Privacy Policy

Bloom & Nourish Ltd („SellerEU“)
Suite 5, 5th Floor, City Reach, 5 Greenwich View Place, London, United Kingdom, E14 9NN
Company No. 14862714
Email: info@sellereu.com

When you access the website, our hosting provider (Hetzner Online GmbH, Germany) processes technically necessary server log data (IP address, time, requested resource, user agent) to deliver and secure the site. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR) in secure operation.

Non-essential cookies (statistics, marketing) are only set with your consent (Art. 6(1)(a) GDPR, § 25 TDDDG). Withdrawal and details are in our Cookie Policy.

Via the contact form, the service finder and service requests we process the data you provide (e.g. name, email, company, country, marketplace, message) to handle and answer your enquiry. The legal basis is pre-contract / contract performance (Art. 6(1)(b) GDPR) and our legitimate interest in handling enquiries (lit. f).

For the newsletter and the download (e.g. the “Amazon Germany Launch Checklist”) we use double opt-in: after signing up you receive a confirmation email. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the unsubscribe link. Delivery and management are handled by Brevo (see section 8).

We process waitlist sign-ups based on your consent or to initiate a contract. The customer portal uses passwordless email code/link login; processing serves authentication and contract handling (Art. 6(1)(b) GDPR).

If you use our chat, we process your inputs and any contact details you voluntarily provide to answer your enquiry. The legal basis is your consent or our legitimate interest (Art. 6(1)(a)/(f) GDPR). If you request human support, relevant conversation content may be sent to the configured operator channel (currently Telegram) solely to coordinate the reply. Please do not send passwords or payment details.

When you use the Assessment or service-request flow, we process the requested service, situation, quantities, marketplace and contact details. You may then upload documents, images or screenshots. These files are processed only to review the case, prepare a quote and deliver the requested service. Please upload only what is necessary and redact passwords, payment details and special-category data that we do not need. Uploads are protected with short-lived permissions scoped to the relevant request.

After an enquiry, we may provide a customer portal where you can view projects, messages, documents, tasks, quotes and invoices. Sign-in uses your email address and a one-time code or link. We may notify you by email about messages and status changes so that the work remains traceable.

We process enquiry, scope and communication data to prepare an individual quote. An estimate is not a binding price promise. Invoice and payment data are processed to perform the contract, prevent fraud and meet statutory retention obligations. For PayPal payments, PayPal processes payment data as an independent controller under its own privacy terms.

Our website chat may generate automated replies from the SellerEU knowledge base and can hand a conversation to a human specialist when needed. Automated replies do not make legal, tax or governmental decisions. We do not make decisions based solely on automated processing that produce legal or similarly significant effects.

To send transactional emails (confirmations, notifications) and manage contacts we use Brevo (Sendinblue GmbH, Cologne) as a processor. Sending and open information (e.g. via a counting pixel) may be processed to ensure delivery and function. A data processing agreement under Art. 28 GDPR is in place with Brevo.

When paying via PayPal, your payment data is processed directly by PayPal. The legal basis is contract performance (Art. 6(1)(b) GDPR). PayPal's privacy terms apply.

• Brevo / Sendinblue GmbH — email sending & contacts
• PayPal (Europe) S.à r.l. — payments
• Hetzner Online GmbH — hosting (Germany)

We keep personal data only as long as necessary for the stated purposes: enquiry/lead data generally up to 24 months after last contact, newsletter data until withdrawal, contract and invoice data per statutory retention periods (typically 6–10 years). Data is then deleted or anonymised.

The controller is established in the United Kingdom, for which the EU Commission has issued an adequacy decision. Our processors process data within the EU/EEA; where transfers to third countries occur, they are based on appropriate safeguards (e.g. EU Standard Contractual Clauses).

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR). You may withdraw consent at any time with effect for the future. Contact info@sellereu.com. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

Transmission is encrypted (TLS/HTTPS). We update this Privacy Policy when processing or the legal situation changes.