Sellora Marketplace Seller Privacy Policy

Last Updated: October, 2025

This Notice is available in English

About Us

Sellora Marketplace (collectively referred to as “Sellota,” “we,” “us,” or “our” in this notice) is an online marketplace that enables businesses to sell their products across various Sellora e-commerce platforms. The data controller is Sellora, LLC, located at 2 Sulfur Canyon, San Antonio, TX 78247.

What Does This Privacy Policy Cover?

This Notice explains how and why we collect, use, disclose, retain, and otherwise process and protect personal information (or equivalent information protected under applicable privacy laws) in connection with our dealings with Sellora Marketplace Retailers (“sellers,” “data subjects,” or “residents”) and potential sellers who have applied to join the Sellora Marketplace. It also outlines the rights of the individuals described above concerning our processing of their personal information

This Notice applies to:

Individual sellers, including sole traders;
Individuals engaged by corporate sellers, particularly those who access and use the Sellora Marketplace on behalf of a corporate seller; and
Potential sellers involved in the application process.

If there is any conflict between the general provisions of this Notice and a country-specific section, the country-specific provisions will take precedence.

References to “you” or “your” in this Notice are intended to describe the individuals outlined above.

What Is Not Covered in This Privacy Notice?

This Privacy Notice does not apply to any services, websites, or applications that have their own separate privacy notice.

What Personal Information Do We Collect?

We may collect the following categories of personal information. Not all categories may be collected about every individual:

Basic Personal Identifiers – Name, telephone number, physical address, email address, government-issued identifiers (e.g., national ID, driver’s license, taxpayer ID, passport), signatures, and usernames or similar identifiers.
Device and Online Identifiers – Account login information, MAC address, IP address, cookie IDs, mobile ad IDs, login data, browser type and version, browser plug-in types and versions, operating system and platform, social media information, and other technology used to access the Sellora Marketplace.
Internet and Other Network Activity Information – Information about your browsing or search activity, interactions with our websites, mobile applications, emails, or advertisements, including keystroke patterns that help distinguish between humans and bots.
Communications – Content of emails, text messages, or other communications, call logs, and calendar information where Sellora is a party to the exchange.
Commercial Information – Purchase and transaction history (products or services purchased, rented, or returned), product reviews, travel and vacation information, and entries in sweepstakes or contests.
Demographic Information – Age, gender, citizenship, ethnicity, date of birth, family or marital status, household income, education, professional and employment information, family health, number of children, number of cars owned, and software or virtual assets owned.
Background Information – Results of background checks and criminal convictions.
Financial Information – Financial institution account details and/or credit scores (where applicable).
Geolocation Data – Information about the location of your device, which may be approximate (e.g., inferred from your IP address).
Sensory Information – Audio, visual, and other sensory data, including photographs, audio recordings, and video records.
Inferences, Preferences, and Characteristics – Insights drawn from selling patterns, behaviors, intelligence, and aptitudes.
Onboarding Information – Whether a seller or potential seller is on a sanctions list (or subject to similar restrictions) and personal information included in press releases related to the seller or potential seller.

How Do We Use Your Personal Information?

We may use the personal information we collect from you for the following purposes, based on lawful grounds as defined under the General Data Protection Regulation (GDPR):

