1. Who We Are

OrderOcean (“we”, “us”, “our”) is a UK-based multi-channel e-commerce management platform operated by DAATAA LIMITED (trading as OrderOcean). We provide software that enables online sellers to manage inventory, orders and fulfilment across multiple marketplaces including eBay, Amazon, Etsy, TikTok Shop and Temu.

Our registered office is in the United Kingdom. We are registered with the UK Information Commissioner’s Office (ICO) as a data controller.

If you have any questions about this policy, contact our Data Protection contact at: [email protected]

2. What Data We Collect

2.1 Account Data

• Name and email address when you register
• Billing information (processed securely via our payment provider – we do not store card details)
• Business name and address
• Communication preferences

2.2 Marketplace Integration Data

When you connect a marketplace account (eBay, Amazon, Etsy, TikTok Shop, Temu), we access and store data necessary to provide our services, including:

• Product listings and inventory data
• Order information (order IDs, buyer names, shipping addresses, order items, order status)
• Transaction data necessary for fulfilment
• Marketplace account credentials (stored securely using OAuth tokens – we do not store your marketplace passwords)

2.3 Etsy-Specific Data

Etsy API data is documented in one authoritative section below: Etsy API Data. That section lists the shop, listing, order, fulfilment, retention, disconnection, and deletion rules. OrderOcean does not request Etsy profile_r or buyer email access.

2.4 Usage Data

• Log data: IP address, browser type, pages visited, time and date of visits
• Cookies and similar tracking technologies (see our Cookie Policy)
• Feature usage and platform interaction data used to improve our service

3. How We Use Your Data

We use the data we collect to:

• Provide and operate the OrderOcean platform and its features
• Sync your inventory and orders across connected marketplaces
• Process and fulfil orders on your behalf
• Send service-related communications (account notifications, billing, support)
• Improve and develop our platform
• Comply with legal obligations
• Prevent fraud and ensure platform security

We rely on the following legal bases for processing: contractual necessity (to deliver the service you’ve signed up for), legitimate interests (platform security, fraud prevention, service improvement), and legal obligation (tax records, regulatory compliance).

4. Data Sharing

We do not sell your personal data. We share data only with:

• Marketplace APIs (eBay, Amazon, Etsy, TikTok Shop, Temu) – to sync your data as part of the service you have authorised
• Shipping carriers – solely to fulfil orders you route through OrderOcean
• Payment processors – to process your subscription payments securely
• Infrastructure providers – cloud hosting and database services that process data on our behalf under data processing agreements
• Legal authorities – where required by law

5. Data Retention

We retain your account data for as long as your account is active and for a reasonable period after closure to comply with legal obligations. Certain accounting or transaction records may be retained where required by UK law. Etsy API operational data is handled according to the Etsy-specific retention periods described below and in our Data Retention Policy. You may request deletion of your personal data at any time (subject to legal retention requirements) by contacting [email protected].

6. Your Rights (UK GDPR)

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, contact: [email protected]

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO): ico.org.uk

7. Security

We implement appropriate technical and organisational security measures to protect your data, including encryption in transit (HTTPS/TLS), secure credential storage using OAuth tokens, and access controls. We do not store marketplace passwords – connections are made via secure OAuth authorisation flows.

8. Cookies

We use cookies and similar technologies to operate our platform and improve your experience. See our Cookie Policy for full details.

9. International Transfers

We primarily process and store data within the UK and EEA. Where data is transferred outside these regions (for example, to US-based cloud infrastructure), we ensure appropriate safeguards are in place in accordance with UK GDPR requirements.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by a prominent notice on our platform. The “Last updated” date at the top of this page indicates when it was last revised.

11. Contact

For any privacy-related questions or to exercise your rights:
Email: [email protected]
Website: orderocean.co.uk/contact

Etsy API Data

This section explains specifically how OrderOcean stores, processes, and deletes data obtained through the Etsy Open API. If you have connected your Etsy shop to OrderOcean, this section applies to you.

