Privacy and Data Handling Policy

Privacy and Data Handling Policy – Bubba Holding Inc.

At Bubba Holding Inc., we take data privacy and security seriously. This policy outlines how we collect, process, store, use, share, and dispose of data—including any information received from Amazon—in a secure and compliant manner.

1. Data Collection

We collect only the minimum Amazon Selling Partner data required to perform account audits and provide strategic recommendations. This may include sales data, advertising performance, listing details, and inventory information. Data is collected via secure API integration with the user’s explicit consent.

2. Data Processing and Use

Collected data is processed internally within secure systems for the sole purpose of generating personalized reports, insights, and performance improvement recommendations. We do not use Amazon data for any unrelated services, advertising, or analytics without prior consent.

3. Data Storage

All Amazon data is stored on encrypted servers with strict access controls. Data is housed in secure cloud environments with compliance standards such as ISO 27001 and SOC 2, depending on the infrastructure provider.

4. Access and Sharing

Access to Amazon data is limited to authorized personnel only, following role-based access controls (RBAC). We do not sell, rent, or share Amazon data with third parties. If any external processing is needed (e.g., for analytics), it is governed by a formal data processing agreement (DPA).

5. Data Retention and Disposal

Amazon data is retained only for as long as necessary to deliver services to the user or as required by law. Users may request deletion of their data at any time. Upon service termination, all related Amazon data is securely deleted in accordance with our data destruction policy.

6. Security Measures

We use multi-factor authentication (MFA), encrypted data transmission (TLS), endpoint protection, DLP systems, and 24/7 monitoring to safeguard all sensitive data.