Purpose For Processing	Lawful Basis For Processing under GDPR
To process and decide the outcome of a potential seller’s application to join the Sellora Marketplace, including by carrying out onboarding checks in relation to a potential seller. This includes checking potential sellers against the Office of Foreign Assets Control (OFAC) list of countries, regions, organizations and individuals who are sanctioned by the US Federal Government and checking press releases relating to potential sellers.	Processing that is carried out to check against the OFAC list is necessary for compliance with a legal obligation to which we are subject. Otherwise, processing is necessary for our legitimate interests in: Assessing the risk posed to Sellora and others by onboarding a potential seller; Protecting customers by ensuring they interact only with legitimate sellers; and Protecting the security and integrity of our systems, processes and our business, and helping to prevent and detect criminal activity
To create and maintain seller accounts and to enable and manage access to the Sellora Marketplace.	Processing is necessary for our legitimate interests, including: Complying with the terms of our seller contracts; Ensuring the Sellora Marketplace operates as intended; and Protecting the security and integrity of our systems, processes, and business, as well as helping to prevent and detect criminal activity.
To manage seller claims, complaints, andother communications.	Processing is necessary for our legitimate interests, including: Complying with the terms of our seller contracts; Protecting our commercial interests and reputation; Ensuring that the sellora Marketplace operates as intended; and Protecting the security and integrity of our systems, processes and our business, and helping to prevent and detect criminal activity.
To settle seller payments.	Processing is necessary for our legitimate interests, including: Complying with the terms of our seller contracts; and Ensuring the Sellora Marketplace operates as intended.
To inform sellers and deliver relevant training and development.	Processing is necessary for our legitimate interests, including: Complying with the terms of our seller contracts; Ensuring the Sellora Marketplace operates as intended; and Protecting and furthering our commercial interests in the Sellora Marketplace.
To fulfill customer orders or service requests and to provide customer support services.	Processing is necessary for our legitimate interests, including: Complying with the terms of our contracts with customers; Ensuring the Sellora Marketplace operates as intended; and Protecting and furthering our commercial interests in the Sellora Marketplace.
To provide IT and administrative services and support.	Processing is necessary for our legitimate interests, including: Complying with the terms of our seller contracts; Ensuring the Sellora Marketplace operates as intended; and Protecting the security and integrity of our systems, processes, and business, and helping to prevent and detect criminal activity.
To conduct auditing and monitoring of transactions and engagement.	Processing is necessary for our legitimate interests, including: Ensuring that the Sellora Marketplace operates as intended. Protecting and furthering the commercial interests of the Sellora Marketplace; and. Protecting the security and integrity of our systems, processes, and business, and helping to prevent and detect criminal activity.
The security and integrity of our systems, processes, and business, and helping to prevent and detect criminal activity.	Processing is necessary for our legitimate interests, including: Ensuring the Sellora Marketplace operates as intended; and Protecting and furthering our commercial interests in the Sellora Marketplace.
To inform and implement enhancements to our services, systems, and processes.	Processing is necessary for our legitimate interests, including: Ensuring the Sellora Marketplace operates as intended; and Protecting and furthering our commercial interests in the Sellora Marketplace.
To maintain and update our operational and technical functionality.	Processing is necessary for our legitimate interests, including: Ensuring that the Sellora Marketplace operates as intended. Protecting and furthering our commercial interests in the Sellora Marketplace; and Protecting the security and integrity of our systems, processes and business, and helping to prevent and detect criminal activity.
To fulfil our legal and compliance functions or obligations, including both external and internal requirements and policies in relation to business management, security, auditing, accounting, and insurance.	Processing is necessary for: Compliance with the legal obligations to which we are subject; and Our legitimate interests in ensuring adherence to regulatory or industry requirements, guidance, or best practice recommendations not mandated by law.
To enforce our legal rights, defend claims, or undertake legal proceedings.	Processing is necessary for: Compliance with the legal obligations to which we are subject; and Our legitimate interests in protecting and furthering our commercial interests in the Sellora Marketplace and more generally.
To send marketing communications, manage marketing campaigns related to the Sellora Marketplace, gain marketing insights, and personalize our service offerings.	Our lawful basis for processing is your (or the relevant seller organization’s) consent to receive marketing communications and personalized services from us.
To analyze how sellers and users are using the Sellora Marketplace.	Processing is necessary for our legitimate interests, including: Ensuring that the Sellora Marketplace operates as intended; and Protecting and furthering our commercial interests in the Sellora Marketplace.
To send relevant service notifications to sellers regarding the Sellora Marketplace.	Processing is necessary for our legitimate interests, including: Ensuring the Sellora Marketplace operates as intended; Protecting and furthering our commercial interests in the Sellora Marketplace; and Protecting the security and integrity of our systems, processes and business, and helping to prevent criminal behavior.
To prevent and detect fraud and deception.	Processing is necessary for our legitimate interests, including: Protecting our commercial interests and reputation, Ensuring the Sellora Marketplace operates as intended; and Protecting the security and integrity of our systems, processes and business, and helping to prevent criminal activity.
In accordance with CFPB (Consumer Financial Protection Bureau) Rule 1071, we may process information regarding the ethnicity, race, and gender of the owners of U.S. seller organizations.	Processing is necessary to comply with a legal obligation to which we are subject.
For carrying out tax calculations and in connection with the tax exemption program.	Processing is necessary to comply with a legal obligation to which we are subject.
To carry out credit checks and determine eligibility for merchant cash advances.	Processing is necessary for our legitimate interests, including ensuring that our sellers are likely to comply with the repayment terms of a merchant cash advance.

