Sellmark Corporation — Privacy Policy

Privacy Policy

Sellmark Corporation (“Company”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you visit our website or use our services.

We adhere to the highest international privacy standards, including but not limited to:

EU General Data Protection Regulation (GDPR)
US State Laws (including CCPA/CPRA)
Canada’s PIPEDA
Thailand’s Personal Data Protection Act (PDPA)
Colombia’s Law 1581 of 2012
Other relevant regional and national frameworks

1. Information We Collect

Personal Identifiers: name, email address, phone number, billing information.
Technical Data: IP address, browser type, operating system, device identifiers.
Transactional Data: account information, payment information, order details.
Usage Data: pages visited, links clicked, access times, referring websites.
Cookies and Tracking Data: session cookies, preference cookies, analytics cookies.
User-Provided Data: information you provide when filling forms, subscribing to services, or contacting us.

2. How We Use Your Information

Providing and improving our services.
Fulfilling contractual obligations to you, the customer.
Managing accounts and transactions.
Communicating with you (Marketing with your consent, service updates, and support).
Ensuring security, fraud prevention, and compliance.

3. Legal Basis for Processing

Your consent – such as when accepting cookies, or when subscribing to newsletters.
Contractual necessity – when processing orders or account requests.
Legal obligations – when keeping financial or legal tax records.
Legitimate interests, balanced against your privacy rights – for analytics, security, and service improvement.

5. International Data Transfers

Your information may be transferred and/or processed outside your country. We ensure appropriate safeguards, including Standard Contractual Clauses (SCCs) or equivalent mechanisms, are in place in accordance with applicable law.

6. Cookies & Tracking Technologies

We use cookies, pixels, and similar tracking technologies to improve your browsing experience, analyze website traffic, and personalize content.

Types of Cookies

Essential Cookies: Required for the basic functioning of our website.
Analytics Cookies: Help us understand how users interact with our site.
Functional Cookies: Store your preferences and enhance functionality.
Advertising Cookies: Used to deliver relevant ads, subject to your consent.

Consent & Control

Where required by law, non-essential cookies are only activated with your consent.
You can manage or withdraw your consent at any time through our cookie banner or by adjusting your browser settings.

Third-Party Services

Some cookies may be placed by third-party service providers (e.g., analytics or advertising partners).
These providers may process data in line with their own privacy policies.

7. Data Retention

We retain your personal data for a period of seven (7) years from the date of collection or your last interaction with our services. After this period, we will securely delete or anonymize your information unless it is necessary to retain specific data for:

Warranty purposes, to fulfill contractual obligations with you, or
Legal, regulatory, or compliance requirements under applicable law.

Data retained for these limited purposes will be restricted in scope and safeguarded with appropriate security controls.

8. Your Rights

You have the following rights to request:

To access your data.
To correct inaccurate or incomplete data.
To delete your data (“The right to be forgotten.”)
To restrict or limit how your data is used.
To object to or stop processing (e.g., Marketing).
To request data portability (Moving your data to another provider).
To withdraw consent.
To file complaints with your data protection authority.

9. Security

We implement technical, administrative, and physical safeguards to protect your information.

10. Children’s Privacy

We do not collect information from individuals under 16 (or local age of consent). We do not knowingly collect data from children, nor are our services directed to children. If you believe a child has provided us with data, please contact us to request deletion.

11. Updates

We may update this policy from time to time. Updates will be posted here with a revision date.

Regional Addendums

Bulgaria (EU GDPR)

Data subjects in Bulgaria are protected under the General Data Protection Regulation (EU) 2016/679.
You may file a complaint with the Commission for Personal Data Protection (CPDP).
We rely on consent or contractual necessity for direct marketing.

United States (Federal & State Laws, including CCPA/CPRA for California)

Residents of California have additional rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to opt out of “sharing” personal data for cross-context advertising.
U.S. users may request disclosure of the categories of personal information collected, sources, purposes, and third parties with whom data is shared.
A “Do Not Sell or Share My Personal Information” link is provided here.

Thailand (PDPA)

Your data rights are governed by the Personal Data Protection Act (PDPA) B.E. 2562 (2019).
Consent is required for most processing activities, with limited lawful exceptions.
You may exercise rights through the Personal Data Protection Committee (PDPC).

Colombia (Law 1581 of 2012 & Decree 1377 of 2013)

Data subjects may request proof of consent, correction, or deletion of personal data.
You have the right to revoke consent at any time, unless legal or contractual obligations apply.
Complaints may be filed with the Superintendence of Industry and Commerce (SIC).

