Legal Basis

We process business contact data under GDPR Article 6(1)(f) — legitimate interest. This is the standard legal basis for B2B marketing data across the UK and EU.

Our Legitimate Interest Assessment:

  • Data subjects are business contacts acting in professional capacity
  • Processing purpose is B2B commercial communication
  • Data is limited to business contact details, not personal information
  • Individuals can opt out of any contact
Data Sources

All seller data originates from:

  • Publicly available Amazon marketplace information
  • Official company registries (Companies House, Handelsregister, INPI)
  • VAT validation systems (HMRC, VIES)
  • Business website information

We do not purchase data from third-party brokers or use data obtained through deceptive means.

Verification
Check Type Authoritative Source Frequency
Business Registration Companies House / Handelsregister / INPI Real-time at extraction
VAT Validation HMRC / VIES (EU-wide) Rolling 30-day sync
Email Deliverability SMTP Handshake & Catch-all Filtering Instant at point of order
Market Activity Amazon Storefront API Continuous monitoring

Every record includes a "last seen" timestamp showing when verification occurred.

Certifications

ICO Registration

Registered with the UK Information Commissioner's Office as a data controller.

Cyber Essentials

Certified under the UK government's Cyber Essentials scheme.

PCI Compliance

Payment processing by Stripe (Level 1). We never store card details.

Your Rights

If you're a data subject, you have the right to:

  • Request access to data we hold about your business
  • Request correction of inaccurate data
  • Request deletion (subject to legitimate interest balance)
  • Object to processing

Contact compliance@thesellersindex.com for requests.

Compliance Summary

Lawful basis established Data minimisation applied Accuracy maintained