Sellonn privacy notice

Last updated: 20 October 2026

Sellonn operates from the United Kingdom and is responsible for the personal information described here (the data controller). One owner uses this private platform to manage their own businesses, stores and connected accounts. It is currently in private testing and is not open for unrelated businesses to register as platform customers.

Contact hello@sellonn.com for support, privacy questions, requests or complaints.

Information we use and why

The information depends on the features you use:

• Requested orders and services: names, email addresses, checkout answers, chosen products, payment status and provider references let us handle orders, deliver files or responses, provide receipts and support, and manage refunds or installments. We rely on contract where this is necessary to fulfil an agreement with you or take steps you request before entering one. Optional marketing is separate.
• Optional marketing email: we use your contact details and subscription choices with your consent. Delivery, consent and unsubscribe records help us honour that choice. You can withdraw consent without affecting an order or the lawfulness of earlier use.
• Enquiries and social interactions: we use contact details, account and participant identifiers, comments, messages and relevant post information to respond to ordinary enquiries and manage interactions with the owner's connected Instagram or Facebook accounts. Our legitimate interest is handling the interaction you initiate and keeping those accounts usable. Order-related support uses the contract basis where applicable. A comment or message does not by itself subscribe you to marketing.
• Security and limited testing: sign-in, connection, request and activity records help protect access, prevent repeated actions and investigate faults. Our legitimate interests are protecting the service and verifying that requested functions work. Private tests use the owner or participating test accounts and limited information; identifiable test records are still personal information.
• Published content and optional referrals: profiles, descriptions, images and files supplied for publication become visible to visitors. Where affiliate features are used, invitation, membership, referral and commission records administer requested participation, using contract where necessary and legitimate interests to resolve attribution problems. Publication and referral features do not make unrelated private records public.
• Optional store analytics: where a business enables measurement and you choose to allow it, we use a random visit identifier, viewed products and a broad traffic-source category to understand store usage. Eligible completed checkouts may be linked to that visit. We rely on your consent. These analytics records do not include your email, form answers, full referring URL, IP address or browser user-agent string; hosting and security records are separate.
• Privacy requests and complaints: we use the information needed to assess and answer them to meet our duties under UK data-protection law.

Information comes from you, the owner's connected accounts, and the providers supporting an interaction. Meta may provide account details, permissions, post information, public comments and messages. Payment and email providers return status and delivery records. Connection credentials are used to access authorised accounts.

Information necessary to fulfil an order or respond to a request is required for that action to work. Optional marketing choices are not required. Please do not provide sensitive information unrelated to your request. If the owner requests AI description assistance, the supplied product title, type and brief go to Cloudflare Workers AI for a draft the owner reviews.

Providers and international processing

Cloudflare hosts the application, database and uploaded files. Resend sends automated email where enabled. Hostinger provides our mailbox. Stripe handles the currently enabled test-payment integration; card entry takes place with Stripe. PayPal is not currently enabled. Meta supplies connected-account services. These providers receive information relevant to their functions and may also handle information under their own terms and privacy notices.

Where stock-photo tools are enabled, Sellonn sends the owner's search terms and chosen photo ID to Unsplash and reports the selection event. Selected photo and credit details are stored with page content. When these photos appear in the editor or on published pages, they load directly from Unsplash, which receives the viewer's IP address and browser/request information and may record image views. These image requests are separate from Sellonn's optional analytics. See Unsplash's privacy notice.

Information may be processed outside the UK. Cloudflare's data-processing terms provide contractual safeguards, including the UK Addendum where applicable. Resend states that it stores message content and delivery records in the United States and provides UK transfer safeguards, including the UK Addendum and UK Extension to the Data Privacy Framework. Hostinger and Stripe describe their international processing. Contact hello@sellonn.com for information or a copy of the safeguards relevant to your information; storage is not guaranteed to remain in the UK.

Cookies and browser storage

Owner sign-in cookies last up to eight hours; temporary connected-account sign-in cookies up to ten minutes. Referral links can set a product-specific attribution cookie for up to 30 days. Browser storage holds owner drafts and customer checkout or receipt recovery information. Clearing it may remove recovery access without deleting server records. Browser settings can control this storage; blocking it may affect those functions.

Optional store analytics starts only after your choice on an enabled store. The choice and a reference to its 30-minute visit are held in that browser tab. You can withdraw through the store’s analytics control: collection stops locally immediately, and the control confirms when the server has recorded withdrawal. Withdrawn visits are excluded from reports. Advertising tracking and Meta link-visit measurement remain disabled. Reading this notice or continuing to browse is not consent to optional tracking.

How long we keep information

We review whether records are still needed when a test, request or connection ends, and when handling a privacy request. We consider whether an order, installment, access entitlement or dispute remains open; whether particular social or security history is needed for a specific unresolved issue; and whether a minimal preference record is needed to honour an unsubscribe or STOP request. Test details should not be kept merely because they might be useful later.

We retain information required by a particular legal obligation or claim only where that reason actually applies. There is no blanket legal-retention period for all records. When information is no longer needed, we arrange deletion or anonymisation. Some history cannot be removed through ordinary application controls and needs separate handling; that technical limit does not remove your rights. Disconnecting, unsubscribing or archiving does not automatically erase history.

Store analytics reports cover up to 400 days. Older analytics records are removed by bounded cleanup when the service handles requests, so physical deletion can be delayed for an inactive store. Withdrawing analytics does not erase order records needed to deliver or support an order. Contact hello@sellonn.com for a deletion request.

Your rights and complaints

Under UK data-protection law, you can request access, correction, deletion or restriction, and a portable copy where applicable. These rights depend on the circumstances. You can withdraw consent at any time.

You can object to direct marketing at any time, using unsubscribe or hello@sellonn.com. You can also object to processing based on legitimate interests, explaining your circumstances. We will assess that objection under the applicable rules.

See Data deletion requests for the manual process. We may need proportionate identity checks. Do not send passwords, full card details, access tokens or private receipt links. Rights requests receive a response without undue delay, normally within one month; we explain any permitted extension and its reason.

You can complain to hello@sellonn.com. We acknowledge privacy complaints within 30 days, investigate without undue delay and keep you informed of the outcome. You can also complain to the Information Commissioner's Office, the UK data-protection regulator.