Legal
Privacy Policy
Who we are
Velmont is a trading name of T&S Worldwide Ltd, a company registered in England and Wales under company number 16800095, with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. In this policy, “we”, “us” and “our” mean T&S Worldwide Ltd.
For personal data collected through this website, we are the controller. When we manage a client’s marketplace accounts, we act on that client’s behalf as a processor, under the terms of our service agreement with them.
Questions about this policy or your data can be sent to hello@velmontsystems.com.
What we collect through this website
| What | Why | Lawful basis |
|---|---|---|
| Growth Audit requests: name, email, brand, role, store or product link, marketplaces, revenue range and anything you choose to tell us | To prepare your audit and contact you about it | Steps taken at your request before entering a contract |
| Contact enquiries: topic, name, email, brand, marketplace and your message | To respond to your enquiry | Our legitimate interest in responding to people who contact us |
| Technical data: IP address and browser information in our hosting provider’s server logs | To deliver the website securely and prevent abuse | Our legitimate interest in operating a secure website |
We do not use analytics, advertising or tracking cookies, and we do not sell or rent personal data to anyone.
Client marketplace data
When a brand engages us, we access its Amazon and Walmart accounts through the platforms’ own user-permission systems and, where the client authorises it, through official platform APIs. This gives us business data such as sales, traffic, advertising, inventory, catalogue and settlement information. We use it only to deliver the services that client has contracted, and never share it between clients or use it for any other purpose.
We do not request access to marketplace customers’ personal information — such as buyer names, addresses or contact details — through platform APIs, and we do not export or retain it.
When an engagement ends or a client withdraws authorisation, we revoke our access and delete that client’s marketplace data, including backups, within 30 days, and confirm the deletion in writing.
How long we keep personal data
- Enquiries and audit requests that do not lead to an engagement: up to 24 months, then deleted.
- Client contact and contract records: for the length of the engagement and up to six years afterwards, to meet legal and accounting obligations.
- Client marketplace data: for the length of the engagement, then deleted within 30 days as described above.
Who we share it with
We use a small number of service providers to run the business, who process personal data only on our instructions:
- Website hosting and form handling (Netlify, Inc., United States).
- Email and workspace services (Google Workspace, Google LLC).
- Cloud infrastructure used to store and report on client marketplace data, encrypted at rest and in transit.
We may also disclose information where the law requires it.
International transfers
Some of our team and service providers are located outside the United Kingdom, so personal data may be processed outside the UK. Where that happens, we take steps to ensure it continues to be protected to the standard required by UK data protection law, including through the contractual terms we agree with the people and providers who handle it.
How we protect it
Data is encrypted in transit and at rest. Access is limited to named team members who need it for their work, protected by multi-factor authentication, and reviewed regularly. Credentials and access tokens are stored in a dedicated secrets manager, never in documents or code. If we become aware of a breach affecting your data, we will notify you and, where required, the Information Commissioner’s Office without undue delay.
Your rights
Under UK data protection law you can ask us to confirm whether we hold your personal data and to give you a copy, correct it, delete it, restrict or object to how we use it, or transfer it to you or another organisation. Email hello@velmontsystems.com and we will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner’s Office at ico.org.uk. We would appreciate the chance to resolve it with you first.
Children
Our services are for businesses. This website is not directed at anyone under 18 and we do not knowingly collect their data.
Changes to this policy
We will update this page if our practices change, and revise the date at the top when we do.