SELLERBASE PRIVACY NOTICE
Version: 1.0 Effective Date: January 12, 2026
1. INTRODUCTION AND SCOPE
This Privacy Notice (the "Notice") explains how Sellerbase Ltd ("Sellerbase", "we", "us", or "our") collects, uses, discloses, and protects personal data, and the rights available to individuals under applicable data protection law.
This Notice addresses the requirements of Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK GDPR, the Swiss Federal Act on Data Protection, and other applicable data protection laws (together, "Applicable Data Protection Laws").
This Notice covers two distinct groups of individuals:
- Individuals whose details appear in our business database — Sellerbase compiles a database focused on businesses and companies. The contact details we hold are predominantly generic, role-based company details that do not identify an individual. Where limited personal data relating to an individual is present, we did not obtain it directly from that individual, and for them this Notice serves as the information required under Article 14 GDPR (data not obtained directly from the data subject). See Section 4.
- Customers, prospects, and website visitors — individuals who create an account, contact us, or interact with our website (see Section 5). For these individuals, this Notice serves as the information required under Article 13 GDPR (data obtained directly from the data subject).
Capitalized terms not defined here have the meaning given in the Sellerbase Terms of Service.
2. WHO WE ARE
Sellerbase is the controller of the personal data described in this Notice.
Sellerbase Ltd 20 Foot Road, Grand Baie, Mauritius Company Number: 227171 Business Registration Number: C25227171 Email: contact@sellerbase.net
For any privacy-related question or to exercise your rights, contact us at contact@sellerbase.net (see Sections 8 and 16).
3. APPLICABILITY AND HOW TO CONTACT US
Sellerbase is established in Mauritius. Where our processing falls within the scope of the GDPR or UK GDPR under Article 3(2) (offering services to, or monitoring individuals in, the EU/EEA or UK), individuals in the EU/EEA, the UK, and Switzerland may contact us directly at contact@sellerbase.net regarding any matter relating to our processing of their personal data.
4. INFORMATION IN OUR BUSINESS DATABASE
4.1 Who this Section concerns
Our database is focused on businesses and companies rather than individuals, and most of the information we hold is company-level information that is not personal data. This Section applies where the database includes limited personal data relating to an identifiable individual. We did not obtain that information directly from you.
4.2 Categories of data
The contact details we record are predominantly generic, role-based company details (for example, addresses such as info@ or contact@ a company domain), which generally do not identify an individual and are not personal data.
Where personal data of an individual is nonetheless present — typically because an individual's details were published in a business-contact context, such as on a company "contact us" page — it is limited to business contact details and may include items such as a name, a business email address, or a business phone number.
We do not knowingly collect or process special categories of personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, health, or sexual orientation).
4.3 Where we obtain this data
We compile this information from sources that are publicly available or otherwise publicly accessible online.
4.4 Purpose and legal basis
We process this data to compile, maintain, and make available a business intelligence database that our customers use for market research, business analysis, and B2B lead generation.
Our legal basis is legitimate interest under Article 6(1)(f) GDPR — namely our and our customers' interest in compiling and using accurate B2B contact information relating to individuals acting in their professional capacity. We have conducted a balancing assessment that takes into account the business (rather than personal) context of the data, the public availability of the source data, the reasonable expectations of individuals in a professional setting, data minimization, and the availability of an objection/opt-out mechanism. A summary of this legitimate interest assessment is available on request.
We do not represent that legitimate interest is an appropriate basis for every downstream use by our customers; each customer is an independent controller responsible for its own legal basis (see the Sellerbase Data Protection Addendum).
5. PERSONAL DATA OF CUSTOMERS, PROSPECTS, AND WEBSITE VISITORS
5.1 Who this Section concerns
This Section concerns individuals who create or administer a customer account, communicate with us, or visit our website.
5.2 Categories of personal data and purposes
| Purpose | Categories of data | Legal basis |
|---|---|---|
| Creating and administering accounts; providing the Platform | Name, business email, account credentials, role/seat | Performance of a contract — Art. 6(1)(b) |
| Billing and payment | Billing contact, company details, transaction records | Contract — Art. 6(1)(b); legal obligation — Art. 6(1)(c) |
| Customer support and communications | Contact details, correspondence | Contract — Art. 6(1)(b); legitimate interest — Art. 6(1)(f) |
| Marketing to prospects and customers | Business contact details, engagement data | Legitimate interest — Art. 6(1)(f); consent where required — Art. 6(1)(a) |
| Website operation, security, and fraud prevention | IP address, device/usage data, log data | Legitimate interest — Art. 6(1)(f) |
| Analytics and service improvement | Usage and device data | Consent where required; otherwise legitimate interest — Art. 6(1)(f) |
| Complying with legal obligations | As required | Legal obligation — Art. 6(1)(c) |
You can object to processing based on legitimate interest, and withdraw consent at any time where processing is based on consent (see Section 8).