Identity Verification Data

With your explicit written consent, we collect and use:

1. Your personal, sensitive, and biometric data, including fingerprints, facial geometry scans, voiceprints, and iris scans; and
2. Scanned images or data extracted from government-issued identity documents, such as ID cards, passports, or driver’s licenses (collectively, “Verification Data”).

This data is collected solely for the purposes of verifying your identity, validating your eligibility to participate in Sellora services, preventing identity-related fraud, and assisting with legal and regulatory compliance (collectively, “Purposes”).

We may share, transfer, or make available Verification Data with third-party service providers, government agencies, and other affiliated or non-affiliated parties, whether domestically or internationally, to the extent necessary to facilitate Sellora services or comply with legal or regulatory obligations. Verification Data is never sold, leased, published, or traded. Any transfer of Verification Data outside your jurisdiction will be carried out in accordance with applicable legal safeguards.

You may withdraw your consent for the collection of Identity Verification Data at any time by emailing privacy@sellora.com. Withdrawal of consent will not affect the lawfulness of processing conducted prior to your withdrawal.

How Do We Collect Personal Information?

We collect personal information from you in a variety of ways, including:

1. Provided Directly by You or the Marketplace Seller

You, or the marketplace seller, may provide personal information to us in various ways, such as when engaging with us for onboarding, account management, or using the Sellora Marketplace.

2. Collected Through Automated Means

We may automatically collect personal information from the devices you (or anyone in your household) use to interact with the Sellora Marketplace, as well as from your interactions with emails we send. This information may include Device and Online Identifiers.

When you visit or interact with a Sellora Marketplace website, certain personal information may also be collected automatically through technologies such as cookies. For more details about our use of cookies, please refer to the Cookie Policy.

3. Obtained from Other Companies Within Our Family

We may receive your personal information from other organizations within our corporate family of companies.

4. Obtained from External Third-Party Sources
As part of our standard Sellora Marketplace seller onboarding process and to manage seller risk throughout the seller lifecycle, we may receive personal information from external third-party sources, including:
- 1. Onboarding and Risk Check Providers
  - Organizations that perform onboarding and ongoing seller risk checks on our behalf.
  - The personal information we may collect in this context includesOnboarding Information, Personal Identifiers, Device and Online Identifiers, Financial Information, and Non-Precise Location Information.
- 2. Business-to-Business Sales and Marketing Sources
  - Organizations that share details regarding potential sellers or enrich existing leads for our sales and marketing teams.
  - The personal information we may collect in this context includesPersonal Identifiers and Employment Information.
- 3. Credit Check Providers
  - Organizations that carry out credit checks on our behalf.
  - The information we may collect in this context includes Financial Information, in particular credit scores.

Who Do We Disclose Personal Information To & Why?

The categories of personal information we collect may be shared with other companies, including those within our corporate family, for the purposes described above.

We may also disclose personal information to third parties in the following circumstances:

1. Legal and Government Authorities
- Law enforcement, courts, or other legal or government bodies when required by law or when we believe disclosure is necessary to protect the safety, property, or rights of Sellora, our customers, associates, or others.
- In response to requests such as search warrants, valid legal inquiries, or investigations related to alleged breaches of agreements or violations of law.
- Regulatory authorities, for example, in response to consumer protection inquiries.
2. Service Providers and Business Partners
- Service providers that assist us with business activities.
- Banks, credit reference agencies, insurers, and brokers.
- Parties that have or may acquire control or ownership of our business.
3. Aggregated or Deidentified Data
- We may anonymize personal information and disclose aggregated data that does not identify you or your household (“deidentified data”) to third parties for any purpose, including industry and demographic analysis.

