Privacy Policy
Last Updated: April 2, 2026
1. Introduction
WMS 360 is a cloud-based warehouse management and multichannel order management platform operated by Combosoft Ltd, registered in England and Wales. Registered address: 35 Knockhall Rd, Greenhithe, DA9 9EZ, United Kingdom.
We are committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are committed to protecting personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Data Controller
Combosoft Ltd acts as a data controller for account and usage data, and as a data processor for personal data processed on behalf of our business customers (sellers) in the course of providing the WMS 360 service.
3. Information We Collect
- Account Information: Name, email address, company name, billing address, and contact details.
- Marketplace & Order Data: Order details, customer shipping addresses, and listing data from integrated channels (eBay, Amazon, Shopify, OnBuy, etc.) — processed on behalf of our seller clients.
- Inventory Data: Product details, stock levels, warehouse locations.
- Usage Data: Log data, session activity, feature usage, IP addresses, and browser/device information.
4. Lawful Basis for Processing
- Contractual necessity: Processing required to deliver the WMS 360 service under your subscription agreement.
- Legitimate interests: Usage analytics, security monitoring, and service improvement.
- Legal obligation: Where required by UK law (e.g., financial records retention).
5. How We Use Your Information
- Provide, operate, and maintain the WMS 360 platform.
- Synchronise inventory and orders across multichannel integrations.
- Process and manage shipping and logistics workflows.
- Provide customer support and technical assistance.
- Send service notices, security alerts, and platform updates.
- Comply with legal and regulatory obligations.
6. Data Sharing and Sub-Processors
We do not sell your personal data. We share data only where necessary with:
All sub-processors are contractually bound to process data only as instructed and in compliance with UK GDPR.
- Cloud hosting: A2 Hosting (infrastructure and data storage)
- Marketplace APIs: eBay, Amazon, Shopify, OnBuy, and others — solely to fulfil integration services
- Courier APIs: Royal Mail, DPD, and others — solely to generate and track shipments
- Email/communication: For transactional service emails
All sub-processors are contractually bound to process data only as instructed and in compliance with UK GDPR.
7. Data Retention
- Active account data is retained for the duration of your subscription.
- Upon termination of services, personal data processed on your behalf is deleted or anonymised within 30 days, unless retention is required by law (e.g., HMRC requires financial records for 6 years).
- Usage/log data is retained for up to 12 months for security and diagnostic purposes.
8. Your Rights
Under UK GDPR you have the right to:
To exercise any of these rights, contact us at support@wms360.co.uk. We will respond within 30 days in accordance with UK GDPR requirements.
- Access — request a copy of your personal data
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — request we limit processing of your data
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interests
To exercise any of these rights, contact us at support@wms360.co.uk. We will respond within 30 days in accordance with UK GDPR requirements.
9. Data Subject Access Requests (DSARs)
We assist our business customers (as data controllers) in responding to DSARs from their end users. If you are a customer of a business using WMS 360 and wish to exercise your rights, please contact that business directly.
10. International Transfers
Where personal data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) or adequacy decisions, in accordance with UK GDPR Chapter V.
11. Data Security
We implement industry-standard security measures including encryption at rest and in transit (TLS), access controls, and regular security monitoring. In the event of a data breach likely to result in risk to individuals, we will notify the ICO within 72 hours and affected parties without undue delay.
12. Cookies
We use essential cookies to operate the platform. For details on cookie usage on our marketing site, please see our Cookie Policy.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform. Continued use after changes constitutes acceptance.
14. Contact & Complaints
Combosoft Ltd
35 Knockhall Rd, Greenhithe, DA9 9EZ, United Kingdom
Email: support@wms360.co.uk
Phone: +44 330 113 9444
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk | 0303 123 1113
35 Knockhall Rd, Greenhithe, DA9 9EZ, United Kingdom
Email: support@wms360.co.uk
Phone: +44 330 113 9444
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk | 0303 123 1113