6. WHO WE SHARE PERSONAL DATA WITH
We disclose personal data to:
-
Customers — information from our database is made available to customers under contract, as part of our services. Where that information includes personal data, customers act as independent controllers for their own use of it.
-
Service providers (sub-processors) — we use third parties to operate our business. The categories are:
Category Purpose Cloud hosting providers Infrastructure and data storage Analytics providers Platform performance monitoring Support tooling providers Customer support delivery Payment processors Payment processing Email service providers Communications A current list of our sub-processors is available on request at contact@sellerbase.net.
-
Professional advisers, auditors, and authorities — where necessary to comply with law, exercise or defend legal claims, or respond to lawful requests.
We do not sell personal data of website visitors or customer account holders.
7. INTERNATIONAL TRANSFERS
Sellerbase is established in Mauritius, which is not the subject of an adequacy decision under Article 45 GDPR. Where personal data subject to the GDPR, UK GDPR, or Swiss law is transferred to or from Sellerbase, we rely on appropriate safeguards, including:
- the Standard Contractual Clauses approved by the European Commission (Implementing Decision (EU) 2021/914);
- the UK International Data Transfer Addendum for transfers subject to the UK GDPR; and
- the SCCs with necessary modifications for transfers subject to Swiss law.
We apply appropriate supplementary measures to protect transferred data. Further information about our transfer safeguards is available on request.
8. YOUR RIGHTS
Subject to the conditions and exemptions in Applicable Data Protection Laws, you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete personal data;
- Erasure of your personal data ("right to be forgotten");
- Restrict processing in certain circumstances;
- Data portability for data you provided to us, where applicable;
- Object to processing based on legitimate interest, including objecting at any time to processing for direct marketing; and
- Withdraw consent at any time, where processing is based on consent (without affecting prior processing).
Objection and suppression. If you object to the inclusion of your business contact data in our database, or ask us to erase it, we will remove it and add the minimum necessary identifiers to a suppression list so that the record is not re-introduced. We retain this suppression list to honor your request on an ongoing basis.
How to exercise your rights. Email contact@sellerbase.net. We will respond within the timeframes required by Applicable Data Protection Laws (generally within one month). We may need to verify your identity before acting on a request.
9. AUTOMATED DECISION-MAKING AND PROFILING
We organize and structure business information, which may include profiling in the general sense (for example, associating a professional with a company or category). We do not make decisions that produce legal effects concerning you, or similarly significantly affect you, based solely on automated processing within the meaning of Article 22 GDPR. Decisions about how to use the data (for example, whether to contact a business) are made independently by our customers.
10. DATA RETENTION
- Business database — we retain business contact data for as long as it remains relevant and accurate for B2B purposes. We review the database periodically and remove or update records that are outdated, inaccurate, or no longer relevant, and we act on valid erasure and objection requests.
- Customer and account data — retained for the duration of the customer relationship and thereafter as set out in Section 14 of the Terms of Service and as required to meet our legal, accounting, and tax obligations.
- Suppression list — retained for as long as necessary to ensure we continue to honor objection and erasure requests.
- Website and analytics data — retained for limited periods consistent with the purpose for which it was collected.
11. SECURITY
We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or misuse, taking into account the nature of the data and the risks involved. We keep these measures under review. We will notify affected parties of a personal data breach where required by Applicable Data Protection Laws.
12. COOKIES AND SIMILAR TECHNOLOGIES
Our website uses cookies and similar technologies that are strictly necessary to operate the service (including authentication), and, subject to your consent where required, limited analytics to understand and improve performance. Where consent is required, we obtain it before setting non-essential cookies, and you can withdraw it at any time through your browser settings or any cookie controls we provide.
13. CHILDREN
The Platform and our services are intended for business use and are not directed to children. We do not knowingly process the personal data of children.
14. COMPLAINTS
If you have a concern about how we handle your personal data, please contact us first at contact@sellerbase.net so we can try to resolve it. You also have the right to lodge a complaint with a supervisory authority:
- EU/EEA — the supervisory authority in your country of residence, place of work, or place of the alleged infringement.
- United Kingdom — the Information Commissioner's Office (ICO).
- Switzerland — the Federal Data Protection and Information Commissioner (FDPIC).
15. CHANGES TO THIS NOTICE
We may update this Notice from time to time. The current version is published at sellerbase.net/privacy with its effective date. Where changes are material, we will take reasonable steps to bring them to your attention.
16. CONTACT
For any question about this Notice or our processing of personal data:
Sellerbase Ltd 20 Foot Road, Grand Baie, Mauritius Email: contact@sellerbase.net
End of Privacy Notice Version 1.0