Data Protection Policy

How Rosetta Brands Limited collects, holds and protects personal data in compliance with UK GDPR 2018.

About this Privacy Policy

This Privacy Policy has been written to provide you with information about how Rosetta Brands Ltd ("Rosetta Brands", "we", "us", "our") collects and uses your personal data through your use of this website (https://www.rosettabrands.com) including any data you may provide when you otherwise use our services.

Please read this Privacy Policy carefully so that you understand how and why we use your personal data.

About us

Rosetta Brands is the data controller responsible for your personal data. We are a private limited company (company number 07234651), with our registered Office address at Barn 2 Island Farm Cartmell Lane, Nateby, Preston, England, PR3 0LU. We are registered as a data controller with the Information Commissioner's Office, and our registration number is ZA563356.

We aim to process information about you fairly, lawfully and in a transparent manner.

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights, please contact us using the information provided in the 'Contact details' section below.

Types of personal data we collect about you

We collect and process different types of personal data depending on how you interact with our website.

a) Customer Data

When you schedule an introductory call with us through our website, we collect:

  • Identity Data: your first and last name;
  • Contact Data: your email address and telephone number;
  • Business Data: your company name, trading address and territory; and
  • Enquiry Data: details of your current Amazon position (for example, whether you are new to Amazon or an existing seller or vendor) together with any other information you choose to provide before or during the call.

If you engage our services, in addition to the above, we will also collect:

  • Account Data: information relating to your account with us, including correspondence and records of communication as well as any account related information generated in the course of providing our services;
  • Analytics Data: product information, inventory levels, historic sales data and forecasting data, which we extract from your Amazon account for retail analytics purposes.

b) Technical and Usage data

We automatically collect certain information when you use our website:

  • Device information: including internet protocol ("IP") address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access our website; and
  • Usage Data: information about how you use our website and services.

We may also collect, use and share aggregated data (such as statistical or demographic data). Aggregated data is not considered personal data as it does not directly or indirectly identify you.

How your personal data is collected

The information we hold will either have been provided by you (e.g. when you use our website or engage our services) or will have been collected by automated technologies as you interact with our website.

You may provide us with your personal data by completing online forms, scheduling or participating in introductory calls, or by corresponding with us via phone, email or otherwise, including in connection with the provision of our services and the ongoing management of your account.

As you interact with our website, we will automatically collect technical data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. Please see our Cookie Policy for further details.

How we use your personal data

We use your information to deliver our services and the specific functionality you request.

We will only use your personal data where the law allows us to do so. In most cases, we will use your personal data for the following (non-exhaustive) purposes:

  • Consent: where you have given clear consent for us to process your personal information for a specific purpose;
  • Performance of a Contract: where processing is necessary to perform a contract with you or to take steps at your request before entering into a contract;
  • Legitimate Interests: where processing is necessary for our legitimate interests (or those of a third-party) and your interests and fundamental rights do not override those interests; and
  • Legal Obligation: where we are required to process your personal data to comply with a legal obligation.

We may process your personal data on more than one of the lawful grounds listed above, depending on the specific purpose for which it is used.

Purposes for processing

We have set out below a description of the ways in which we use your information, and the legal basis on which we rely to do so.

Purpose / Activity Type of Information Lawful Basis
To operate, maintain and secure the website Technical and Usage Data Legitimate Interests (to ensure proper operation, security and performance of our website)
To manage enquiries and arrange introductory calls Customer Data (Identity, Contact, Business, Enquiry Data) Legitimate Interests (to respond to enquiries and assess potential client needs)
To onboard you as a customer and manage your account Customer Data (Identity, Contact, Business, Account Data) Performance of a Contract
To provide our services, including analysing and managing your Amazon related data Customer Data (Account Data, Analytics Data) Performance of a Contract
To communicate with you in relation to our services Customer Data (Contact Data, Account Data) Performance of a Contract; Legitimate Interests (to provide effective customer support)
To send service related communications Customer Data (Contact Data, Account Data) Performance of a Contract; Legitimate Interests (to operate and improve our services)
To improve and develop our website and services Technical and Usage Data; Customer Data; Analytics Data Legitimate Interests (to improve our website, services and user experience)
To send marketing communications (where permitted) Customer Data (Contact Data) Consent
To comply with legal and regulatory obligations Customer Data (as required) Legal Obligation

Cookies

A cookie is a small file of letters and numbers that we put on your device when you visit our website. We use cookies and similar technologies to support the functioning of our website, to improve your experience and where applicable, to analyse how our website is used.

