Policy
Last updated: September 2026
On this page
1. Who we are
2. The short version
3. Information we collect
4. Why we use your information
5. How we protect information
6. Amazon selling partner data
7. Who we share information with
8. Storing information outside UK
9. How long we keep information
10. Your rights
11. Marketing emails
12. Cookies
13. Children
14. Changes to this policy
15. Complaints
Have a question about privacy? Add your contact details here.
CONVERTSTRIDE — Privacy Policy — September 2026. PART 1: PRIVACY POLICY.
1. Who we are
ConvertStride is a UK business selling digital templates and toolkits for Amazon sellers, and providing Amazon advertising consultancy. For the purposes of UK data protection law, the data controller is: ConvertStride, Ascot House, 246 Court Oak Road, Harborne, Birmingham B32 2EG, United Kingdom. Email: info@convertstride.com. ConvertStride is owned by Johanne Soylev who operates as a sole trader and is currently not VAT registered. If you have any question about this policy, or about how we handle your information, use the email address above. We aim to reply within five working days.
2. The short version
We collect very little. If you download a free checklist we hold your email address so we can send it to you, and so we can send you occasional notes about Amazon advertising until you tell us to stop. If you buy a toolkit, our storefront provider handles the payment and passes us a record of the order. We use Google Analytics to understand how the site is used, but only if you agree to it when you first arrive. We do not sell your information to anyone, we run no advertising trackers, and you can ask us to delete everything we hold about you at any time. Buying and using a toolkit is different from engaging us as a consultant. The toolkits are documents you use on your own computer, and using them does not connect us to your Amazon account or send us any account data. Consultancy is different: with your written authorisation we may connect to your Amazon account through the Selling Partner API to pull the reports the work needs. Section 6 sets out exactly what we access, how it is protected, and when it is deleted.
3. What information we collect
Information you give us: your email address, and your first name if you provide it, when you request a free resource or subscribe to our email list; your name, email address and billing country when you buy a product; and anything you choose to include when you contact us by email or through a form on the site. Information we receive from our providers: a record of your order from our storefront provider — the product bought, the amount, the date, your email address and your billing country. We never see or hold your full card details. Aggregate information about how the website is used, such as page views and referring sources. Information collected automatically: standard technical information including IP address, browser type and device type, used to keep the site secure and working. Where you have agreed to it, Google Analytics information about the pages you view, how you arrived, roughly where you are, and whether you completed an action such as requesting the checklist.
4. Why we use your information, and our lawful basis
To send you a free resource you asked for, and occasional email updates. Lawful basis: your consent. To supply a product you have bought and provide support for it. Lawful basis: performance of a contract with you. To keep records required by law, including tax and accounting records. Lawful basis: legal obligation. To keep the website secure, prevent fraud, and understand in general terms how the site is performing. Lawful basis: our legitimate interests in running a secure and viable business, balanced against your interests. To understand how the website is used. Lawful basis: your consent, given through the cookie banner when you first visit. We do not use your information for automated decision making or profiling. We do not sell, rent or trade your information to third parties, and we do not share it for anyone else’s marketing.
5. How we protect your information
The website runs over HTTPS with a valid TLS certificate. Access to our systems is limited to the business owner and protected by strong, unique credentials with multi factor authentication where the provider supports it. Payment card data is never received or stored by us. It is handled entirely by our payment provider, which maintains PCI DSS compliance. Our providers hold personal data in encrypted form in transit and at rest. We hold the minimum information needed for the purpose, and delete it when that purpose ends. If a personal data breach occurs that is likely to result in a risk to your rights, we will report it to the Information Commissioner’s Office within 72 hours of becoming aware of it, and tell you directly where the law requires it. Additional and stricter controls apply to Amazon selling partner data accessed during consultancy work. Those are set out in section 6.
6. Amazon selling partner data
This section explains how we handle data from Amazon selling accounts. It applies to consultancy clients, not to people who simply buy a toolkit. Toolkit customers: no account access at all. Our toolkits are Word documents. You run the reports yourself inside your own Seller Central, Vendor Central or Amazon Ads console, and the files stay on your own computer or in your own storage. Buying or using a toolkit gives us no access to your account and sends us none of your data. Consultancy clients: authorised Selling Partner API access. Where you engage us for advisory work, we may access your Amazon selling account data through reports you export and send us yourself, and through the Amazon Selling Partner API, where you have authorised ConvertStride as a service provider in your own Amazon account. We follow the Amazon Solution Provider Portal Agreement, the Acceptable Use Policy and the Amazon Data Protection Policy.
