Amazon Ads API Privacy Notice | Martin Case Limited

1. What this notice covers

This notice explains how Martin Case Limited ("Martin Case", "we", "us") uses the Amazon Ads API when a client authorises us via Login with Amazon (LwA) to access their Amazon Ads advertiser account.

This notice applies to client advertiser account data accessed through the Amazon Ads API for reporting, campaign management, and optimisation services.

2. Who we are

Martin Case Limited is a multichannel growth consultancy, incorporated and registered in England and Wales with company number 13905306, whose registered office is at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ.

We act on behalf of our clients (advertisers) to provide reporting, campaign management, and advertising optimisation services across Amazon and other marketplaces.

For Amazon Ads API data, we process advertiser account data on our clients' instructions to deliver agreed services.

Contact: hello@martincase.co.uk

3. What data we access

With client consent, we may access data from your Amazon Ads advertiser account, including:

Campaign entities and settings (e.g. campaigns, ad groups, ads/creatives, keywords/targets, bids, budgets, placements, and related configuration)
Performance and reporting data (e.g. impressions, clicks, cost, attributed sales, and other reporting metrics made available via the API)
Profile information (e.g. advertiser account IDs and marketplace profile data)

We do not request or process customer end-user personal data via the Amazon Ads API as part of this integration.

4. What actions we may take

If you grant us access, we may use the API to:

Retrieve reports and account/campaign configuration
Create, update, pause, or optimise campaign entities and settings (such as bids, budgets, keywords/targets, ads/creatives), in line with the services you have engaged us to provide

5. Why we use this data

We use Amazon Ads API data to:

Provide campaign reporting and insights
Optimise advertising performance and manage campaigns on your behalf
Generate analytics and dashboards to support decision-making
Support troubleshooting and client support relating to Amazon Ads activity

6. Legal basis for processing (UK GDPR)

Where any data accessed via the Amazon Ads API constitutes personal data, we process it on the basis of:

Legitimate interests — to manage and optimise advertising campaigns on behalf of our clients
Contract performance — where processing is necessary to fulfil the services agreed with our clients
Consent — where you have authorised access via Login with Amazon

7. Where data is stored and processed

We store and process Amazon Ads API data using systems hosted in the United Kingdom and/or the European Economic Area. Access is restricted to authorised Martin Case Limited personnel who require it to provide services to you.

8. Data retention and deletion

For active clients, we retain Amazon Ads API data for up to 24 months to provide reporting and optimisation services.

If you stop working with Martin Case Limited, we will delete or irreversibly anonymise client-specific Amazon Ads API data within 30 days, unless we are required to retain certain records for legal, regulatory, or accounting purposes.

If Amazon requests deletion or return of data, we will comply promptly and within the timeframes specified by Amazon's Data Protection Policy.

9. Data sharing

We do not sell Amazon Ads API data.

We do not share Amazon Ads API data with third parties except:

Where required by law or regulation
With service providers we use to operate our business and deliver services, and only where necessary for the purposes described in this notice, subject to appropriate data protection agreements

We will not disclose information obtained through the Amazon Ads API on behalf of one client to any other client or outside party.

10. Security

We implement appropriate technical and organisational measures to protect the confidentiality, integrity, and availability of data accessed via the Amazon Ads API, including:

Access controls and unique user identification
Encryption of data in transit (HTTPS/TLS)
Regular review of access permissions
Incident response procedures in line with Amazon's Data Protection Policy requirements

11. Your rights

If any data we process via the Amazon Ads API relates to you as an individual, you may have rights under the UK GDPR, including:

Right of access
Right to rectification
Right to erasure
Right to restrict processing
Right to data portability
Right to object

To exercise any of these rights, please contact us at hello@martincase.co.uk.

12. How to revoke access

Access granted via Login with Amazon can be revoked at any time through your Amazon account settings (connected applications/permissions) or by contacting us at hello@martincase.co.uk.

13. Changes to this notice

We may update this notice from time to time. The latest version will always be available at this URL.

14. Contact us

Martin Case Limited
hello@martincase.co.uk
Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
Correspondence address: 86 Ham Lane, Ferndown, Dorset, BH22 9DP