Imperium Backbone eBay application privacy notice

Effective date: 23 September 2026

Imperium Backbone is operated by ARC HOSPITALITY, ENTERTAINMENT AND MAINTENANCE LTD, a company registered in England and Wales under number 15003072, with registered office at Norwich Accountancy, 19 Upper King Street, Norwich, NR3 1RB, United Kingdom. Contact us about this application at privacy@imperium.store.

The application is designed for independently operated eBay seller accounts. Each seller remains responsible for their own selling activity and customer privacy information. This notice explains what the application operator does. Connecting another seller account requires a separate agreement, privacy-role review and permission grant. It does not make the application operator the seller for that account.

Information and purposes. eBay sends the application signed Marketplace Account Deletion notifications. We verify a notification and retain its identifier, event dates and keyed digests of the eBay account identifiers in a restricted queue. We use these to identify any relevant information held by the application that may need review for deletion or justified retention. The queue does not itself delete records. We do not store the raw eBay username, user ID or EIAS token in that queue.

With a seller's separate authorisation, the first planned connection will verify the seller account and read its inventory records. The Identity API may return account profile fields; the application uses the username for comparison and does not save the additional response fields. Inventory information is used to support that seller's own stock review. This first connection does not request buyer orders, addresses, messages, payments, listing changes or selling actions. No seller connection is active at this notice's preparation date.

Our role and lawful basis. We determine how to secure and administer this application and reconcile its deletion-notification queue. For these limited purposes, we rely on our legitimate interests in providing the requested service securely, preventing wrong-account access and identifying information needing a deletion review. We limit access and scope. Where we process a seller's customer information solely on that seller's documented instructions, we act for that seller; the seller is responsible for its own applicable lawful basis and customer notice. A different purpose or jointly determined activity would require a separate assessment.

Sharing and location. Authorised application personnel and the relevant seller receive only the information needed to handle an account-specific request. Cloudflare hosts the notification endpoint and restricted queue. IONOS provides the privacy email forwarding service. eBay supplies notifications and, if separately authorised, seller API data. These providers may process information outside the UK. We use applicable provider data-processing terms and transfer safeguards where required; contact us for details. A European Union database location does not mean every part of the service stays in the UK or EU.

Retention. We do not keep the full Identity API response. Access tokens are used for the active call or session; a refresh token would be kept in encrypted storage only while a seller connection remains authorised and needed. The first pilot connection will not save inventory snapshots; a longer-term stock-history feature would require a revised notice and retention rule before use. Minimal connection and authorisation evidence will be reviewed for removal no later than 12 months after connection end, subject to a documented case-specific need. Deletion-notification identifiers currently remain in a restricted queue while reconciliation is unresolved. The queue has no automatic deletion process. An unresolved identifier is needed until we can determine whether the application holds matching information and what action is required. A matched record is retained only where a specific documented legal obligation or actual claim/dispute applies, using the minimum necessary fields and a recorded review date. We have not yet established a maximum period for unresolved notifications. We will explain the status of a particular request through the privacy contact above. Any separate privacy-case evidence will have a documented review date; no general period is yet operating. The current Cloudflare Workers Free plan ordinarily keeps Worker diagnostic logs for three days; other provider records may follow different rules. These periods and criteria do not replace separately justified accounting, dispute or legal-hold retention.

Your rights and contact. You can contact privacy@imperium.store about information held by this application. We will identify the relevant seller and coordinate a request with that seller where the information concerns its account. You may also contact the seller directly. Depending on the circumstances, you may have rights to access, correct, erase or restrict your information. You may object to processing based on our legitimate interests. We will review requests, including any justified reason to retain information, and explain the outcome. You can complain to the UK Information Commissioner's Office at https://ico.org.uk/make-a-complaint/.

We will update this notice before materially expanding the information or permissions the application uses. Granting or withdrawing an eBay app permission controls future authorised API access but does not by itself decide whether existing information must be erased or retained.