Privacy Policy

Last updated: 21 October 2026

1. Who we are

AMZ Bees FZE, LLC, AMC Boulevard A Building, Ajman, United Arab Emirates, is the data controller for the personal data described in this policy.

Contact: hello@amzbees.com

This policy covers amzbees.com and the enquiries, bookings, job applications, and business correspondence we handle through it. It also covers the Amazon Information we access when we manage our clients' Amazon accounts, set out in section 12.

2. What we hold

We are a business-to-business agency. We do not run user accounts, and there is nothing to log in to. In practice we hold five things.

Enquiries and audit requests

When you use a contact or Book a Free Audit form, we receive your name, email address, phone number, company name, and whatever you write in the message. These are handled by our forms and CRM provider.

Meeting bookings

If you book a call with us, we receive your name, email address, the time you chose, and anything you enter in the booking form. These are handled by our scheduling provider.

Job applications

When you apply through the careers page or by email, we receive your CV and covering material, which typically includes your name, contact details, work history, education, and anything else you choose to include. We may add our own interview notes.

Email correspondence

Anything you send to hello@amzbees.com, or to a team member, is held in our email system along with your address and the content of the thread.

Client records

For brands we work with, we hold business contact details for the people we deal with, plus contract and billing records.

We also receive standard technical data when you visit the site: IP address, browser and device type, pages viewed, and referring URL.

We do not collect special category data such as health, biometric, or political information, and we ask that you do not send it to us.

3. Why we use it, and our legal basis

  • Responding to an enquiry or audit request, using your contact details and what you wrote. Legal basis: Article 6(1)(b), steps prior to a contract, or 6(1)(f), legitimate interest.
  • Arranging and holding a meeting, using your name, email, and booking details. Legal basis: Article 6(1)(b), steps prior to a contract.
  • Delivering services under a signed agreement, using contact, contract, and billing details. Legal basis: Article 6(1)(b), performance of a contract.
  • Assessing a job application, using your application material and our interview notes. Legal basis: Article 6(1)(b), steps prior to a contract.
  • Keeping a candidate on file for future roles. Legal basis: Article 6(1)(a), consent.
  • Sending marketing emails, using your name and email. Legal basis: Article 6(1)(a), consent, or 6(1)(f) for existing clients.
  • Keeping the site running and secure, using IP, device, and usage data. Legal basis: Article 6(1)(f), legitimate interest.
  • Meeting tax and accounting obligations, using billing and contract records. Legal basis: Article 6(1)(c), legal obligation.
  • Establishing or defending legal claims. Legal basis: Article 6(1)(f), legitimate interest.
  • Measuring how the site is used, using analytics cookies and usage data. Legal basis: Article 6(1)(a), consent.

Where we rely on legitimate interest you can object at any time using the contact address above.

4. Cookies

Some cookies are necessary for the site to work. These are set by our hosting platform and do not require your consent.

We also use Google Analytics to understand how the site is used and which pages people find useful. Analytics cookies are only set after you accept them in our cookie banner. If you reject, no analytics cookies are set. Google Analytics sets cookies named _ga and _ga_G-ZXH8X207LX, which distinguish visitors and measure how the site is used, and which last up to two years.

You can change or withdraw your choice at any time using the Cookie settings control at the bottom of any page. You can also block or delete cookies through your browser settings. Blocking essential cookies may stop parts of the site working. Our contact form and booking providers may set their own cookies when you interact with a form or book a call.

5. Who we share it with

We do not sell your personal data.

We share it with service providers who process it on our instructions:

  • Webflow, website hosting
  • LeadConnector / HighLevel, contact form handling and CRM
  • Google Workspace (Gmail), email and business correspondence
  • Calendly, meeting scheduling
  • Xero, accounting and invoicing
  • Google (Google Analytics), website analytics, only where you have consented

We may also disclose data to professional advisers, or where required by law or a regulator.

6. International transfers

We are established in the United Arab Emirates, which is not covered by an EU adequacy decision. Some of our providers also process data outside the European Economic Area.

