1. Who we are and scope
WebSellers (Web Sellers Consultoria Ltda., CNPJ (Brazilian company registration number) 37.604.498/0001-01, Rua Teófilo Gomes Nº39, Jaraguá, Belo Horizonte, MG, Brazil) is a consultancy specialized in selling on Amazon (Amazon.com.br and, where applicable, Amazon Global Selling) and a registered provider on the Amazon Service Provider Network (SPN). We provide account management in Seller Central, product cataloging, Amazon Ads campaign management, FBA activation and support for exporting through Global Selling.
To provide these services, our team accesses the client's Amazon account only with permission granted by the seller, through the user management features of Seller Central and, for advertising, through the access granted by the advertiser in Amazon Ads.
This Policy describes how we collect, use, store, protect, share and delete information, both from visitors to this website and from the data the client authorizes us to access in their Amazon accounts. We act in compliance with the Lei Geral de Proteção de Dados (LGPD, Brazilian General Data Protection Law, Law No. 13,709/2018).
2. Definitions
- Personal data: information relating to an identified or identifiable natural person.
- Data subject: the person to whom the personal data refers.
- Controller and processor: under the LGPD, the party that makes decisions about the processing (controller) and the party that processes data on behalf of the controller (processor). For the data on this website and our clients' contact data, WebSellers is the controller. For the data accessed in the client's Amazon account, the seller is the controller and WebSellers acts as a processor, following the client's instructions and Amazon's policies.
- Seller Central: the Amazon dashboard where the seller manages their account, catalog, inventory, orders and payments.
- Amazon Ads: Amazon's advertising platform, where the seller's sponsored campaigns are created and managed.
- Amazon account data: information about the seller's operation viewed in Seller Central and Amazon Ads while providing the service (for example, catalog, prices, inventory, sales performance and campaign metrics), relating to the client's own account.
- Buyer personal data (PII): data such as the name, address, phone number and email of the end consumer who buys on Amazon.
3. Data we collect
3.1. Website visitor data. When you fill out the contact form, we collect the company name, email, phone number and the message sent. When you write to us by email or WhatsApp, we receive the data you choose to send us. We do not use analytics tools or tracking cookies (see section 7).
3.2. Consulting client data. To contract and perform the service, we process contact data of the client's representatives (name, email, phone number and job title) and company registration data required for the contract and invoicing.
3.3. Amazon account data. With the permission granted by the client, we access in Seller Central and Amazon Ads only the modules required for the contracted functions. We do not export, copy or store end buyers' personal data outside Seller Central (see section 6).
4. How and why we process data (purposes and legal bases)
We process data to: (i) reply to inquiries and schedule meetings; (ii) provide the contracted consulting services on Amazon; (iii) prepare reports and recommendations for the client; (iv) ensure the security of access and improve our services; (v) comply with legal, tax and regulatory obligations.
LGPD legal bases (art. 7): performance of a contract and of preliminary procedures related to it (item V), consent (item I, for example for communications), compliance with a legal obligation (item II) and legitimate interest (item IX, for example security and service improvement, respecting your rights).
5. Authorized access to Amazon accounts
- Access to Seller Central takes place through a secondary user invitation sent by the seller, with permissions limited to the contracted functions. In Amazon Ads, access is granted to our team by the advertiser.
- We never ask for the password of the client's main account. Each team member uses their own individual credentials.
- We use account data exclusively to provide the service to the client. We do not sell, rent or use this data for any other purpose, nor to train third party models.
- The client can revoke access at any time, directly in Seller Central and Amazon Ads. When the contract ends, access is removed as described in section 9.
6. Seller Central data and Amazon's data protection policy
When processing data accessed in clients' accounts, WebSellers follows Amazon's Data Protection Policy (DPP) and Acceptable Use Policy, as well as the Service Provider Network (SPN) guidelines.
WebSellers accesses only the Seller Central modules required for the service; it does not export, copy or store end buyers' personal data (name, address, phone number, email) outside Seller Central; the reports used in our work are aggregated or anonymized; and access credentials are individual and can be revoked by the client at any time in Seller Central.