Access exists only where you have granted it yourself in Seller Central or Vendor Central. We cannot self authorise. We never ask for, and you should never give us, your Amazon login credentials. You can revoke our access at any time from your own account. We request the minimum set of Amazon roles the agreed work requires. We access advertising, catalogue, traffic, sales performance and reporting data at product and account level. We do not request or hold restricted roles giving access to Amazon customer personally identifiable information, and we do not access customer names, addresses, contact details or order level buyer data. Where a client sends us an export themselves, we ask that customer level personal information is removed first; if any reaches us, we delete it.
We use client account data solely to deliver the work you have engaged us to do. We do not use it to train models, benchmark other clients, inform our own selling, or for any purpose you have not agreed. Data is encrypted in transit using TLS 1.2 or higher, and encrypted at rest to AES 256. Access is restricted to named approved personnel with a documented business need, on managed devices, under least privilege. API credentials are held in a secure key store, never in plain text, and rotated at least annually. We permanently and securely delete all Amazon information within 30 days of Amazon requiring deletion, you revoking authorisation or ending access, us determining we are no longer authorised, or our participation in Amazon’s service provider programme ending. In no case is data retained beyond 18 months, unless a legal, tax or regulatory obligation requires it.
7. Who we share your information with
We use a small number of established providers to run the business. Each acts as a processor on our behalf, under contract, and may use your information only as instructed: Payhip — storefront and merchant of record for product sales; Stripe — payment processing; Framer — website hosting; Mailchimp — email list management and delivery; Google Workspace — business correspondence. None of these providers receives Amazon selling partner data. That data is handled as described in section 6 and is not passed through our storefront, email or website providers. We may also disclose information where we are required to by law, by a regulator, or by a court order.
8. Storing information outside the UK
Some of our providers are based outside the United Kingdom, or store data outside it. Where that happens, the transfer is covered either by UK adequacy regulations for the country concerned, or by the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate technical safeguards.
9. How long we keep information
Email subscribers: until you unsubscribe or ask us to delete you, and for 12 months after that so we do not add you back by mistake. Customer and order records: six years from the end of the relevant tax year, as UK tax law requires. Enquiries and correspondence: 24 months from the last contact. Amazon selling partner data from consultancy engagements: as set out in section 6, deleted within 30 days of authorisation ending and never held beyond 18 months. Website technical logs: 12 months.
10. Your rights
Under UK data protection law you have the right to ask what personal data we hold about you and receive a copy of it; have inaccurate information corrected; ask us to delete your information where we have no overriding legal reason to keep it; ask us to restrict how we use it, or object to us using it; receive your information in a portable, machine readable format; and withdraw consent at any time. To exercise any of these, email hello@convertstride.com. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.
11. Marketing emails
We only email you marketing if you have asked us to, or if you have bought from us and we are sending you a closely related update. Every email carries a one click unsubscribe link, and we act on unsubscribes immediately. We do not pass your email address to anyone else to market to you.
12. Cookies
A cookie is a small file placed on your device by a website. We use strictly necessary cookies to keep the site secure, remember your cookie choice, and let the checkout function. Analytics cookies are not necessary, so we set them only if you agree. We use Google Analytics to see how many people visit, which pages they read, how they found us, and which pages lead to someone requesting the checklist. It sets cookies named _ga and ga followed by a property identifier, which last up to two years. We run no advertising or retargeting pixels on this site. You can withdraw or change your consent at any time by using the cookie settings link in the site footer. Rejecting these cookies does not limit anything on the site.
13. Children
Our products are sold to businesses and to adults. The website is not directed at anyone under 18, and we do not knowingly collect information about children.
14. Changes to this policy
We may update this policy as the business changes. The version and date at the top of this page always show the current version. Material changes affecting how we use your information will be notified to email subscribers before they take effect.
15. Complaints
If you are unhappy with how we have handled your information, please contact us first at info@convertstride.com so we can put it right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk.
THE CONVERTED
Email address
Subscribe to The Converted