We require all service providers to maintain the security of your personal information and prohibit them from using or disclosing it for any purpose other than providing services on our behalf.

Please refer to the “Categories of Personal Information We Disclose to Third Parties” table below for more details on how we share personal information.

Categories of Personal Information We Disclose to Third Parties

We may share your personal information with certain categories of third parties as described below.

Category of Third Party	Categories of Personal Information Disclosed	Reason
Service Providers	Employment Information Personal Identifiers Demographic Information Characteristics of protected classifications under applicable law Financial Information Device and Online Identifiers Non-Precise Location Information Onboarding Information Government Identifiers Biometric Information	Assisting with seller onboarding checks. Providing payment processing services Assisting us with our marketing activities and campaigns and helping us to manage our relationships with our marketing affiliates. Providing managed hosting and cloud services Managing Sellora Marketplace website content Providing usage insights and user analytics Supplying case management systems for brand registration and IP infringement cases Assisting with business communications, including emails Providing content curation services Providing IT support services Assisting with client relationship management Helping prevent and detect fraud and deception Operating contact centers to manage customer interactions
Research Consultants	Personal Identifiers Demographic Information Device and Online Identifiers Employment Information Financial Information	Conducting interviews, surveys, or usability tests to improve seller experience
Auditors	Personal Identifiers Financial Information	Managing audits of our or your accounts
Professional advisors	Personal Identifiers Employment Information	Providing professional advice and managing services in accordance with contracts and/or legal obligations
Banks, credit reference agencies; insurers and brokers	Personal Identifiers Financial Information	Accounting purposes, claims management, and credit checks to determine eligibility for merchant cash advances
Entities with Control or Ownership of Our Business	Employment Information Personal Identifiers Demographic Information Characteristics of protected classifications under applicable law Financial Information Device and Online Identifiers Non-Precise Location Information Onboarding Information Government Identifiers Biometric Information	To help facilitate legitimate corporate transactions involving our business.

Where Do We Store and Process Personal Information?

We take appropriate steps to ensure that the personal information we collect is processed in accordance with this Notice and in compliance with applicable data protection laws, regardless of where it is stored or processed.

Personal information collected by Sellora is primarily processed and stored in the United States. If personal information is transferred from the United States to another jurisdiction, we ensure that such transfers are carried out in accordance with applicable data protection and privacy laws, using appropriate safeguards to protect your personal information.

How Long Do We Retain Your Personal Information?

We retain your personal information for as long as is reasonably necessary to fulfill the purposes for which it was collected, as outlined in this Privacy Notice or any other notice provided at the time of collection. This includes retaining information to meet our legal, regulatory, tax, accounting, or reporting obligations.

We may also retain your personal information for a longer period if it is required in connection with a complaint, investigation, or if we reasonably believe that litigation relating to our relationship with you—or the organization you represent—may arise.

However, we will not retain your information longer than is permitted under applicable law or Sellora’s internal retention policies. When no longer required, personal information is securely deleted or anonymized in accordance with Sellora’s data retention and disposal procedures.

Biometric Retention Schedule

We retain biometric identifiers and biometric information only for as long as necessary to fulfill the initial purpose for which they were collected, or for up to three (3) years from your last interaction with us—whichever occurs first—in accordance with applicable laws. After this period, such information is securely deleted.

Scanned images or data extracted from government-issued identification documents are securely deleted promptly after the original purpose for collection has been satisfied, unless a longer retention period is required by applicable law.

How Do We Secure Your Personal Information?

We use reasonable information security measures, in compliance with data protection laws, including physical, administrative, and technical safeguards. Learn more about measures you can take to protect the security of your personal information.

Third-Party Links

The Sellora Marketplace may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect, use, or disclose personal information about you.

