This notice explains how Shenzhen Shuidishichuan E-Commerce Co., Ltd. (深圳水滴石穿电子商务有限公司) handles information on this public website.
What this notice covers
This notice covers visits to sdscbusiness.com, contact emails and information handled in seller or advertising integration services agreed with our company. This public website does not provide sign-in, Amazon authorization callbacks, payments or API operations. Visiting it does not retrieve seller data. Each integration is limited to the agreed functions and your authorization.
Information from this website
This website has no submission forms, advertising trackers or analytics scripts, and we do not set marketing cookies. You do not need an account to read its pages. Hosting, content delivery and security services may process request information or use technologies necessary for security.
Our hosting infrastructure may record technical access logs, such as an IP address, requested page, request time, browser information, and response status. These records may be used to deliver the website, investigate faults, and address abuse or security issues. They are not used by us for advertising profiles or behavioral advertising.
Information you send us
If you email us, we receive the information you choose to include, such as your name, email address, company, and the content of your enquiry. We use it to respond, discuss requested services, investigate a reported issue, or handle a privacy or deletion request. Please do not send Amazon passwords, API credentials, authorization tokens, or unnecessary personal information.
We keep correspondence and associated records only as needed to handle the enquiry, maintain necessary business records, resolve related issues, or meet applicable legal obligations. When information is no longer needed for these purposes, we delete it. We do not use an enquiry to enroll you in a marketing mailing list.
Service providers and access
This website uses AWS hosting and Cloudflare content delivery and security services; our contact mailbox uses Zoho Mail. These providers process access records or correspondence as needed to deliver those services. If a service project needs other processors, we explain their purpose. Internal access is limited to personnel who need it for the relevant task, and sellers or advertisers receive only service data they are entitled to access. We do not sell this information, share it with other clients for unrelated purposes, or use Amazon data for third-party ad targeting or AI model training. Legally required disclosures are limited to the applicable requirement.
Seller integrations & SP-API data
For agreed and authorized seller integration services, access is limited to the Amazon data needed for the relevant functions. Categories and purposes include:
- Seller identifiers, marketplace identifiers and authorization scope: identify authorized stores and match project settings.
- Product, SKU, listing and pricing information: display products, maintain listings or perform seller-authorized pricing actions.
- Order status, item quantities, inventory and fulfillment information: track orders, reconcile stock and support agreed fulfillment workflows.
- Sales, FBA and financial transaction reports: prepare business reports and support operational or transaction reconciliation.
- Authorization tokens and necessary operation records: maintain authorized connections, troubleshoot errors and track actions.
This scope does not automatically include restricted personal data such as buyer names or shipping addresses. Functions requiring such data need the applicable restricted permissions, a defined purpose and appropriate protections first. We do not ask you to submit Amazon passwords or authorization tokens through this website or by email.
Data is used only to deliver agreed services to the relevant authorized customer. It is not published on this website, shared across customers or used for unrelated profiling. Seller authorization takes place through Amazon’s official authorization flow and does not replace separate advertiser authorization.
Advertising integrations
Advertising services use a separate Amazon Ads API integration and advertiser authorization. This public website does not provide advertising account authorization or API operations. Delivery of a particular function requires the corresponding permissions, implementation and account authorization.
The advertising integration uses only the data and permissions needed for the functions an advertiser expressly authorizes. Depending on those functions, this may include:
- Advertising account and profile identifiers, marketplace, and account settings needed to identify the authorized account.
- Campaign, ad group, advertised product, keyword, targeting, bid, and budget information needed to display settings and carry out authorized management actions.
- Performance reports, including impressions, clicks, spend, and attributed conversion or sales metrics, needed to present and analyze advertising performance.
- Authorization tokens needed to maintain the connection and records of authorized operations needed to investigate errors.
These data will be used to provide the approved, authorized advertising functions. They will not be sold, published on this website, or used for unrelated profiling. Access will be limited to the minimum necessary permissions and personnel. Amazon sign-in will take place through Amazon's authorization process; we will not ask for or collect an Amazon password.
Before this integration becomes available, we will publish the applicable data-handling details and authorization instructions, including how to withdraw access. You may also email us to request withdrawal or deletion of data associated with your authorization. Following appropriate verification, we will stop the relevant processing and delete information no longer needed for an authorized purpose, except information we must retain under applicable law. Any legally required retained information will be limited to that purpose.
Storage, protection & deletion
This public website does not store seller API data or receive API credentials. Website infrastructure processes access records and the email service stores correspondence. Integration service data is handled by the relevant service backend, not transmitted or displayed through this public website.
Before handling Amazon data, the relevant service must implement access permissions, protection in transit and storage, credential management and incident handling appropriate to its purpose, and explain those arrangements to the customer. This policy is not a claim of security certification or a substitute for the controls a particular system must implement.
Access logs are retained for website operation, security investigation and necessary related records. Correspondence and business records are retained only as needed to handle requests, fulfill agreed services and meet necessary legal obligations. Integration data is retained only for the authorized purpose and the period allowed by applicable Amazon policies. When authorization is revoked, service ends, a deletion request is verified or the purpose ends, we stop the relevant collection and delete data and authorization tokens no longer needed.
If backup copies need to expire through a backup cycle, we explain the relevant arrangements when handling the request and prevent continued everyday use. Legally required retained records have restricted access and purposes; we explain any reason preventing immediate deletion. Request outcomes are communicated by email.
Privacy, correction, and deletion requests
Email admin@sdscbusiness.com to ask about your information, request a correction or deletion, or raise a privacy concern. Describe your request and provide enough context for us to locate the relevant correspondence or service relationship. We may reasonably verify that the request concerns you or an organization you are authorized to represent.
You may revoke seller or advertiser authorization in the relevant Amazon application authorization settings, or email us to stop the corresponding access and handle your data. Revoking authorization and deleting historical data are different actions; specify the requested data scope when asking for deletion. We acknowledge and follow requests in the same email thread, explain any additional information needed, and communicate the outcome or any applicable retention limitation. For a vulnerability or suspected data misuse, use the process on our security and data requests page.
Changes to this notice
We will update this page when the website or our information handling changes. The date above identifies the current version. New or changed seller and advertising integration functions will be accompanied by the information needed to understand and authorize their data use.