes and goods received notes.
• Billing records: the services performed, invoices, and the status of payments. Card details are entered directly into Stripe and never reach our servers; we store only the card brand, last four digits and expiry for display.
• Technical data: sign-in sessions, the time and outcome of emails we send you, and server logs kept for security.

We process this data to perform our contract with you: knowing what stock to expect, matching it on arrival, doing the prep you asked for, creating Amazon shipments under your seller account, and invoicing the work. Some processing rests on our legitimate interests: keeping the portal secure, keeping accurate business records, and telling you about the status of your stock. We keep financial records because UK tax law requires it. We do not use your data for advertising and we do not sell it.

When you connect your Seller Central account, Amazon issues us a token limited to the permissions you approve (Amazon Fulfillment, Product Listing, Inventory and Order Tracking). We use it only to read your FBA listings and inventory and to create and manage inbound shipments for you. We never read customer orders, buyer names or addresses.

Tokens are stored encrypted (AES-256) and are deleted when you disconnect Amazon in the portal or close your account. Listing and inventory data is refreshed from Amazon and kept only while your account is active. We follow Amazon’s Data Protection Policy and Acceptable Use Policy for the Selling Partner API.

We use a small number of providers to run the service. Each acts on our instructions and is bound by a data processing agreement:

• Amazon (Selling Partner API and Seller Central), to read your listings and create shipments under your account.
• Stripe, for card storage and monthly payments. Stripe is a regulated payment provider and holds your card details under its own privacy policy.
• Supabase, which hosts our database and file storage in the EU (Ireland).
• Vercel, which hosts the portal.
• Resend, which delivers our emails.
• Carriers (UPS, DPD and others) receive the ship-from and destination addresses printed on labels.

We may also disclose data where the law requires it, for example to HMRC, or to professional advisers under confidentiality. We do not transfer your data outside the UK or EU except to providers covered by the UK’s adequacy regulations or standard contractual clauses.

• Account, stock and prep records: for as long as your account is active, then deleted within 90 days of closure.
• Photos from goods-in and prep: 12 months after the related shipment closes, unless a claim is open.
• Invoices and payment records: 6 years after the end of the tax year, as HMRC requires.
• Amazon tokens: deleted immediately when you disconnect or close your account.
• Email logs and server logs: 12 months.

All traffic is encrypted in transit (TLS). Data is encrypted at rest by our hosting providers, and Amazon tokens are additionally encrypted by the portal before storage. Access to client data is limited to prep centre staff who need it for their work, protected by individual logins, and every account’s data is isolated by database-level access rules. Cards are handled by Stripe; we are never in possession of full card numbers.

The portal sets only the cookies it needs to keep you signed in. Your browser also remembers your theme and sidebar preference on your own device. We do not use advertising or analytics cookies, so there is nothing to consent to and no banner.

Under UK GDPR you can ask for a copy of the personal data we hold about you, ask us to correct or delete it, restrict or object to how we use it, and receive it in a portable format. You can disconnect Amazon at any time from the portal, which revokes our access. To exercise any right, email us; we respond within one month. You can also complain to the Information Commissioner’s Office at ico.org.uk.

We update this policy when the service changes and show the effective date at the top. Material changes are announced by email. Contact: LVT Distribution Ltd, 28 Trade City, Weybridge, Surrey, KT13 0YF, United Kingdom, hello@weprepforyou.uk.