Sellora does not own or control these third-party websites or features and is not responsible for their privacy or data-handling practices. In some cases, these third parties operate independently from Sellora, and their privacy practices are not governed by this Notice.

We encourage you to review the privacy statements of any third-party websites or services you interact with to understand how they collect, use, and share your personal information.

What Are My Jurisdictional Privacy Rights?

California

California residents, see our California Privacy Policy for information about our privacy practices and your California privacy rights.

Canada

Canadian residents have specific privacy rights under applicable federal and provincial privacy laws. You may request that we:

Provide you with access to a copy of and certain details regarding the personal information we hold about you;
Delete your personal information;
Correct any inaccurate personal information; or
Stop sharing or disseminating your personal information.

Your request must be sufficiently detailed to allow us to locate the personal information in question. Once we receive your written request, we may need to verify your identity and the purpose of your request.

If you authorize an agent to exercise your privacy rights on your behalf, the agent may use the same process to submit requests. We will require documentation demonstrating the agent’s authority, such as a notarized power of attorney or a signed letter authorizing the agent to act on your behalf.

For your protection, we only fulfill requests associated with the email address provided in your submission, and we may take additional steps to verify your identity before proceeding. If we are unable to verify your identity, we will notify you, and your privacy request may not be processed.

When permitted by law, we may charge a reasonable fee to cover the costs of responding to your request, limited to transcription, reproduction, or transmission expenses.

Upon receiving your request, we will acknowledge receipt and inform you if further information is required. We typically respond within one month, unless the request is complex or involves multiple inquiries. In such cases, we may extend the response time and will inform you accordingly. Please note that we may decline requests where allowed by applicable law.

We will not discriminate against you for exercising your privacy rights. This means we will not deny you goods or services, charge different prices or rates, or provide a different level or quality of goods or services. However, some programs or services may rely on personal information to function, and fulfilling your request may affect your ability to use those features.

If you have a concern about the way we addressed your Privacy Request, use this tool to find the right organization to contact or reach out to the appropriate provincial or federal privacy commissioner.

Hong Kong

Where Hong Kong Special Administrative Region (HKSAR) data protection laws apply, you have the following rights, subject to certain conditions and limitations:

Be Informed: You have the right to be informed about the collection and use of your personal information, including the purpose of collection and the types of potential recipients of your personal information.
Access: You may request access to your personal information held by us and obtain a copy of such information.
Correction: You may request the correction of any personal information that is inaccurate.
Erasure: You may request the deletion of personal information when it is no longer necessary for the purposes for which it was collected.
Object: You have the right to object to the use of your personal information for direct marketing purposes.

Mexico

Where Mexican data protection laws apply, you have the following rights, subject to certain conditions and limitations:

Access: Request access to the personal information Sellora holds about you.
Correction: Request correction of any inaccurate personal information in Sellora’s systems.
Erasure: Request deletion of certain personal information in Sellora’s systems.
Opposition: Object to certain processing of your personal information held by Sellora.
Withdrawal of Consent: Withdraw your consent for processing personal information (note that this may affect your relationship with us).
Limitation of Consent: Limit the consent you have provided for processing your personal information in accordance with Mexican privacy regulations.

Once you submit your request, you will receive a response within 30 business days. If your request is approved, it will be processed within 15 business days.

To submit a request, you must provide:

A copy of your official identification.
If acting as a legal representative, a copy of the power of attorney appointing you as representative and a copy of your official identification.

Turkey

Where Turkish data protection laws apply, you have the following rights, subject to certain conditions and limitations:

Access: Learn whether your personal information has been processed.
Information: Request details about the processing if your personal information has been processed.
Purpose: Understand the purpose of the personal information processing and whether it is being used in accordance with that purpose.
Third-Party Transfers: Know the third parties to whom your personal information is being transferred.
Rectification: Request correction of incomplete or inaccurate personal information.
Erasure: Request deletion of your personal information.
Third-Party Reporting: Request information regarding the correction or deletion of personal information transferred to third parties.
Objection to Automated Decisions: Object to any detrimental outcome made solely through automated processing of personal information.
Compensation: Request compensation for damages resulting from the unlawful processing of your personal information.

