Amazon data policy
We are a cable manufacturer that also sells on Amazon. This page sets out, in plain terms, what we may access through Amazon’s Selling Partner API, what we are allowed to do with it, what we refuse to do with it, and when we delete it. It forms part of our privacy policy and applies to all Amazon data we hold, whether it arrives through the API or through Seller Central.
1. Who we are
Dongguan Tong Lian Electric Wire & Cable Co., Ltd., a wire and cable manufacturer in Humen, Dongguan, Guangdong, China, selling under the brand LUCKY TL. We are the seller of record on our Amazon storefront and the controller of the Amazon data described here.
- Legal entity: Dongguan Tong Lian Electric Wire & Cable Co., Ltd.
- Address: No. 3, Huai De DaKeng Middle Road, Humen Town, Dongguan City, Guangdong Province, China 523926
- Amazon data contact: TongLianwire@outlook.com — subject line “Amazon data”
- Telephone: +86 769 8226 2323
Amazon.com and Amazon’s own apps are operated by Amazon, not by us. When you browse or buy on Amazon, Amazon’s privacy notice governs that activity. This page covers only what we do with the data that reaches us. We are an independent seller; we are not affiliated with, endorsed by or sponsored by Amazon.
2. The application we run
We maintain a private, internal application that connects to Amazon’s Selling Partner API (SP-API) to operate our own seller account — publishing listings, keeping inventory accurate, processing orders and generating settlement reports.
- It is authorised by us, for our own account, through Amazon’s official OAuth consent flow.
- It is not offered, sold, licensed or distributed to any other seller, and it is not available to the public. There is no third-party user base.
- It is not a data product, a repricer sold to others, or a service bureau. It has one user: this company.
- Data flows one way at our request; we do not expose Amazon data through any public interface.
3. What Amazon data we can access
Strictly within the roles we have been granted, we can access and store:
- Order and shipment records — order identifiers, purchase date, items, quantities, amounts, fulfilment and delivery status; for seller-fulfilled orders, the buyer’s name, delivery address and, where Amazon provides it, a masked contact number.
- Buyer messages — the correspondence a buyer sends us about an order through Amazon’s messaging system. Amazon gives us an anonymised buyer e-mail alias, not the buyer’s real e-mail address.
- Returns and refunds — return reason codes and status.
- Catalogue and listing data — ASINs, SKUs, titles, bullet points, images, prices and stock levels that we ourselves publish.
- Operational reports — inventory, settlement, fee and performance reports that Amazon generates for our account.
4. What we never access
We do not request, receive or store payment card numbers, bank account credentials, Amazon account passwords, tax identification numbers of buyers, or any special category of personal data. Amazon does not share those with sellers through the API, and we do not attempt to obtain them by any other means.
5. How we use Amazon data
For one purpose only: operating our own seller account. Concretely that means publishing and updating listings, keeping stock levels accurate, processing and dispatching orders, answering buyer messages about our own orders, handling returns and A-to-z claims, and reconciling settlements and fees for our own accounting.
Every use is either necessary to perform the sale contract with the buyer, or required by tax, accounting or consumer-protection law.
6. What we will never do
- We do not sell, rent, licence, trade or otherwise disclose Amazon data to any third party, and we do not transfer it to any other seller or to a service provider.
- We do not use Amazon data to train, fine-tune, evaluate or benchmark artificial-intelligence or machine-learning models, and we do not feed it to any external AI service.
- We do not combine Amazon data with data from other sources to profile, segment or target buyers, and we do not use it for advertising of any kind.
- We do not contact buyers outside Amazon’s messaging system on the basis of Amazon data — no marketing e-mails, no phone calls, no adding buyers to a mailing list, no directing them to another sales channel.
- We do not scrape Amazon web pages or obtain Amazon data by any means other than the official API and Seller Central.
- We do not use Amazon data to build or enrich a customer database for our own direct sales.
- We do not publish, screenshot or quote buyer information anywhere, including on this website and on our other sales channels.
We comply with Amazon’s Data Protection Policy, Acceptable Use Policy, Business Solutions Agreement and the SP-API terms, and we act on any instruction Amazon gives us about this data.
7. Storage and access control
- Amazon data is stored on servers in mainland China operated by Alibaba Cloud, in an access-controlled directory that is not reachable from the public internet.
- Only two named staff members who fulfil orders can see order and recipient data. Nobody else in the company has access, and access is logged.
- API credentials are held server-side in encrypted form, never in a browser or an e-mail, and are rotated when staff change or on any suspicion of compromise.
- Data is encrypted at rest and transmitted over TLS 1.2 or above; the connection to Amazon uses HTTPS only.
- Backups inherit the same access restriction and the same retention period as the live data.
8. Retention and deletion
We keep Amazon data for the shortest period that lets us fulfil the order, handle a return or claim, and satisfy tax and accounting law. Then it is deleted or irreversibly anonymised.
| Data | Retention | Why |
|---|---|---|
| Order, shipment and recipient data | 90 days after the order’s return window closes | Fulfilment, returns and claims handling |
| Buyer messages | 24 months | Dispute and chargeback defence |
| Reports generated through the API | 30 days | Operational reconciliation |
| Settlement and fee records (amounts only, no buyer identifiers) | 10 years | Required by PRC accounting and tax law |
| API access tokens and logs | 90 days | Security and audit |
On revocation or closure. If our authorisation is revoked, if our seller account is closed, or if Amazon asks us to, we delete all Amazon data within 30 days — from live systems first, then from backups — and confirm the deletion to Amazon in writing on request.
The only records we keep beyond that are settlement and accounting entries kept without buyer identifiers, because PRC tax law requires them for ten years.
9. Security and breach notification
Access is limited by account, by role and by network location; the administrative interface requires a password and is rate-limited against brute force. Staff with access are bound by confidentiality obligations and receive written instructions on handling buyer data.
If a security incident affects Amazon data, we notify Amazon within 24 hours of becoming aware of it, as Amazon’s Data Protection Policy requires, and we cooperate fully with its investigation. Where the incident also affects a buyer’s personal data, we notify the buyer and the competent authority without undue delay, and within 72 hours where the GDPR applies.
10. Your rights as an Amazon buyer
If you bought one of our products on Amazon, you can ask us what an order of yours looks like on our side, ask us to correct it, or ask us to delete it. Write to TongLianwire@outlook.com with the subject “Amazon data” and include the order number. We reply within 30 days, usually within 3 business days, and we do not charge for the first request. We may ask one question to confirm the request is yours.
You can also exercise your rights directly with Amazon, which holds the complete record of the transaction — including payment, account and browsing data that we never see. For anything on the Amazon side, Amazon’s own privacy notice and privacy dashboard are the right place to start.
Where our handling is not satisfactory, you may complain to the Cyberspace Administration of China or the provincial communications authority, or to your local data protection authority in the EU/UK.
11. Changes to this policy
If we change what we access, how we use it or how long we keep it — for example if we request an additional API role — we will update this page and the date at the top of it before the change takes effect, and we will tell Amazon where its policy requires it.
12. Contact
- Company: Dongguan Tong Lian Electric Wire & Cable Co., Ltd.
- Address: No. 3, Huai De DaKeng Middle Road, Humen Town, Dongguan City, Guangdong Province, China 523926
- E-mail: TongLianwire@outlook.com — subject line “Amazon data”
- Telephone: +86 769 8226 2323
- General privacy policy: tonglianwire.com/privacy.html
- Terms of use: tonglianwire.com/terms.html