Data we receive from Etsy

When you connect your Etsy shop, OrderOcean receives the following categories of data through the official Etsy Open API v3 using your seller-authorised OAuth 2.0 consent:

• Shop identity — your Etsy shop ID and shop name, used to identify and scope your account.
• Listing and inventory data — your own Etsy listings, SKUs, pricing, and stock levels, used for inventory and listing management.
• Order and receipt data — your own Etsy orders, receipt details, and order status, used for order management and fulfilment.
• Buyer shipping address — used solely for fulfilment processing; not used for marketing.
• Tracking and fulfilment status — carrier and tracking information submitted at your request to Etsy receipts.

Why we process Etsy data

We process Etsy API data only to provide the OrderOcean service that you have authorised. Each data category is processed for the specific operational purpose described above. We do not process Etsy data for any other purpose.

How OAuth credentials are stored

OAuth access tokens and refresh tokens are encrypted at rest, stored server-side only, and are never placed in browser storage, application logs, or shared with third parties. Tokens are revoked and deleted immediately when you disconnect your Etsy shop.

Orders and buyer information

OrderOcean does not request or use Etsy buyer email addresses. Buyer shipping addresses are used only for the specific fulfilment task they relate to and are not used for marketing, profiling, or any purpose beyond order fulfilment.

Listings and inventory

Listing and inventory data processed by OrderOcean is your own seller data. We do not access, copy, or process listings or content belonging to other Etsy sellers. Etsy listing data displayed by OrderOcean is refreshed at least every 6 hours in accordance with Etsy API Terms.

Cross-channel inventory processing

OrderOcean is a multi-channel platform. Any listing content synchronised to another marketplace is content belonging to you, the connected merchant. We only process and synchronise listing content that you own or are authorised to use.

What we do not do with Etsy data

• We do not sell Etsy data.
• We do not use Etsy data for advertising, marketing audiences, or behavioural profiling.
• We do not use Etsy data to train AI or machine learning models.
• We do not scrape Etsy.
• We do not collect or store your Etsy account password.
• We do not access buyer email addresses unless separately approved by Etsy.

Service providers and sub-processors

The following third-party sub-processors may handle Etsy-derived data as part of providing the OrderOcean service. All are bound by data processing agreements and may not use Etsy data for their own purposes:

• LiteSpeed / LiteSpeed Web Server — web hosting infrastructure (UK-based servers)
• Cloudflare, Inc. — CDN, DNS, and DDoS protection (proxies public traffic only; does not store Etsy API data)
• WPForms / Awesome Motive — contact and support form processing (contact enquiries only; not Etsy API data)
• WP Mail SMTP / SendLayer — transactional email delivery (order notification emails; no Etsy OAuth tokens or buyer PII included in email payloads)

No sub-processor receives Etsy member personal data for advertising, profiling, or AI training purposes. If you have questions about sub-processors, contact [email protected].

Data retention

For full retention periods by data category, see our Data Retention Policy. In summary: OAuth tokens are deleted immediately on disconnect; operational data (orders, listings, buyer addresses) is deleted within 30 days of disconnect; encrypted backups expire within 60 days.

Disconnecting Etsy

You can disconnect your Etsy shop from within your OrderOcean account settings at any time. On disconnection, your OAuth tokens are immediately revoked and deleted. Remaining operational data is scheduled for deletion within 30 days.

Deletion requests

To request deletion of your Etsy-related data, contact us at [email protected]. We will respond within 30 days and confirm when deletion is complete.

Security

All Etsy API data is encrypted in transit (HTTPS/TLS) and at rest. Access is restricted to authorised OrderOcean systems. OAuth tokens are stored in encrypted form and are excluded from application logs and error reporting.

International transfers

OrderOcean stores Etsy merchant data on UK-based servers. Where any sub-processor operates outside the UK, we ensure appropriate transfer safeguards are in place in accordance with applicable UK data protection law.

Your rights under UK data protection law

As a data subject, you have the right to: access your personal data; rectify inaccurate data; request erasure; restrict processing; data portability; and object to processing. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk.

Contact

For privacy queries relating to your Etsy data, contact: [email protected]
OrderOcean is a trading name of DAATAA LIMITED, registered in England and Wales (Company No. 08638599).
Registered office: Unit 14 Queens Cross Business Park, Angel Street, Dudley, England, DY1 1TB.