Privacy policy.
How we handle business inquiries, website information and data for authorized seller services.
1. Who we are
W & F TRADING LLC operates WorthHarvest. Our business address is 6329 BELAIR RD
BALTIMORE MD 21206. Contact us at info@worthharvest.com for privacy questions or requests.
This policy applies to our website and authorized seller services. SP-API functionality is enabled only after Amazon approval and explicit seller authorization through Amazon OAuth. Without this approval and authorization, no seller account data is accessed through SP-API.
2. Information and purposes
When you contact us, we receive the information you choose to send, such as your name, work email, business name and message. We use it to answer questions, prepare proposals and provide support. Do not include Amazon passwords, API credentials or buyer information in an inquiry.
The contact form prepares an email in your own email application; it does not send automatically or save form entries to a website database. Information is transmitted when you send the email.
Website hosting and font delivery involve technical request data such as IP address, browser information, requested resources and timestamps. These requests support website delivery, reliability and security.
For an approved and seller-authorized service, permitted data may include catalog content, offer prices, FBA and AWD inventory, order identifiers and status, shipment tracking, financial transactions and eligible brand reports. Each category is used only for the relevant service described on our Platform page. Access must be limited to the agreed purpose and approved permissions.
3. Limits on Amazon data
Seller authorization is required before account access. We do not ask for Amazon passwords. The current service does not request or process buyer names, delivery addresses, phone numbers, email addresses, or other buyer PII. Shipment purchase, recipient-data processing, buyer messaging, review solicitation, tax invoicing, tax remittance, and restricted direct-to-consumer delivery workflows are outside the current service scope.
We do not sell Amazon information or use it for unrelated advertising, customer profiling or training general-purpose AI models. We do not provide another seller with access to your account information. We will not add a new data purpose or restricted-data workflow without first addressing the required permissions, disclosures and safeguards.
4. Providers and disclosures
This website is hosted on a web server managed by W & F TRADING LLC. Our infrastructure provider processes technical request data needed for hosting and network delivery. The website also loads Google Fonts for typography, and Google receives the technical information needed to deliver those font resources. Messages sent to our business mailbox are handled by our email service and the sender’s email provider.
Our provider policy requires disclosure of processing locations and relevant service providers, an assessment of their access, and confidentiality and processing requirements before a provider receives seller data. We do not obtain Amazon account data from scraping services or data brokers.
Information may be disclosed when legally required, to respond to a valid authority request, or to address fraud or a security incident. Disclosures must be limited to what is necessary. Where a cross-border transfer requires safeguards, these must be established before the transfer.
5. Retention and deletion
Our retention policy is to keep ordinary business inquiries for up to 12 months after the last substantive exchange, unless the inquiry becomes part of an active contract, dispute or legally required record.
For authorized connected services, non-personal Amazon operational records must be retained only while needed for the agreed service and never longer than 18 months unless law requires otherwise. Following a verified deletion request, revocation or termination, access must stop and service data must be deleted within 30 days, subject to narrowly applicable legal obligations. Amazon deletion instructions take precedence where they require earlier action.
Backup design must support the same deletion deadline; a longer backup cycle must not silently extend retention. Deleted information must not be reintroduced when a backup is restored. Minimal security logs should be maintained for at least 12 months without unnecessary seller payloads or buyer data.
Buyer personal information is outside the current scope. If a later approved service requires it, a separate retention schedule and notice must be established, including Amazon’s applicable 30-day post-delivery limit and permitted legal exceptions.
6. Your choices and requests
Email info@worthharvest.com with “Privacy request” in the subject to request access, correction or deletion, or to ask about a processing purpose. Provide only enough information to identify your inquiry or business relationship. We may verify authority before disclosing or changing account-related data.
Our response target is 30 days, or sooner where applicable law requires. If additional time is legally permitted and necessary, we will explain why. Mandatory legal exceptions may limit deletion; retained records must be restricted to the relevant obligation.
For authorized connected services, you may revoke authorization through Amazon and notify us to disconnect. Revocation must end subsequent account access and trigger the applicable retention process. Rights to object, restrict processing, portability or complain to a supervisory authority apply where provided by law.
7. Security and lawful processing
Our security standard defines required controls for systems handling seller data. The standard covers access management, encryption, network protection, credential handling and incident response. SP-API access is subject to Amazon approval and explicit seller authorization.
Where a legal basis is required, inquiry handling relies on steps requested before a contract or legitimate interests in responding to business communications. Service processing must follow the applicable contract, seller instructions and law. Any processing requiring consent must be explained and obtain it before it begins.