Last updated: 22 October 2026

1. Who we are

Extreme Comfort (UK) Limited (“we”, “us” or “our”) operates the Extreme Comfort Vendor Ads Analyser, an internal application for analysing our Amazon Vendor advertising performance.

We are the controller of personal information processed for the purposes described in this notice.

You can contact us at:

Email: info@extreme-comfort.co.uk
Post: Extreme Comfort (UK) Limited, Royds Mill, Leeds Road, Ossett, West Yorkshire, WF5 9YA, United Kingdom

Please mark enquiries “Privacy – Vendor Ads Analyser”.

2. What this notice covers

This notice explains how we handle information when authorised personnel connect our Amazon Vendor advertising account to the analyser and use its reporting functions.

The analyser is intended for our own business use. It is not a public service for connecting unrelated advertisers’ accounts.

This notice covers the analyser and its Amazon connection. Shopping, customer accounts, marketing subscriptions and other activities on our Shopify store are covered by our store’s separate privacy and cookie policies. Amazon’s own processing is governed by its applicable privacy notices.

3. Information we collect

Depending on the permissions granted and reporting functions used, we process:

• Advertising account information: advertiser names, account identifiers, advertising profile identifiers, marketplace, currency and time zone.
• Advertising performance information: campaign names and identifiers, advertised products and ASINs, keywords, targeting information, reported search terms, impressions, clicks, advertising spend, attributed orders and sales, and calculated performance measures.
• Connection information: authorisation records, access tokens, refresh tokens and connection status.
• Authorised user information: names, business contact details and access permissions where supplied or recorded.
• Technical and security information: IP addresses, login records, timestamps, application activity and error logs.

Much of the advertising information is business or aggregated performance data rather than personal information. Where information identifies, or can reasonably be linked to, an individual, we treat it as personal information.

The analyser is not designed to retrieve Amazon shoppers’ names, delivery addresses, payment card details or individual order records. We do not request or store users’ Amazon passwords.

4. Where information comes from

We obtain information from Amazon through the Amazon Ads API and Login with Amazon, from authorised personnel, and from technical records generated when the application operates.

We request only the information and permissions needed for the application’s functions.

5. How we use information

We use information to:

• Establish and maintain an authorised connection to our Amazon Vendor advertising account.
• Retrieve reports and display advertising performance.
• Calculate measures such as advertising cost of sales, return on advertising spend and conversion rates.
• Identify trends and opportunities to improve advertising efficiency.
• Support internal reporting and business decisions.
• Manage access, investigate errors and protect the application against misuse.
• Meet applicable legal obligations and requirements governing our Amazon API access.

We do not use information obtained through this connection for unrelated marketing or to create marketing lists.

6. Our lawful bases

Where information is personal information, we rely on the following lawful bases as applicable:

Legitimate interests: operating and securing our internal reporting tools, understanding advertising performance and managing our business. We balance these interests against individuals’ rights and reasonable expectations.

Legal obligation: processing necessary to comply with applicable law.

Consent: where consent is legally required for a particular activity. Where we rely on consent, it may be withdrawn without affecting the lawfulness of earlier processing.

Authorising access through Amazon is distinct from the lawful basis we use under data protection law.

7. Hosting and sharing information

The analyser is intended to run on company hosting provided through 123 Reg, using a hosting region described by the provider as Europe. The exact country is not currently confirmed.

Shopify hosts the website page displaying this notice. Publishing the notice on Shopify does not itself transfer the analyser’s Amazon reports or authorisation credentials to Shopify.

Access to analyser information is restricted to authorised personnel and service providers who need it for the purposes described above. These may include:

• Employees and authorised contractors responsible for advertising, reporting or technical administration.
• Hosting, backup, security and technical support providers.
• Amazon, to authenticate the connection, retrieve reports and resolve technical issues.
• Professional advisers, regulators or public authorities where disclosure is legally required or necessary for legal claims.

Where service providers act as processors, we require appropriate contractual protections.

We do not sell personal information or Amazon advertising data. The analyser will not send account information or reports to external AI services at launch. Any future introduction of such services will be assessed before use, and this notice will be updated as necessary.

8. International transfers

Our hosting provider describes the selected hosting region as Europe. This does not establish that all storage, support access or processing remains within the United Kingdom.

Where personal information is transferred outside the United Kingdom, we ensure an appropriate lawful transfer mechanism is in place where required. This may include UK adequacy regulations or contractual safeguards such as the UK International Data Transfer Agreement or UK Addendum.

Contact us for details of the locations and safeguards applicable to your information, including how to obtain a copy of relevant safeguards.

9. Retention

We retain information only for as long as needed for the purposes described in this notice.

Our application retention schedule is:

Where applicable Amazon terms require earlier deletion or a shorter retention period, those requirements take precedence.

Limited information may be retained longer where required by law or necessary for a specific legal claim. Such information is restricted to that purpose.

10. Security

We use appropriate technical and organisational measures to protect information against unauthorised access, disclosure, alteration or loss.

These include access restrictions, secure handling of credentials, protected connections and maintenance of the application and supporting infrastructure.

No system guarantees absolute security. We assess suspected incidents and make notifications where legally required.

11. Disconnecting access and requesting deletion

An authorised account administrator can request disconnection by emailing info@extreme-comfort.co.uk. Access may also be revoked through Amazon’s available application authorisation controls.

After disconnection, we stop retrieving new information through that connection and remove credentials according to the schedule above.

Revoking access does not automatically delete previously downloaded reports. Contact us to request deletion. We will assess requests under applicable law and Amazon’s contractual requirements, and explain any information that must be retained.

12. Cookies

The analyser uses only cookies or equivalent storage necessary for authentication, session management and security at launch. It does not use optional advertising or audience tracking technologies.

The Shopify website displaying this notice may use separate technologies described in the store’s privacy and cookie policies.

13. Automated decisions

The analyser provides performance analysis to support human business decisions. It does not make solely automated decisions about individuals that produce legal or similarly significant effects.

14. Your rights

Depending on the circumstances, you may have rights to:

• Access your personal information.
• Correct inaccurate or incomplete information.
• Request deletion or restriction of processing.
• Object to processing based on legitimate interests.
• Receive certain information in a portable format.
• Withdraw consent where processing relies on consent.
• Challenge relevant solely automated decisions.

These rights apply to personal information and are subject to legal conditions and exemptions.

To make a request, email info@extreme-comfort.co.uk. We may need to verify your identity. We normally respond within one month, subject to extensions permitted by law.

15. Providing information

Information needed to authorise and secure the Amazon connection is necessary to operate the connected reporting functions. If access is not granted or is withdrawn, those functions may be unavailable.

16. Complaints

Please contact us if you have concerns about how we handle personal information.

You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint, or another competent data protection authority where applicable.

17. Changes to this notice

We review this notice when the application, its providers or applicable requirements change. Updated versions will be published on this page with a revised date. Where required, we will provide additional notification of material changes.