Back-to-School: Save 30% + Free Gifts

Free Shipping for Subscriptions

100-Day Money Back Guarantee

Amazon Data Handling Policy

Effective October 8, 2026. Policy owner: Brad Baum, CEO, bbaum@llamanaturals.com

This policy explains how Llama Naturals collects, uses, stores, shares and deletes information we receive from Amazon through the Amazon Selling Partner API ("Amazon data"). It applies to every employee, contractor and system that handles Amazon data.

1. What we collect

  • Data about our own Amazon seller account only: orders, sales, fees, inventory, pricing, listings and advertising results.
  • Buyer name and address only where needed to issue tax invoices and to calculate and remit taxes. We do not request buyer data for any other purpose.

2. How we use it

  • Account data: internal reporting, inventory planning and running our Amazon business.
  • Buyer data: tax invoices and tax filings only.
  • We never use Amazon buyer data for marketing, advertising, analytics or contacting buyers, and we never combine it with other customer data.

3. How we store and protect it

  • All Amazon data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256), with keys held in a managed key service.
  • Buyer data sits in a separate tax data store, apart from our reporting systems. All Amazon data is tagged by source.
  • Access is limited to named people with a business need, using individual accounts and multi-factor login. Access is reviewed every quarter and removed within 24 hours when someone leaves or changes role.
  • Amazon data is reachable only from company-managed devices. It may not be copied to personal devices, removable media or public file links.
  • Test environments never contain real buyer data.
  • Access and activity are logged, logs are kept for at least 12 months, and logs are reviewed at least every two weeks.

4. Who we share it with

We do not sell Amazon data. We share it only with our tax advisors and with government authorities where the law requires. Any vendor that handles Amazon data must pass a yearly security review and is bound by the same rules.

5. How long we keep it and how we delete it

  • Buyer data is deleted within 30 days of shipment, including backups.
  • Long-term tax records keep only order ID, amounts and state, with no buyer name, address or contact details.
  • All Amazon data is deleted within 30 days of Amazon's request, or of losing access to the account, using industry-standard methods (NIST 800-88). We will confirm deletion in writing on request.

6. Security incidents

We keep a written incident response plan, reviewed every six months. We notify Amazon at security@amazon.com within 24 hours of detecting any security incident involving Amazon data, and we meet all legal notice duties.

7. Records and individual rights

We keep a record of what Amazon data we process and why. Where privacy law gives people the right to access, correct or delete their information, we honor those requests. Questions: support@llamanaturals.com.

8. Training and review

Everyone with access to Amazon data completes data protection and security training every year. We review this policy at least once a year and whenever our systems change.