Data Security

Every brand that works with Ideal Perfection trusts us with access to its most valuable commercial asset: its marketplace accounts. This page explains, in plain language, how we protect your seller accounts, business information, and customer data across Amazon, Flipkart, and every other platform we manage.

1. Our Commitment

We use client information only to deliver the services you have engaged us for. We protect it against unauthorised access, misuse, alteration, and disclosure, and we never sell, rent, or share your data with third parties for their own purposes.

2. Least-Privilege Account Access

• No master passwords: We never ask for your primary account owner password. Access is granted through each marketplace’s official user-permission system (for example, Amazon Seller Central User Permissions or Flipkart Seller Hub sub-users).
• Minimum permissions: We request only the permission levels required for the agreed scope of work, and nothing more.
• Named individual logins: Every team member uses their own named login. Shared or generic accounts are not used.
• Regular access reviews: We review who has access to each client account every quarter and remove access within 24 hours when it is no longer needed.

3. Authentication & Credential Handling

• Multi-factor authentication (MFA / two-step verification) is mandatory on every account used to access client or marketplace data.
• Passwords are unique, at least 12 characters long, and combine upper- and lower-case letters, numbers, and symbols.
• Credentials are stored only in an encrypted password manager and are never shared over WhatsApp, chat, SMS, or email.

4. Confidentiality

Product data, pricing, sales reports, advertising performance, supplier details, and business strategy shared with us are treated as strictly confidential. Our team members are bound by confidentiality obligations, and we are happy to sign a mutual Non-Disclosure Agreement (NDA) before onboarding.

5. Data Minimisation

We collect and retain only the information that is genuinely required to perform the agreed services. Where marketplace reports contain buyer personal information (such as names or shipping addresses), we use it solely for order, return, or customer-service tasks you have authorised, and we do not export or store it outside the marketplace unless strictly necessary.

6. Secure Devices & Storage

• Work devices run supported, up-to-date operating systems with active antivirus protection and automatic screen lock after short periods of inactivity.
• Client data is never stored on removable media, unmanaged personal devices, or publicly shared cloud links.
• All data is transmitted only over encrypted connections (HTTPS / TLS 1.2 or higher), including this website.

7. Team Training & Accountability

Everyone with access to client accounts completes data-protection and security-awareness training at onboarding and at least once every year. Marketplace policy and security guidelines are part of our standard operating procedures.

8. Monitoring & Risk Management

We assess security risks at least once a year and whenever our tools, team, or services change significantly. We monitor managed accounts for unexpected logins, permission changes, or unusual listing activity, and flag anything suspicious to you right away.

9. Incident Response

We maintain a documented incident-response plan covering preparation, identification, containment, eradication, recovery, and lessons learned. If we detect or suspect a security incident affecting your data or accounts, we will:

• Contain the issue immediately, including revoking affected access;
• Notify you without undue delay with the facts we know and the actions we are taking;
• Report the incident to the relevant marketplace (for example, Amazon or Flipkart) within the timelines their policies require; and
• Review the root cause and update our controls to prevent recurrence.

10. Data Retention & Deletion

We keep client information only for as long as needed to deliver our services or as required by applicable law, tax, or accounting obligations. When an engagement ends, we remove our user access from your marketplace accounts and securely delete related client data within 30 days, unless you ask us to retain specific records or the law requires otherwise.

11. Third-Party Tools

We use only reputable, marketplace-approved tools and software providers. Before connecting any third-party application to your account, we explain what it does and obtain your consent.

12. Report a Security Concern

If you notice anything unusual on an account we manage, or believe your information may have been accessed without authorisation, please contact us immediately:

This page is reviewed regularly and updated whenever our practices change. Please also read our Privacy Policy and Terms of Use.