If a contracted service ever requires processing buyer data outside Seller Central, this will only happen with the client's agreement, within the limits of Amazon's policy, and this Policy will be updated.
7. Cookies and third party services on the website
This website does not use its own cookies or any analytics, advertising or tracking tools. The typeface is served by the website itself, with no calls to external services.
- YouTube video: the home page embeds a YouTube video. When you play it, Google may set cookies and collect browsing data under its own privacy policy.
- WhatsApp: the WhatsApp button in the footer takes you to a Meta service. The conversation is then also governed by WhatsApp's privacy policy.
- Social media: the links to Instagram, YouTube and LinkedIn lead to third party websites with their own policies.
If we adopt non essential cookies in the future, we will ask for your consent through a banner, with the option to accept or decline, and this Policy will be updated.
8. Data sharing
We do not sell, rent or trade your data. We may share data only with:
- Sub-processors strictly necessary for our operation, such as Google (Google Workspace).
- Amazon, to the extent that activities performed in Seller Central and Amazon Ads on the client's behalf are recorded by Amazon itself.
- Authorities, when required by law or court order.
9. Storage, retention and deletion
- Contact form data: kept for as long as the business relationship lasts or until the data subject requests deletion.
- Consulting work documents (spreadsheets, aggregated reports and cataloging materials): kept during the contract and deleted within 90 days after it ends, unless a legal obligation applies.
- Access to Seller Central and Amazon Ads: removed when the contract ends. The client can also remove it at any time.
- Data required to meet legal and tax obligations (for example, contracts and invoices) is kept for the periods required by law.
- We also delete your data upon request by the data subject (see section 11), subject to legal obligations.
10. Information security
We adopt technical and organizational measures suited to the reality of a consultancy:
- Multi-factor authentication (MFA) on every account used to access Seller Central and Amazon Ads.
- Least privilege: permissions restricted to the functions contracted by each client.
- We never ask for or store the password of the client's Amazon account.
- Immediate revocation of access for team members who leave the company or stop serving the client.
- Encryption in transit and at rest in the cloud services we use (Google Workspace).
- Access logging for client accounts and work documents.
- Incident response plan. In the event of an incident, we notify the client, Amazon when account data is involved, the ANPD (Brazilian National Data Protection Authority) and the data subjects, as required by the LGPD.
No method of transmission or storage is 100% infallible, but we work continuously to maintain high protection standards.
11. Data subject rights (LGPD)
Under the LGPD (art. 18), you may request: confirmation that processing exists; access to the data; correction of incomplete, inaccurate or outdated data; anonymization, blocking or deletion of unnecessary or excessive data or data processed in non compliance; portability; deletion of data processed based on consent; information about whom we share your data with; information about the possibility of not giving consent and its consequences; and withdrawal of consent.
To exercise your rights, write to contato@websellers.com.br. We will respond as soon as possible. When the request concerns buyer data of a seller we serve, we will forward it to the seller, who is the controller of that data.
12. Data Protection Officer (DPO)
For any privacy and data protection matter, or to exercise the rights in section 11, contact our Data Protection Officer at contato@websellers.com.br.
13. International data transfer
Some sub-processors (for example, Google Workspace) and Amazon itself may process data outside Brazil. In these cases, we adopt safeguards to ensure a level of protection compatible with the LGPD.
14. Changes to this policy
We may update this Policy from time to time. The current version will always be available on this page, with the date of the last update. Relevant changes will be communicated when appropriate.
15. Contact
- WebSellers: Web Sellers Consultoria Ltda., CNPJ 37.604.498/0001-01
- Address: Rua Teófilo Gomes Nº39, Jaraguá, Belo Horizonte, MG, Brazil
- Email: contato@websellers.com.br
- ANPD (Autoridade Nacional de Proteção de Dados, Brazilian National Data Protection Authority): gov.br/anpd