Privacy Policy

1 Overview & Scope

This Privacy Policy explains how TurkoLister ("we", "us", "our") collects, uses, stores, and protects your personal data when you use:

• TurkoLister Web Application — available at turkolister.co.uk
• TurkoLister Chrome Extension — "TurkoLister – eBay Product Importer" (Chrome Web Store ID: nmeafefecofjcgdibcadbjlpefppknan)

We are committed to protecting your privacy and handling your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2 Data We Collect

2.1 Account Data (Web Application)

2.2 Listing & Product Data

We store the eBay listing data you create within TurkoLister: product titles, descriptions, prices, images (URLs), SKUs, supplier URLs, and listing status. This data belongs to you and is used solely to operate the service.

2.3 Usage & Activity Logs

We log actions within your account (e.g., "listing published", "price updated") for your own activity history and for debugging purposes. Logs are associated with your account, not shared externally.

2.4 Technical Data

Standard server logs may record IP addresses, browser type, and request timestamps for security and performance monitoring. These are not linked to your identity for marketing purposes.

3 Chrome Extension — What It Reads

When you visit a supported product page (Amazon, Argos, Walmart, AliExpress), the extension reads the following publicly visible product information from that page:

• Product title
• Listed price
• Product images (URLs)
• Product description / bullet points
• Product identifier (ASIN for Amazon)
• The page URL

This product data is only transmitted to the TurkoLister server when you click "List on eBay", and only to create an eBay listing under your authenticated TurkoLister account.

The extension uses chrome.storage solely to remember your server URL preference and authentication token. No browsing history, no keystrokes, no personal information is ever read or sent.

Host Permissions Justification

4 How We Use Your Data

• To create and manage your TurkoLister account
• To connect to your eBay seller account on your behalf
• To create, update, and manage eBay listings as instructed by you
• To send transactional emails (e.g., password reset, billing receipts)
• To detect and prevent fraud or abuse
• To improve the service (aggregated, anonymised usage analysis only)

We never use your data for advertising, profiling, or sale to third parties.

5 Data Sharing & Third Parties

We share data with the following third parties only as required to operate the service:

We do not share your data with data brokers, advertisers, or marketing platforms.

6 Data Storage & Security

• All data is stored on servers located in Germany (EU).
• Data is transmitted over HTTPS / TLS 1.2+ at all times.
• Passwords are stored as bcrypt hashes — we cannot recover your password.
• eBay OAuth tokens are encrypted at rest.
• We implement access controls so only you can access your data.

7 Data Retention

We retain your data for as long as your account is active. If you delete your account:

• Your account data and listing data are deleted within 30 days.
• Anonymised activity logs (no personal identifiers) may be retained for up to 12 months for analytics.
• Billing records may be retained for up to 7 years as required by UK tax law.

8 Your Rights (GDPR / UK GDPR)

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure ("right to be forgotten") — request deletion of your data
• Portability — receive your data in a machine-readable format
• Restriction — ask us to limit how we process your data
• Object — object to processing based on legitimate interests
• Withdraw Consent — at any time, without affecting prior processing

To exercise any of these rights, contact us at privacy@turkolister.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO).

9 Cookies

The TurkoLister web application uses the following minimal cookies:

We do not use tracking cookies, advertising cookies, or any third-party analytics cookies.

10 Children's Privacy

TurkoLister is intended for users aged 18 and over. We do not knowingly collect data from children under 13. If you believe a child has provided us data, please contact us immediately and we will delete it.

11 Changes to This Policy

We may update this Privacy Policy periodically. When we make significant changes, we will notify registered users by email and update the "Last updated" date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.

12 Contact Us

For any privacy-related questions, requests, or complaints:

Data Controller: Okyanusi Ltd  |  ICO Registration: pending