Eliason Mapping Suite Privacy notice
Version 2026-02
1. Who is responsible for your data
[COMPANY NAME] of [REGISTERED ADDRESS] is the data controller for the personal data described here. Our ICO registration reference is [ICO REFERENCE]. You can contact us about privacy matters at [CONTACT EMAIL].
We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What we collect
Information you give us
- your name, business name, email address and organisation;
- the eBay seller account you authorise us to use, and the permissions you grant;
- product data you upload, which may include the seller's trading identity;
- any messages you send to our support team.
Information created while you use the service
- your listings, mappings, exports and publishing history;
- a record of sign-ins, sessions and security events, kept to protect accounts;
- technical data such as IP address and browser type.
We do not store your eBay password, and we never see it. We store a password hash for your account with us, which cannot be turned back into the original password.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Providing the service: mapping and publishing your listings | Performance of our contract with you |
| Managing your account and keeping it secure | Performance of our contract; legitimate interests in preventing abuse |
| Invoicing and keeping financial records | Contract; legal obligation (including tax and company law) |
| Responding to enquiries and complaints | Contract; legitimate interests in serving customers |
| Improving the service | Legitimate interests, using aggregated information where possible |
| Sending service messages (for example security or downtime notices) | Contract; legitimate interests |
| Marketing, where permitted | Consent, which you can withdraw at any time |
4. eBay and other processors
We use eBay's official APIs to publish listings. To do that we send eBay the listing content you supply, along with the authorisation token you grant us. eBay processes that data under your own seller agreement with eBay, as a separate controller.
We use service providers for hosting, database storage and email delivery. They act as processors on our behalf under written agreements, and may only use the data to provide their service to us. A list of current processors is available on request.
5. Transfers outside the UK
Some providers may process data outside the UK. Where that happens, we rely on the UK International Data Transfer Agreement, the UK Addendum, or a finding of adequacy, together with appropriate technical and organisational safeguards.
6. How long we keep it
- Account and listing data: for the length of the engagement, then up to 12 months unless you ask us to delete it sooner.
- Invoices and financial records: six years from the end of the relevant financial year, as required by UK tax law.
- Security and audit records: up to 12 months, kept for investigation and abuse prevention.
- Session records: removed shortly after they expire or are revoked.
When data is no longer needed we delete it or irreversibly anonymise it.
7. How we protect it
Access requires an authenticated session, and passwords are hashed with a modern algorithm. Sessions expire automatically and can be revoked immediately. Credentials for eBay and email are stored in the application database rather than in the code, and are never displayed back to a browser. Administrative actions on accounts are recorded in an audit trail.
No system is perfectly secure. If a breach occurs that is likely to put your rights at risk, we will notify you and the ICO as required by UK GDPR.
8. Your rights
Under UK GDPR you have the right to:
- be informed about how your data is used;
- access a copy of your personal data;
- have inaccurate data corrected;
- have your data deleted in the circumstances the law allows;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent where processing is based on it.
To exercise any of these, email [CONTACT EMAIL]. We will respond within one month, and may need to verify your identity first. There is normally no charge.
If you are unhappy with our response you may complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to resolve the issue first.
9. Cookies
We use a single essential session cookie to keep you signed in. It is marked HttpOnly and SameSite, and is used only for authentication. We do not use advertising or analytics cookies, so no consent banner is needed.
10. Automated decision-making
Category suggestions are produced automatically and scored for confidence, but publishing a listing is a deliberate action taken by you. We do not make automated decisions that have legal or similarly significant effects on you.
11. Changes to this notice
We may update this notice to reflect changes in the law or in our processing. The version shown at the top of this page tells you which revision you are reading, and the version you accepted when you created your account is recorded.