Privacy policy

Last updated: 26 October 2026

This policy explains how Tristan Leprête processes personal data in connection with this website and his consulting work for sellers on Amazon. It applies in accordance with Regulation (EU) 2016/679 (the GDPR) and the Belgian Act of 30 July 2018 on the protection of natural persons with regard to the processing of personal data. In case of discrepancy, the French version prevails.

1. Data controller

Tristan Leprête, sole trader
Avenue de l'Hippodrome 33, 1050 Ixelles, Belgium
Company and VAT number: BE 1041.231.454
Email: tristanleprete@hotmail.fr

Two situations apply. For visitors, prospects, clients and partners, Tristan Leprête is the data controller. For data held in clients' Amazon accounts (Seller Central, Vendor Central, Amazon Ads), the client remains the data controller and Tristan Leprête acts as a processor, only on the client's instructions and under the engagement agreement (section 6).

2. Data collected

• Contact requests: first and last name, email address, company, message content and, where applicable, the details exchanged to arrange a call.
• Client relationship: business contact details, billing information (company name, address, VAT number), project-related correspondence.
• Technical data: the website host keeps technical logs (IP address, date and time, pages viewed) for security and proper operation.
• Data accessible in clients' Amazon accounts: see section 6.

The website uses no advertising or analytics cookies. Only cookies strictly necessary for it to work may be used; they do not require consent.

3. Purposes and legal bases

• Answering your requests and arranging a call: steps taken at your request before a contract, and legitimate interest in responding to enquiries.
• Preparing a quote, delivering and following up a project: performance of the contract.
• Invoicing and accounting: legal obligation.
• Website security and abuse prevention: legitimate interest.
• Publishing a testimonial or a named case study: consent, which can be withdrawn at any time.

Your data is not used for profiling or automated decision-making.

4. Retention periods

• Contact requests with no follow-up: 3 years after the last exchange.
• Client project data: duration of the project, then 3 years for relationship follow-up and the defence of any legal claims.
• Accounting records and invoices: period required by Belgian accounting and tax law.
• Technical logs: 12 months at most.
• Data from clients' Amazon accounts: see section 6.4.
• Testimonials: until consent is withdrawn.

5. Recipients

Your data is never sold, rented or transferred. It is shared only with the technical providers needed, bound by confidentiality and data protection commitments (Article 28 GDPR): website hosting (Cloudflare, Inc., United States), email (Microsoft, Outlook.com service), contact form (Tally, a Belgian company, data stored in the European Union) and, where applicable, the accountant or invoicing tool used. It may also be disclosed to authorities where the law requires.

If a provider processes data outside the European Economic Area, the transfer is covered by a European Commission adequacy decision or by standard contractual clauses.

6. Data in clients' Amazon accounts

To carry out his projects, Tristan Leprête may access his clients' Amazon accounts. This access and the data it contains (catalogue, performance, advertising, reports and, exceptionally, buyer information) are handled under the following commitments, in line with Amazon's policies for service providers (Acceptable Use Policy, Data Protection Policy, Solution Provider Portal Agreement).

6.1 Access limited to what is necessary

• Access is granted only through Amazon's official mechanisms: an authorisation given by the client from their account, with only the permissions needed. The client's login details are never requested or stored.
• Only the data needed for the agreed project is viewed. Buyers' personal information is viewed only if the project requires it; it is not copied outside Amazon's tools except where documented as necessary, and is then deleted within the periods set by Amazon's policies.
• Data is used only to provide the service to the client concerned.

6.2 No resale, no sharing between clients

• Amazon data and client account data are never sold, rented, shared or disclosed to third parties, except where required by law or on the client's written instruction.
• One client's data is never used for another client, combined with other clients' data, or used to build databases or market analyses.
• Amazon buyers are never contacted outside the channels Amazon allows.

6.3 Protection

• Two-factor authentication on all accounts and tools used.
• Unique passwords, kept in an encrypted password manager.
• Protected devices: disk encryption, automatic locking, security updates.
• Files exchanged over encrypted channels; storage limited to encrypted tools, within the European Economic Area where possible.
• No access is given to third parties. Any subcontractor would act only with the client's prior written consent and under the same obligations.

6.4 End of the engagement

At the end of the engagement, the client is asked to withdraw the access granted. Within 30 days, all data from the client's Amazon accounts (exports, reports, working files) is deleted or returned to the client, as the client prefers, except for documents that must be kept by law and deliverables handed over to the client.

6.5 Security incidents

If an incident affects data (unauthorised access, loss, leak): the client concerned is informed without delay; Amazon is notified within the timeframes and in the manner set by its policies; the Belgian Data Protection Authority is notified within 72 hours where the law requires, and the people concerned are informed if the risk is high; immediate measures are taken to contain the incident and prevent it from happening again.

7. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, and to withdraw your consent at any time. To exercise these rights, write to tristanleprete@hotmail.fr. You will receive an answer within one month. If data about you is held in a client's Amazon account, for example as a buyer, please contact that seller first; any request received on this subject will be passed on to them.

8. Complaints

You can lodge a complaint with the Belgian Data Protection Authority: Rue de la Presse 35, 1000 Brussels · +32 2 274 48 00 · contact@apd-gba.be · dataprotectionauthority.be

9. Changes

This policy may be updated, for example when a new tool is used or the law changes. The date of the last update is shown at the top of the page.