Privacy Policy

Effective Date: 1st June 2024
PrepSmart is a trading name of SellerSmart Ltd
Company Number: 15870357 – Registered in England and Wales

1. Introduction

At SellerSmart Ltd ("we", "us", "our"), trading as PrepSmart, we are committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store, and protect your information, and your rights under UK data protection laws.

This policy applies to any data we collect through:

Our website and contact forms
Our onboarding processes and service tools
Stripe payment processing
Our automated dashboards or Google Sheets
Email or Discord communication

2. Who We Are

PrepSmart is a UK-based Amazon FBA prep service operated by SellerSmart Ltd. Our company is registered in England and Wales under company number 15870357.

If you have any questions about this policy, please contact us at: [email protected]

3. What Data We Collect

We may collect and process the following types of personal data:

Your name, email address, and contact details
Your business name, company registration number, and VAT number
Shipping addresses and inventory information
Billing and payment records (processed securely via Stripe)
Technical information such as your IP address or browser type
Any communication you send to us via email, contact forms, or Discord

We do not store full payment card numbers. All transactions are securely handled by Stripe, a PCI-DSS compliant provider.

4. How We Use Your Data

We use your personal data to:

Provide our prep, fulfilment, and automation services
Manage your orders, billing, and customer account
Communicate service updates, onboarding instructions, and alerts
Analyse performance and improve our tools
Comply with UK legal and financial obligations

We do not sell or rent your data to third parties.

5. Lawful Basis for Processing

Under the UK GDPR, we process your data on the following lawful bases:

To fulfil a contract or provide a service you've requested
To meet our legal obligations (such as accounting or compliance)
For our legitimate business interests, such as improving our services
With your consent, for example if you opt into marketing (which you can withdraw at any time)

6. Data Retention

We only keep your personal data for as long as necessary to fulfil the purposes outlined in this policy. In most cases, this means:

While you are actively using our services
For up to 6 years to comply with financial record-keeping laws
Until you request deletion, where legally permissible

You can request deletion of your data at any time by contacting us.

7. Your Rights

You have the following rights under UK data protection law:

The right to access your personal data
The right to correct inaccurate or incomplete data
The right to request deletion of your data
The right to restrict or object to processing
The right to request a copy of your data in a portable format
The right to withdraw consent at any time (if consent was the basis for processing)

To exercise any of your rights, contact us at: [email protected]

If you are dissatisfied with our handling of your data, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) via www.ico.org.uk

8. Sharing Your Data

We only share your personal data where necessary to provide our services. This includes:

Stripe (for payment processing)
Google (for Sheets and analytics)
Discord (for service alerts and client communication)
Email providers (for service and support correspondence)

All third parties are required to comply with data protection regulations and are not permitted to use your data for their own purposes.

9. Data Security

We take data security seriously and implement appropriate technical and organisational measures to protect your personal information. These include:

Encrypted website traffic (HTTPS)
Secure storage of files and documents
Access controls for staff and systems
Routine backups and data recovery safeguards

In the event of a data breach, we will notify affected users and the ICO as required by law.

10. Cookies

Our website may use cookies to enhance functionality and track basic analytics. You can manage or disable cookies through your browser settings at any time.

11. International Transfers

We do not intentionally transfer personal data outside of the UK or European Economic Area. If future services require such transfers (e.g. cloud backups), we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

12. Updates to This Policy

We may update this Privacy Policy from time to time. If changes are made, we will notify you via email or through our website. The latest version will always be available on our site.