The Data Controller is Mercurius BusinessLabs Ltd., with registered office at Office 1, Southend Block B, Triq ta' Gidwet, Marsaskala MSK 3619, Malta.
Company Details:
- Company No. C 117579
- Jurisdiction: Malta
Contacts:
- Email: info@businesslabsltd.com
- Privacy Email: privacy@businesslabsltd.com
For any request regarding the processing of your personal data, you can contact us using the above details.
Navigation data:
The IT systems responsible for the site's operation acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
Data provided voluntarily:
- Name and surname
- Email address
- Phone number
- Company name
- Content of messages sent via contact form
- CV and data contained in applications (Careers section)
Data from the seller's Amazon account (via Selleee / Selling Partner API):
For users of our Selleee product who authorise access to their Amazon account through Amazon's official APIs (Selling Partner API), we process on their behalf: inventory and stock data (FBA), shipping and goods movement data, order and sales data in aggregate form without personally identifiable buyer information, prices, costs and product financial/accounting data. We do not request, process or store personal data of Amazon buyers (names, shipping addresses, contact details).
Cookies and tracking technologies:
We use technical cookies and, with consent, profiling cookies. For more information, see our Cookie Policy.
Your personal data is processed for the following purposes:
a) Provision of requested services
- Response to contact requests and information
- Management of job applications
- Provision of consulting services
- Provision of the Selleee service: synchronisation of inventory, prices and sales data through Amazon's APIs, generation of reports and analyses
b) Legal obligations
- Accounting, tax and administrative obligations
c) Direct marketing (with consent)
- Sending newsletters and commercial communications
- Information on new services and projects (e.g., Selleee, Digiteee)
d) Anonymous statistical analysis
- Improvement of our services
- Aggregate analysis of site traffic
The processing of personal data is based on the following legal bases:
- Explicit consent (Art. 6.1.a GDPR): for sending commercial communications and using profiling cookies
- Contract execution (Art. 6.1.b GDPR): for providing requested services
- Legal obligation (Art. 6.1.c GDPR): for tax and accounting obligations
- Legitimate interest (Art. 6.1.f GDPR): for site security and fraud prevention
We use Google Analytics 4 (measurement G-6K1048QPW1) to understand, in aggregate form, how the site is used.
- Legal basis: explicit consent (Art. 6.1.a GDPR), collected through the cookie banner. No Google script is loaded before consent.
- Anonymisation: the IP address is anonymised (`anonymize_ip`) and is not used to identify you.
- No advertising: we use no advertising or profiling cookies, no remarketing and no ad signals.
- Consent Mode v2: consent settings are denied by default and updated only after your choice.
- Recipient: Google Ireland Limited, acting as data processor.
- Retention: the statistics cookies `_ga` and `_ga_G-6K1048QPW1` last 2 years; your consent choice is stored for 6 months.
You can withdraw or change your consent at any time from the "Cookie preferences" link in the footer. Cookie details are in the Cookie Policy.
Your personal data may be communicated to:
Internal subjects:
- Employees and collaborators authorized for processing
External subjects:
- Hosting and cloud service providers
- Infrastructure and database providers (e.g., Supabase, EU region)
- Email marketing services (e.g., Klaviyo)
- Analytics tools (e.g., Google Analytics)
- Consultants and professionals (accountants, lawyers)
For data originating from the seller's Amazon account, Mercurius BusinessLabs Ltd. acts as data processor on behalf of the seller (controller), based on the authorisation granted. Such data is not shared with other sellers or with third parties for commercial purposes.
Extra-EU transfers:
Some providers may process data outside the EU. In such cases, the transfer is based on adequate guarantees (Standard Contractual Clauses, adequacy decisions).
Personal data is retained for the time strictly necessary for the purposes for which it was collected:
- Contact data: 24 months from the request
- Contractual data: 10 years from termination (tax obligations)
- Applications: 24 months from receipt
- Navigation data: 12 months
- Marketing consents: until consent withdrawal
- Amazon account data (via Selleee): for the duration of the relationship; deleted or anonymised within a reasonable period after termination of the service or revocation of the authorisation by the seller
Under Articles 15-22 of the GDPR, you have the right to:
- Access: obtain confirmation of processing and a copy of your data
- Rectification: correct inaccurate or incomplete data
- Erasure: request deletion of data ("right to be forgotten")
- Restriction: restrict processing in certain cases
- Portability: receive data in structured format and transfer it
- Objection: object to processing for legitimate reasons
- Consent withdrawal: withdraw consent at any time
To exercise your rights, write to: privacy@businesslabsltd.com
You also have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) of Malta, Floor 2, Airways House, Triq Il-Kbira, Tas-Sliema SLM 1549, Malta (https://idpc.org.mt).
We adopt adequate technical and organizational measures to protect your personal data:
- Communication encryption (HTTPS/TLS)
- Encryption of data at rest
- Data isolation between customers (multi-tenant architecture)
- Encrypted storage of Amazon API access credentials
- Role-based access controls
- Periodic backups and disaster recovery
- Staff training on data protection
- Continuous security monitoring
Despite our measures, no system can guarantee absolute security. We invite you to protect your credentials and report any suspicious activity.
We reserve the right to modify this Privacy Policy at any time. Changes will be published on this page with the date of last update.
We recommend checking this page periodically to stay informed about our privacy practices.
For questions or clarifications, contact us: privacy@businesslabsltd.com
