1. Home
  2. Amazon Advertising Integration Privacy Notice

Amazon Advertising Integration Privacy Notice

Last updated: 29 July 2026

This privacy notice explains how ALCOR TRADING LTD ("ALCOR", "we", "us" or "our") handles information when it connects and uses its own Amazon Ads accounts through ChatGPT Business and the official Amazon Ads Model Context Protocol (MCP) server. It applies only to this advertising integration and does not replace the general privacy notice for the Drinks Quest online store.

1. Who we are

ALCOR TRADING LTD is the organisation responsible for this integration and, where information processed through it is personal data, acts as the data controller for its own processing.

Registered office:
A And L, Suite 1-3 Hop Exchange
24 Southwark Street
London
England
SE1 1TY
United Kingdom

Contact: info@drinks-quest.co.uk

2. What the integration does

The integration enables authorised ALCOR personnel to retrieve, review and analyse Amazon Ads information in ChatGPT Business. It may be used for advertising reports, campaign and keyword analysis, search-term analysis, identifying inefficient advertising spend, keyword harvesting, preparing recommendations and, only under the human-control rules set out below, carrying out specifically authorised campaign-management actions.

3. Information we may process

Depending on the tools and permissions made available by Amazon, the integration may process:

  • Amazon Ads account, advertiser profile and marketplace identifiers;
  • campaigns, portfolios, ad groups, advertisements, keywords, targets and search terms;
  • campaign status, bids, budgets, placement and targeting settings;
  • performance and reporting information, including impressions, clicks, spend, attributed orders and sales, conversion measures, ACOS, ROAS and related advertising metrics;
  • billing, account or financial reporting information made available through the authorised Amazon Ads connection;
  • OAuth authorisation details, connection identifiers, timestamps, technical logs, audit records and security information; and
  • limited business contact or profile information where it appears in Amazon Ads account metadata.

We do not intentionally use this integration to obtain or process Amazon retail customer names, personal email addresses, postal addresses or payment-card details.

4. Why we process the information

We process the information to manage and improve our own Amazon advertising activity, measure performance, control costs, identify errors or inefficient spend, prepare recommendations, maintain audit and security records, and carry out specifically approved advertising actions.

Where the information is personal data, our primary lawful basis is our legitimate interest in operating, securing and improving our own advertising accounts and business activities. We may also process information where necessary to comply with legal obligations or establish, exercise or defend legal claims. OAuth authorisation is the technical mechanism that permits account access and is separate from the lawful basis for processing personal data.

5. Human approval for account changes

Analysis and recommendations are permitted, but changes to Amazon Ads accounts require explicit human instruction.

The integration must not create, update, pause, activate or delete campaigns, portfolios, ad groups, advertisements, budgets, bids, keywords, targets, placements or any other advertising object unless an authorised representative of ALCOR TRADING LTD has given an explicit instruction for that specific action. The instruction must identify what is to be changed and, where relevant, the marketplace, campaign or advertising object and the intended new value.

A general request to analyse, audit, review or optimise advertising does not authorise any change to the Amazon Ads account.

6. Who may receive the information

Information may be made available only as necessary to:

  • Amazon and Amazon Ads, as the source of the advertising data and the provider of the authorisation and MCP services;
  • OpenAI through ChatGPT Business, as the technology service used to access and work with the authorised integration;
  • authorised ALCOR personnel who need access for advertising, management, compliance, security or technical support purposes; and
  • professional advisers, regulators, courts or public authorities where disclosure is required by law or necessary for legal claims.

Amazon and OpenAI may act in different data-protection roles depending on the service and processing concerned, as described in their applicable terms and privacy information.

We do not sell Amazon Ads data and do not disclose it to unauthorised third parties.

Further information is available in the Amazon Ads Privacy Notice and OpenAI business data information.

7. International data transfers

Amazon, OpenAI and their authorised service providers may process information in countries outside the United Kingdom. Where UK personal data is transferred internationally, we rely on the applicable contractual, organisational and legal safeguards available under the relevant provider terms and data-protection law.

8. Security and access controls

We use measures appropriate to the nature of the integration, including OAuth-based authorisation, restricted workspace access, role-based permissions, least-necessary access, human approval for account changes, review of activity and the ability to revoke or disconnect access.

OAuth tokens, client secrets and other credentials must not be disclosed in public pages, ordinary documents, email messages, chat messages or screenshots. They are to be handled only through authorised systems and interfaces.

9. Retention and deletion

We retain advertising reports, analyses, conversation records, recommendations, technical logs and audit information only for as long as reasonably necessary for the purposes described in this notice, including business reporting, security, compliance, troubleshooting and legal obligations. When information is no longer required, it will be deleted or anonymised where reasonably practicable.

Future access to Amazon Ads data ends when the authorisation is revoked, expires or the integration is disconnected. Revocation does not automatically delete records that were lawfully retained before access ended.

10. Your data-protection rights

Where we process personal data about you, you may have rights to request access, correction, erasure, restriction, portability or to object to processing, subject to the conditions and exemptions in applicable law. Not all Amazon advertising metrics identify an individual, so these rights do not apply to purely aggregated or non-personal business data.

To exercise a right or ask a privacy question, contact info@drinks-quest.co.uk. You also have the right to complain to the UK Information Commissioner's Office through its complaints service.

11. Revoking the integration

An authorised account owner or administrator may stop future access by disconnecting the application in ChatGPT Business, revoking the relevant Login with Amazon authorisation, disabling the associated credentials or otherwise terminating the Amazon Ads connection.

12. Changes to this notice

We may update this notice when the integration, its permissions, service providers, business use or applicable law changes. The latest version will be published on this page with a revised update date.