UK and EEA

Where UK or EU data protection laws apply, you have the following rights, subject to certain conditions and limitations:

Access: The right to receive a copy of your personal information.
Rectification: The right to require us to correct any inaccuracies in your personal information.
Erasure (Right to be Forgotten): The right to request deletion of your personal information in certain circumstances.
Restrict Processing: The right to request that we restrict the processing of your personal information in specific situations, such as when you contest its accuracy
Data Portability: The right to receive the personal information you provided to us in a structured, commonly used, machine-readable format and, where applicable, transmit that data to another controller.
Object:
- At any time, to processing of your personal information for direct marketing (including profiling).
- In certain other situations, to our continued processing of your personal information (e.g., when processing is based on legitimate interests), unless we have compelling legitimate grounds to continue or processing is required to establish, exercise, or defend legal claims.
Not Be Subject to Automated Decision-Making: The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects or similarly significantly affects you.
Withdraw Consent: The right to withdraw any consent you have provided for the processing of your personal information at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
Depending on whether UK and/or EU data protection laws apply you may have the right to make a complaint to the Information Commissioner’s Office (ICO), the UK regulator for data protection issues, and/or to the data protection supervisory authority in your jurisdiction. We would, however, always appreciate the chance to deal with your concerns before you approach a supervisory authority. Contact details for the ICO are available here. For a list of EEA data protection supervisory authorities and their contact details see here.

Vietnam

Where Vietnamese data protection laws apply, you have the following rights, subject to certain conditions and limitations:

Be Informed: Be informed about the processing of your personal information.
Consent: Provide or withhold consent for the processing of your personal information.
Access and Correction: Access your personal information and request corrections as necessary.
Withdraw Consent: Withdraw your consent at any time.
Erasure: Request deletion of your personal information.
Limit Processing: Request limitations on the processing of your personal information.
Data Provision: Be provided with a copy of your personal information.
Objection: Object to the processing of your personal information.
Complaint or Legal Action: Complain, denounce, and/or initiate lawsuits regarding the processing of your personal information.
Claim Damages: Seek compensation for damages resulting from unlawful processing.
Self-Defense: Exercise your rights in accordance with applicable law.

If we are unable to fully or partially comply with your request, we will provide reasons for the denial where required by law.

Obligations under Vietnamese Law:

Vietnamese citizens also have certain obligations under the Decree, including:

Protecting their own personal information and requesting that others protect it.
Respecting and protecting the personal information of others.
Providing accurate and complete personal information when giving consent for processing.
Participating in the dissemination of knowledge and skills for personal information protection.
Complying with personal information protection laws and participating in preventing violations of these regulations.

Potential Harms from Data Processing

We respect the trust you place in us and take reasonable information security measures to protect your personal information. However, personal data processing carries inherent risks, including:

Accidental or unlawful destruction, loss, or alteration of personal data.
Unauthorized disclosure or access to personal data.

Such incidents may result in physical, material, or non-material harm. We implement safeguards to minimize these risks, but they cannot be completely eliminated.

How Can You Exercise Your Rights?

California Residents: You can manage and exercise your privacy rights by sending an email to privacy@sellora.com. For more details, please refer to our California Privacy Policy
All Other Individuals Outside the U.S.: You can exercise your privacy rights by contacting us at privacy@sellora.com or by sending a written request to:

Sellora, LLC

Privacy Department
2 Sulfur Canyon
San Antonio, TX 78247

We may ask you to log into your account or provide specific personal information to verify your identity and confirm your right to access your personal information, or to exercise any of your other privacy rights. This security measure ensures that personal information is not disclosed to anyone without proper authorization. We may also contact you for additional information to help us process your request.

Who Can You Contact About the Privacy Notice?

For any questions or comments regarding this Privacy Notice or how we handle your personal information, you may contact our Customer Service Team or write to the Sellora Privacy Department at:

Sellora, LLC
Privacy Department
2 Sulfur Canyon
San Antonio, TX 78247
You can also reach us by email at privacy@sellora.com