Data Security

Golden Arrow Growth handles client business data, including Amazon Selling Partner data, with the same rigor we'd expect from an in-house team. Below is a summary of our security practices.

Access Control

• Access to client accounts follows least-privilege: we request only the roles and permissions needed to perform the contracted service.
• All accounts used to access client or Amazon data are protected by strong, unique passwords and multi-factor authentication.
• Credentials are stored in an encrypted password manager and are never shared, emailed, or written to plain text.

Data Protection

• Devices used for client work are encrypted at rest (FileVault full-disk encryption) and kept current with security updates.
• Data in transit is protected by TLS.
• Client data is stored in access-controlled cloud storage and is never sold, shared across clients, or used for any purpose beyond the contracted engagement.

Data Retention

• We retain client and Amazon data only as long as needed to deliver the contracted service.
• Upon engagement end or client request, client data is deleted from our systems within 30 days, except where retention is required by law.

Risk Assessment & Incident Response

• We maintain a documented risk assessment process and incident response plan covering monitoring, detection, containment, and recovery.
• Suspected security incidents involving Amazon data are investigated immediately and reported to Amazon within 24 hours of detection, with affected clients notified promptly.

Organizational Changes

We notify Amazon within 30 days of any organizational change or event that alters our need for, or use of, Amazon Selling Partner information.

Questions

For security questions or to report a concern, reach us through the contact form.