PRIVACY POLICY

KEYSTONE GROWTH PARTNERS. Last updated 7th August 2026.

1. Who We Are

Keystone Growth Partners ("Keystone", "we", "us") is an Amazon marketing and account management agency registered in India at 303 Greenwich A Block SJR Bluewaters3rd Cross, Silver County Road, Harlur Bengaluru 560068. Our company identification number GSTIN is 29AEWPV2319F1ZW

We provide advertising management, listing optimization, and account management services to brands selling on Amazon marketplaces in the United States , Canada , EU and the United Kingdom.

For any question about this policy or about how we handle your data, contact:

  • **Email:vj@keystone-growthpartners.com

  • Data protection contact: Vijay Venkateswaran, Founder

  • **Postal address:303 Greenwich A Block SJR Bluewaters3rd Cross, Silver County Road, Harlur Bengaluru 560068

2. Scope of This Policy

This policy covers two distinct categories of data:

  1. Website visitor data — information collected when you browse our website or book a strategy call.

  2. Client account data — information we access inside a client's Amazon Seller Central, Amazon Advertising, or Solution Provider Portal account when that client has authorized us to act on their behalf.

Section 4 deals specifically with client account data and describes our obligations under Amazon's Acceptable Use Policy and Data Protection Policy.

3. Website Visitor Data

What we collect. Name, email address, company name, phone number, and any information you volunteer when you submit a form or book a strategy call. We also collect standard analytics data including IP address, browser type, referring page, and pages viewed.

Why we collect it. To respond to your enquiry, to prepare an account audit if you request one, and to understand how our website is used.

Legal basis. Where UK or EU data protection law applies, we rely on legitimate interest for analytics and on your consent for marketing communications.

How long we keep it. Enquiry data is retained for 24 months from your last contact with us, unless you ask us to delete it sooner. Analytics data is retained for 14 months.

Who we share it with. Our website is hosted by Framer. Scheduling is handled by Calendly. Email is handled by Google Mail. We do not sell your data to anyone, and we do not share it with third parties for their own marketing purposes.

4. Client Amazon Account Data

This section describes our practices when a client authorizes us to access their Amazon selling account.

4.1 What We Access

When a client grants us role-based access through Amazon's Solution Provider Portal, we access only the data required to deliver the services in that client's signed agreement. This typically includes:

  • Advertising campaign structures, bids, budgets, and targeting

  • Advertising performance reports, including search term, placement, and advertised product reports

  • Business Reports covering sales, sessions, and conversion metrics

  • Listing content, catalog data, and inventory levels

  • Account Health metrics, policy notifications, and performance notifications

  • Seller Support case correspondence relating to the client's account

4.2 What We Do Not Access

We do not access, request, retrieve, or store:

  • Bank account details, deposit methods, or disbursement information

  • Tax identification information or tax documents

  • Login credentials for Amazon accounts (we operate exclusively through authorized role-based access, never through shared passwords)

  • Buyer personally identifiable information beyond what is unavoidably visible when resolving an order-specific support case

We never download, export, or retain bulk buyer PII under any circumstances.

4.3 Purpose Limitation

Client account data is used solely to deliver contracted services to that client. We do not use one client's data to benefit another client, we do not aggregate client data into benchmarks or industry reports, and we do not use client data to inform our own product sourcing or retail activity.

4.4 Access Control

Keystone has five team members. Access to any given client account is granted on a need-to-know basis and only to the team members assigned to that client's engagement. Every team member holds an individually named Amazon user account under our Solution Provider Portal registration. We do not share logins. Multi-factor authentication is mandatory on every account that touches client data.

Access rights are reviewed quarterly. When a team member leaves Keystone or is reassigned, their access is revoked within 24 hours.

4.5 Third-Party Tools

We use the following third-party tools in the delivery of our services. Each has its own privacy and security practices, which we assess before use:

Tool Purpose Data accessed Helium 10 Keyword research, listing optimization, analytics Listing data, search term data, sales data DataDive Advertising and keyword analysis Advertising reports, search term reports Sellerboard Profitability analysis and reporting Sales, fees, cost, and settlement data

Clients authorize these connections themselves through Amazon's approval flows. We do not connect a client's account to any tool without their knowledge, and we disconnect all tool integrations at the end of an engagement.

4.6 Storage, Retention and Deletion

Working files, reports, and exports are stored in access-controlled cloud storage on [GOOGLE WORKSPACE / SPECIFY PROVIDER]. Access is restricted to assigned team members.

We retain client account data for the duration of the engagement plus 90 days, after which working files are deleted. Where a client requests deletion sooner, we comply within 30 days. Documents we are required to keep for legal, tax, or contractual reasons are retained for the applicable statutory period and for no other purpose.

On termination of an engagement, we: revoke our role access in Solution Provider Portal, disconnect all third-party tool integrations, deliver any client-owned working files on request, and delete our copies within 90 days.

4.7 International Transfers

Keystone is based in India and our clients sell in the United States, Canada, EU and the United Kingdom. Client account data is therefore accessed from and processed in India. Where UK GDPR applies to a client engagement, transfers are made under the UK International Data Transfer Agreement or equivalent contractual safeguards, which form part of our client services agreement.

4.8 Security Measures

  • Multi-factor authentication on all accounts with access to client data

  • Full-disk encryption on all devices used for client work

  • Password manager use mandated for all team members; no credential sharing

  • Quarterly access reviews and immediate revocation on offboarding

  • Documented risk assessment process, reviewed annually

  • Documented incident response plan with a 24-hour notification commitment to Amazon

  • Confidentiality obligations in every employment and contractor agreement

4.9 Security Incidents

If we become aware of a security incident affecting client account data, we will notify the affected client and Amazon within 24 hours of confirming the incident, in line with Amazon's Data Protection Policy. Our incident response plan governs detection, containment, investigation, and post-incident review.

5. Your Rights

Depending on where you are located, you may have the right to request access to the personal data we hold about you, request correction or deletion, object to or restrict processing, request a portable copy, and withdraw consent to marketing at any time.

To exercise any of these rights, email vj@keystone-growthpartners.com. We respond within 30 days. If you are in the UK and are not satisfied with our response, you may complain to the Information Commissioner's Office at ico.org.uk.

6. Cookies

Our website uses cookies for essential site function and for analytics. You can control cookies through your browser settings.

7. Changes to This Policy

We review this policy annually and whenever our services or data practices materially change. The version number and date at the top of this page reflect the current version. Material changes are communicated to active clients directly.

Keystone Growth Partners is an independent service provider. We are not affiliated with, endorsed by, or an agent of Amazon.com, Inc. or its affiliates. Amazon, Seller Central, and related marks are trademarks of Amazon.com, Inc.