Data Protection & Security

LRT Media Last updated: October 27, 2026

LRT Media (the trading brand of Lotus Labs, Udyam Registration No. UDYAM-DL-03-0081841) is an Amazon growth agency that manages sellers' accounts end-to-end — listings, advertising, inventory, and strategy — using the access each seller grants us in Amazon Seller Central. Protecting that access and the data we handle is a core part of our service. This page explains how we do it, and it sits alongside our Privacy Policy. Our handling of Amazon account data follows Amazon's Acceptable Use Policy.

Responsible Use of Your Amazon Account

  • We access your account only with your permission, and only at the permission level our work needs.

  • We use your account and its data only to provide the services you've asked for.

  • We don't sell, trade, or distribute your data outside our service, and we don't build external data products from it.

  • We don't pool different sellers' data together to supply or sell to any third party.

  • We don't use your data to market to Amazon shoppers, and we never request or manufacture reviews.

  • We never ask for or store your Amazon password — we work only through the authorized user access you set up.

  • We describe what our service does honestly and don't overstate it.

  • We follow applicable data-protection laws.

How We Access Your Account

  • Access is granted by you in Seller Central, normally by adding us as an authorized user with set permissions.

  • We request only the permissions our work requires — nothing more.

  • You can review or remove our access at any time under Settings → User Permissions.

Account & Device Security

  • Multi-factor authentication (MFA) is enabled on our own accounts and the tools we use to work on your account.

  • Our team's devices are password-protected, encrypted, and kept up to date.

  • Any login details we hold are stored in a secure password manager — never in plain text and never shared over chat or email.

  • We access client accounts only over secure, trusted networks.

  • Data we store (such as reports) is kept in services that encrypt it in transit and at rest.

Access Control

  • Only the team members who need access to your account have it (least-privilege access).

  • Each team member uses their own individual login — no shared or generic accounts.

  • Access is removed promptly when a team member leaves, changes role, or when your engagement ends.

Confidentiality & Team

  • Our team is bound by confidentiality agreements.

  • We give the team regular security and privacy awareness guidance.

Data Retention & Deletion

  • We keep only the data we need to run your service.

  • Any reports or data we've saved are deleted within 30 days of your engagement ending or your deletion request, unless the law requires us to keep it.

  • Where law requires us to keep certain records (such as tax records), we keep only those, for only as long as required.

  • You can request deletion at any time by emailing team@lrtmedia.com.

Incident Response

  • If a security issue affects your account or data, we act quickly to contain and fix it.

  • We notify you promptly, explain what happened, and tell you what we're doing about it.

  • We cooperate with Amazon and relevant authorities as required.

Sub-processors

We use a small, vetted set of service providers that process data on our behalf under confidentiality and data-protection terms. The categories and current list appear in our Privacy Policy and are available on request.

Reporting a Security Concern

To report a security issue or ask about our data-protection practices, email team@lrtmedia.com.

Contact

LRT Media (operated by Lotus Labs) D-302, Helloworld GreenArch, Chattarpur, New Delhi, Delhi 110074, India Email: team@lrtmedia.com