Privacy Policy

In short: we collect only what we need to answer enquiries and deliver our services, we never sell personal data, and data accessed from Amazon or other platforms on a seller’s behalf is used only for that seller’s business and protected as described in section 5.

1. Who we are

The controller of your personal data is Jump Turn Media s.r.o., Holečkova 789/49, 150 00 Praha 5, Czech Republic, Company ID (IČO) 24851418, VAT ID CZ24851418, registered in the Commercial Register kept by the Municipal Court in Prague, file C 201580 (“Jump Turn Media”, “we”, “us”).

For any privacy question or request, contact us at info@jumpturnmedia.com or by post at the address above.

2. Scope

This policy applies to:

• this website, jumpturnmedia.com;
• our communications with prospective and existing clients, suppliers and partners;
• our e-commerce consulting and management services; and
• software applications we operate that connect to third-party platforms, including the Amazon Selling Partner API (SP-API) and Amazon Ads API.

It is written to meet the EU General Data Protection Regulation (GDPR), Czech Act No. 110/2019 Coll. on personal data processing, and the data protection requirements of the platforms we integrate with.

3. Data we collect

Information you give us

• Enquiries: your name, email address and message when you use our contact form or email us.
• Client relationship data: business contact details, billing information, contracts and project correspondence.
• Account access you grant: where you authorise us to work in your seller, advertising, store or analytics accounts, we process the data those accounts contain as needed for the agreed work.

Information collected automatically

• Server logs: our hosting provider records IP address, browser type, requested pages and timestamps to keep the site secure and running.
• Fonts: this site loads fonts from Google Fonts, which means your browser connects to Google servers and shares your IP address with Google.

We do not use analytics, advertising or tracking cookies on this website. WordPress may set strictly necessary cookies, for example for logged-in site administrators. If we introduce non-essential cookies in future, we will ask for your consent first and update this policy.

4. Why we use your data and on what legal basis

Purpose	Legal basis (GDPR Art. 6)
Replying to enquiries and preparing proposals	Steps prior to a contract (6(1)(b)) and our legitimate interest in responding to business contacts (6(1)(f))
Delivering consulting and management services	Performance of a contract (6(1)(b))
Invoicing, accounting and tax records	Legal obligation (6(1)(c))
Website security and operation	Legitimate interest (6(1)(f))
Occasional updates to existing clients about related services	Legitimate interest (6(1)(f)); you can opt out at any time

We do not make decisions about you based solely on automated processing, including profiling, that produce legal or similarly significant effects.

5. Amazon and other marketplace data

Some of our services and internal tools connect to Amazon through the Selling Partner API and Amazon Ads API, and to other sales platforms, with the explicit authorisation of the account owner. When they do, the following commitments apply.

What we access and why

• We request only the minimum data and API roles needed for the functions the seller has authorised, such as sales and traffic reporting, inventory and restock planning, listing management, fee and profit analysis, and advertising management.
• Marketplace data is used solely to provide those services to the seller that authorised access, and for no other purpose.
• We do not request access to restricted buyer personal information (such as names, shipping addresses or contact details) unless a specific, authorised function strictly requires it.

What we never do

• We do not sell, rent or disclose marketplace data to third parties, except to service providers who process it on our behalf under written agreements, or where required by law.
• We do not use marketplace data, or any buyer information within it, for marketing, to contact buyers outside the platform, or to build profiles of buyers.
• We do not combine one seller’s data with another’s, or use it to benefit any other client.

How we protect it

• Data is encrypted in transit (TLS 1.2 or higher) and at rest (AES-256 or equivalent). API credentials and tokens are stored encrypted and never in source code.
• Access is limited to authorised personnel on a need-to-know basis and protected with unique accounts, strong passwords and multi-factor authentication.
• Systems are kept patched, access is logged, and we review permissions regularly.
• If we become aware of a security incident affecting Amazon data, we notify Amazon at security@amazon.com within 24 hours and inform the affected seller without undue delay. Breaches involving personal data are also reported to the Czech data protection authority where required.

Retention and deletion

• Marketplace data is kept only for as long as needed to provide the authorised services.
• If buyer personal information is ever processed, it is retained no longer than 30 days after order delivery and only for the purpose it was obtained for, unless a longer period is required by law (for example, tax rules), in which case it is held securely and used only for that purpose.
• When a seller revokes our authorisation or ends our engagement, we stop accessing their account and delete their marketplace data within 90 days, unless the law requires us to keep it.

Sellers can revoke our access at any time in Seller Central under Apps and Services → Manage Your Apps, or by contacting us. Our handling of Amazon data also follows Amazon’s Acceptable Use Policy and Data Protection Policy.

6. Who we share data with

We share personal data only where necessary, with:

• Service providers acting on our instructions: website hosting, email and office software (Google Workspace), cloud infrastructure, and accounting software;
• Professional advisers such as accountants, auditors and lawyers, under confidentiality obligations;
• Platforms you ask us to work in, such as Amazon, Shopify, Google or Meta, as part of delivering the service; and
• Public authorities where we are legally required to.

We never sell personal data.

7. International transfers

Some of our providers process data outside the European Economic Area, including in the United States. Where this happens, we rely on an adequacy decision (such as the EU–US Data Privacy Framework) or on the European Commission’s Standard Contractual Clauses, together with additional safeguards where appropriate.

8. How long we keep data

Data	Retention
Enquiries that do not lead to a contract	Up to 24 months after the last contact
Client contracts and correspondence	Duration of the relationship plus up to 4 years for legal claims
Invoices and accounting records	10 years, as required by Czech tax and accounting law
Marketplace data	As described in section 5
Server logs	Typically up to 30 days, as set by our hosting provider

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased where there is no longer a reason to keep it;
• restrict or object to processing, including processing based on legitimate interests;
• receive your data in a portable format; and
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email info@jumpturnmedia.com. We respond within one month. You also have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz, or with the supervisory authority in your country.

10. Children

Our website and services are intended for businesses and are not directed at children under 16. We do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy to reflect changes in our services or the law. The effective date at the top shows when it was last revised. Significant changes will be communicated to clients directly.

12. Contact

Jump Turn Media s.r.o.
Holečkova 789/49, 150 00 Praha 5, Czech Republic
info@jumpturnmedia.com