Canada (PIPEDA & Provincial Laws)

Your rights are governed by the Personal Information Protection and Electronic Documents Act (PIPEDA), and in some provinces, local privacy laws.
Personal data may only be collected for identified purposes and with consent.
Complaints may be filed with the Office of the Privacy Commissioner of Canada (OPC).

Contact Us

If you have questions or wish to exercise your rights, please contact:

Sellmark Corporation

Email: privacy@sellmark.com Phone: +1 817 225-0310 Address: 2201 Heritage Parkway Mansfield, Texas, 76063 (United States of America)

For EU Inquiries, or if you wish to exercise your rights, please contact:

Sellmark OOD Email: privacy@sellmarkeu.com Phone: +359 2 434-3287 Address: 94 Iliyantsi Blvd, Building "Milenium LTD", Area PA Iliyantsi - East, 1220 Sofia, Bulgaria

For Thailand Inquiries, or if you wish to exercise your rights, please contact:

Sellmark (Thailand) Ltd. Email: privacy_apac@sellmark.com Phone: +668 1 833-4795 Address: 252/122, 25th Floor Muang Thai-Phatra Complex Tower B, Rachadapisek Road, Huaykwang, Bangkok, 10310, Thailand.

Appendix A: Compliance Mapping Table

The following table maps each major clause of this Privacy Policy to the relevant legal and regulatory frameworks across the jurisdictions in which we operate (Bulgaria/EU, USA, Canada, Thailand, Colombia).
Policy Clause	GDPR (EU/Bulgaria)	CCPA/CPRA (USA)	PIPEDA (Canada)	PDPA (Thailand)	Law 1581/2012 (Colombia)
1. Information We Collect	Art. 5 (data minimization, purpose limitation)	§1798.140 (categories of data)	Schedule 1, Principle 4.4	Sec. 23 (lawful collection)	Art. 4 (scope of personal data)
2. How We Use Your Information	Art. 6 (lawful basis), Art. 13	§1798.100 (use limitation)	Schedule 1, Principle 4.5	Sec. 24–25 (purpose specification)	Art. 8 (Purpose of processing)
3. Legal Basis for Processing	Art. 6(1)(a–f)	N/A (consent/opt-out model)	Schedule 1, Principle 4.3	Sec. 19–26 (legal grounds)	Art. 9 (consent requirement)
4. Data Sharing & Disclosure	Art. 28–30 (processors & third parties)	§1798.115 (categories of sharing)	Schedule 1, Principle 4.5, 4.7	Sec. 37–41 (disclosure rules)	Art. 10 (sharing requirements)
5. International Data Transfers	Art. 44–49 (SCCs, adequacy)	Not directly regulated federally (contractual clauses recommended)	Schedule 1, Principle 4.1.3	Sec. 28–29 (cross-border restrictions)	SIC Guidelines (safeguards required)
6. Cookies & Tracking >Technologies	ePrivacy Directive + GDPR Recital 30	§1798.120 (opt-out of sale/share)	OPC Guidelines (consent for tracking)	Sec. 19–25 (consent for tracking)	Art. 9 (consent must be informed)
7. Data Retention	Art. 5(1)(e) (storage limitation)	§1798.105(c) (deletion rights)	Schedule 1, Principle 4.5	Sec. 37 (retention limitation)	Art. 11 (retention for legal/contractual purposes)
8. Your Rights	Art. 15–22 (data subject rights)	§§1798.100–1798.125	Schedule 1, Principle 4.9	Sec. 30–34	Art. 8, 21 (rights of data subjects)
9. Security	Art. 32 (security of processing)	§1798.150 (reasonable security)	Schedule 1, Principle 4.7	Sec. 37 (security obligations)	Art. 19 (security measures)
10. Children’s Privacy	Art. 8 (consent age 16)	COPPA (under 13), CPRA (under 16 opt-in)	OPC Guidelines (minors)	Sec. 19 (sensitive data)	SIC Guidance (minors)
11. Updates	Art. 12 (transparency)	§1798.130 (notice of updates)	Schedule 1, Principle 4.8	Sec. 23–24 (transparency duty)	Art. 12 (informing data subjects)
Regional Addendums	GDPR enforcement (CPDP Bulgaria)	California CPPA, state AGs	OPC, provincial regulators	PDPC Thailand	SIC Colombia

Last Updated: August 2025