This page provides information about how Sellmeva protects personal data and complies with applicable data protection regulations including GDPR (EU), UK GDPR, and KVKK (Turkey).
1. Data Controller
Sellmeva acts as the data controller for personal data collected through the platform. For data processed on behalf of business users in connection with their customers, Sellmeva may act as a data processor — see Section 6 below.
2. Categories of Personal Data
| Category | Examples | Purpose |
|---|---|---|
| Identity | Name, email, company | Account management |
| Contact | Address, phone | Order fulfillment |
| Financial | Payment method tokens (via Stripe) | Transaction processing |
| Technical | IP, logs, device info | Security & analytics |
| Transaction | Orders, shipping, tracking | Platform operations |
3. Your Rights (GDPR / UK GDPR)
If you are in the European Economic Area or United Kingdom, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion ("right to be forgotten") where applicable
- Restriction: Limit processing in certain circumstances
- Portability: Receive data in a structured, machine-readable format
- Objection: Object to processing based on legitimate interests
- Withdraw consent: Where processing is consent-based
Submit requests to privacy@sellmeva.com. We respond within 30 days.
4. KVKK (Turkey) Rights
Under Turkish Law No. 6698 (KVKK), data subjects may apply to learn whether personal data is processed, request information, learn the purpose of processing, know third parties to whom data is transferred, request correction or deletion, and object to adverse automated decisions. Applications may be submitted to privacy@sellmeva.com in Turkish or English.
5. Data Processing Agreement (DPA)
Business customers requiring a Data Processing Agreement for GDPR compliance may request our standard DPA by contacting legal@sellmeva.com. The DPA covers subprocessors, security measures, breach notification, and data subject request assistance.
6. Subprocessors
We use trusted subprocessors for hosting, email delivery, payment processing (Stripe), and analytics. A current list is available upon request. We ensure subprocessors provide adequate data protection guarantees.
7. Data Breach Notification
In the event of a personal data breach likely to result in risk to individuals, we will notify affected users and relevant supervisory authorities within 72 hours as required by applicable law.
8. Data Protection Officer
For data protection inquiries, contact our privacy team at privacy@sellmeva.com.