Where we transfer personal data out of the EEA or the UK we rely on Standard Contractual Clauses approved by the European Commission, and the UK Addendum where relevant. You can request a copy using the contact address above.

7. How long we keep it

  • Enquiries and bookings that do not become clients: 24 months from last contact.
  • Client contract and billing records: 7 years after the engagement ends.
  • Client business contact details: duration of the engagement plus 24 months.
  • Unsuccessful job applications: 6 months from the decision, or 12 months if the candidate agrees to stay on file.
  • Email correspondence: 36 months from the last message, unless it forms part of a client record above. Emails containing Amazon Information follow the deletion rules in section 12 instead.
  • Marketing contacts: until you unsubscribe, after which we keep a suppression record only.
  • Server and security logs: 12 months.

You can ask us to delete your data sooner, and we will unless we are required to keep it.

8. Your rights

If you are in the EEA or UK you can ask us to:

  • Tell you what we hold about you and give you a copy
  • Correct anything inaccurate
  • Delete it, where we are not required to keep it
  • Restrict how we use it
  • Send it to you, or to someone else, in a machine readable format
  • Stop processing based on legitimate interest
  • Stop sending you marketing, at any time, with no exceptions

You can also withdraw consent at any time, which does not affect processing already carried out.

Email hello@amzbees.com. We respond within one month, extendable by two further months for complex requests, and we will tell you if we extend.

9. Complaints

Tell us first and we will try to resolve it. You can also complain to a supervisory authority in the EEA or UK country where you live or work.

10. Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, contact us and we will delete it.

11. Security

We apply technical and organisational measures appropriate to the risk, including access controls, encryption in transit, and limiting access to people and providers who need it. No system is completely secure.

12. Amazon Information

When a client hires us to manage their Amazon account, we work inside their Seller Central and Amazon Ads accounts. Amazon calls the data in those accounts Amazon Information. This section explains how we handle it, in line with Amazon's Data Protection Policy, Amazon's Acceptable Use Policy, and our services agreement with each client.

How we get access

Each client grants every AMZ Bees team member their own user permissions in the client's Amazon account. We never request, receive, or store a client's Amazon account passwords.

Every team member uses a unique login. We do not use shared or generic accounts. Multi-factor authentication is required on every account that accesses Amazon Information.

Each person gets only the permissions their role needs. We review access every quarter, remove access within 24 hours when someone leaves or changes role, and train everyone with access on data protection and security at least once a year.

What we use it for

We use Amazon Information only to deliver the services the client has hired us for, such as advertising, listings, inventory, orders, returns, account health, and reporting. We do not use it for any other purpose.

Customer personal data

Some tasks, such as handling orders, returns, and buyer messages, involve Amazon customer personal data like names and delivery addresses. We use it only to complete those tasks, inside Amazon's own tools. Where we hold any of it, we keep it for no longer than 30 days after order delivery, unless the law requires longer.

Where it is stored

Reports and files we create from Amazon Information are stored in the client's own cloud workspace and shared with named team members only. We do not keep separate copies in our own systems.

Sharing

We do not sell Amazon Information. We do not share it with other clients or outside parties, and we do not combine it across clients to provide to anyone else. Where a client asks us to work with one of their own service providers, we share only what that task needs.

Deletion

When a client removes our access or the engagement ends, we delete any Amazon Information we hold within 30 days, unless the law requires us to keep it. We do the same within 30 days if Amazon asks us to.

Security incidents

If we detect any actual or suspected unauthorised access to Amazon Information, we notify Amazon within 24 hours and inform the affected client. Our designated incident contact is reachable at hello@amzbees.com.

13. Changes

We may update this policy. The current version is always on this page with the last updated date at the top.

14. Contact

AMZ Bees FZE, LLC, AMC Boulevard A Building, Ajman, United Arab Emirates. Email hello@amzbees.com

READY FOR THE agency that
actually moves The needle?

Book a FREE AUDIT