Privacy Policy / Datenschutzerklärung

In accordance with the EU General Data Protection Regulation (GDPR / DSGVO).

1. Controller

Bloom & Nourish LTD
Suite 5, 5th Floor, City Reach, 5 Greenwich View Place, London E14 9NN, UK
UK Companies House No. 14862714
Email: hello@sellereu.com

2. Personal data we collect

2.1 Server access logs

Hostinger (Lithuania, EU) automatically records anonymised IP, request URL, user agent, referrer, timestamp. Legal basis: Art. 6 (1) (f) GDPR. Retention: 14 days.

2.2 Free GPSR / Listing Audit tool

When you submit an amazon.de URL or ASIN, our server fetches the public listing HTML once, parses compliance signals, and returns the result to you. We do not store the URL, the ASIN, or the response. The server only logs that a request was made (rate-limit purposes) — see § 2.1.

2.3 Waitlist signups

Email + IP + timestamp stored in an EU-resident SQLite database (Hostinger Lithuania). Legal basis: Art. 6 (1) (a) GDPR (consent given by submitting the form). Used to notify you when the Chrome extension launches and to send the founding-user discount code. Unsubscribe anytime: reply to the welcome email or write to hello@sellereu.com.

2.4 Pro / Team upgrade requests

When you submit the Pro upgrade form we store: name, email, optional company name, country, plan choice. Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures at your request). Data is shared with our email infrastructure provider Brevo (Sendinblue SAS, France — EU) for invoice delivery and license-key dispatch, and with PayPal Europe S.à r.l. for invoicing.

2.5 Chrome extension (when published)

The SellerEU Scan Chrome extension processes amazon.de listing data locally in your browser. Free-tier features (10-point score, GPSR check, keyword cluster, FBA calculator, supplier finder) require no server call after install. Pro-tier features (AI rewrite, Keepa tracker, bulk audit, weekly report) call our server-side API api.sellereu.com with your license key for verification + processing. The AI rewrite endpoint forwards your prompt to OpenAI, L.L.C. (USA); OpenAI does not retain prompts for model training (per their enterprise commitment). Standard contractual clauses apply for the international transfer.

3. Cookies and tracking

This website uses only essential cookies (cookie-banner choice, language preference). We do not use Google Analytics, Meta Pixel or any other cross-site tracking script.

If you accept analytics, we load Plausible Analytics (Plausible Insights OÜ, Estonia — EU). Plausible is cookieless. See plausible.io/data-policy.

4. Third-party iframes

The homepage embeds a Google Trends widget (Google receives your IP when this widget loads). Legal basis: Art. 6 (1) (f) GDPR.

5. Your rights under GDPR

Access (Art. 15)
Correction (Art. 16)
Erasure (Art. 17)
Restriction (Art. 18)
Portability (Art. 20)
Objection (Art. 21)
Withdraw consent (Art. 7 (3))
Complaint with a supervisory authority — for German residents, the BfDI or your state DPA

Contact hello@sellereu.com. We respond within 30 days.

6. Data security

Site served exclusively over TLS. Server-side secrets are stored in an environment file outside the public document root. Form submissions are rate-limited and protected by a honeypot field.

7. Changes to this policy

Material changes will be highlighted on the homepage.

Last updated: