Privacy policy

1. Controller

• Controller: YCY CONSULTING AND INVESTMENT SL
• Tax ID (NIF): B22450688
• Registered address: Calle Mester De Clerecia 34, 28978 Cubas De La Sagra, Madrid, Spain
• Contact and privacy email: [email protected]
• Phone: +34 605 262 395

2. Data we may process

• Identity and contact data: name, company, role, email, phone and country.
• Commercial data: requests, quotes, contracts, support, billing and communications.
• Technical data: IP address, browser, device, security logs, technical cookies and site usage.
• Service data: settings, integrations, catalogues, inventory, orders, metrics, audit records and data the customer syncs into Neowes ERP.
• Free website check data: the website we analyse and the email address we send the report to.

3. Purposes and legal bases

• Responding to contact, demo and quote requests: pre-contractual measures or legitimate interest.
• Sending the free website check report to the email you give us: pre-contractual measures at your request.
• Providing Neowes ERP and contracted services: performance of a contract.
• Managing accounts, roles, support and security: performance of a contract and legitimate interest.
• Complying with tax, accounting, commercial or legal obligations: legal obligation.
• Sending commercial communications where consent or another valid legal basis exists.

4. Amazon Selling Partner API

When an authorized seller connects an Amazon account through Amazon Selling Partner API, Neowes uses the information only to provide ERP services to that seller: catalogue, listings, prices, inventory, orders, logistics, metrics, financial reconciliation, support and audit.

We do not sell Amazon information, use it for external advertising, share it with unauthorized third parties or mix it across customers. Internal access is role-based and need-to-know. Credentials and tokens are stored securely and are not placed in public repositories or application logs.

5. Data we process on behalf of our customers

When we provide Neowes ERP, a NeoCommerce shop or Neowes Marketing, we process the data of our customer's own customers on our customer's behalf: orders, shipments, invoices, emails and unsubscribes. In that case our customer is the controller and Neowes acts as processor (Art. 28 GDPR): we only process that data on their instructions and to provide the service.

This is governed by a data processing agreement (DPA) that we sign with each customer together with the service contract.

6. Recipients, transfers and retention

We may share data with hosting, infrastructure, security, email, support, analytics, billing or technical providers needed to provide the service; with platforms connected by the customer; with professional advisers; or with authorities when legally required.

Where international transfers occur, we apply appropriate GDPR safeguards. Data is retained only as long as needed to provide the service and for legal, tax, security, audit or claims purposes.

7. Rights and complaints

You may exercise your rights of access, rectification, erasure, objection, restriction, portability and, where applicable, not to be subject to automated decisions by writing to [email protected].

You may also lodge a complaint with the Spanish Data Protection Agency at https://www.aepd.es.