Some cookies are strictly necessary for the operation of our website. For other cookies, including analytics and advertising cookies, we will request your consent before placing them on your device. For more detailed information please see our Cookie Policy.

Sharing of your personal data

We may share your personal data where necessary for the purposes set out in this Privacy Policy.

Sharing with service providers

We use a number of third party service providers to support the operation of our website and services. These may include providers of:

  • Scheduling and enquiry management tools;
  • Automation and integration platforms;
  • Customer relationship management (CRM) systems;
  • Hosting and infrastructure services;
  • Email and communications platforms; and
  • IT and support services.

We only permit these service providers to process personal data for specified purposes and in accordance with our instructions.

Other sharing

We may also share your personal data where necessary with our legal, professional and insurance advisers; government bodies and law enforcement agencies; and third parties in the event of a sale, transfer or merger of parts of our business.

International data transfers

We may transfer your personal data to third party service providers outside the United Kingdom, including to the United States and the European Economic Area (EEA). Where we do so, we take steps to ensure that a similar level of protection is afforded, including through standard contractual clauses, adequacy decisions, and the UK extension to the EU-US Data Privacy Framework where applicable.

Data security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed.

We limit access to your personal data to those with a legitimate business need to know, and they are subject to a duty of confidentiality. We have procedures to deal with any suspected personal data breach and will notify you and any applicable regulator where legally required.

How long we keep your personal data

We will retain your personal data only for as long as reasonably necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

By law, we have to keep basic information about our customers (including contact, identity, financial and transaction data) for six (6) years after they cease being customers for tax purposes. Where your information is no longer required, we will ensure it is disposed of in a secure manner.

Children's data

Our website and services are not intended for individuals under the age of 18, and we do not knowingly collect personal data from children. If we become aware that we have collected personal data from an individual under the age of 18 without appropriate consent, we will take steps to securely delete that information as soon as possible.

Our marketing communications

We may send you updates and information about our services via email where you have given us your consent. You can ask us to stop sending you marketing communications at any time by following the opt-out links in any marketing email or by contacting us directly.

Your rights

Under the UK GDPR and the Data Protection Act 2018, you have the following rights:

  • Right of access - You have the right of access to information we hold about you.
  • Right of rectification - You have the right to ask us to correct inaccurate data.
  • Right of erasure - You have a right to ask us to erase information about you where the data is no longer needed, or if you withdraw your consent, or if we are unlawfully processing your data.
  • Right to restriction of processing - In certain circumstances, you have a right to request that we refrain from processing your data.
  • Right of portability - In certain circumstances, you have a right to receive personal data you have provided to us in order to transfer it to another data controller.
  • Right to object - In certain circumstances, you have a right to object to our processing of your personal data.
  • Right to withdraw consent - Where processing is based on consent, you have the right to withdraw that consent at any time.

Please note that in certain circumstances these rights do not apply and we reserve the right to refuse to deal with your request. To exercise any of these rights, please contact us using the details below.

Contact details

If you have questions, concerns or requests regarding this policy or the use of your personal data, please contact us at admin@rosettabrands.com.

Complaints

If you are not satisfied with how we have handled your personal data, you have the right to make a complaint to the Information Commissioner's Office ("ICO") at www.ico.org.uk. Please make sure you have first raised your complaint with us before contacting the ICO. You can do so at admin@rosettabrands.com.

Changes to this Privacy Policy

This Privacy Policy was last updated in May 2026. We may update this Privacy Policy from time to time and encourage you to review it periodically.

Rosetta Brands Ltd — Registered in England & Wales — Company No. 07234651