Short version: the Site collects almost nothing. It has no accounts and no database of visitors. We receive what you type into two forms, we run usage analytics only if you accept it in the cookie banner, and our web server keeps a 30-day log with your IP address masked. We sell nothing and run no advertising. The rest of this page says exactly how that works, who helps us do it, and what you can ask of us.
1. Who are we, and what does this policy cover?
This policy explains what personal data we collect when you visit sellena.co, www.sellena.co and help.sellena.co (together, the "Site"), why we collect it, who receives it, how long we keep it, and the rights you have.
The Site is operated by, and the controller of your personal data is:
- Individual Entrepreneur Ivan Gubochkin, trading as Sellena
- Registered under the laws of Georgia, Identification Number 345814372
- Registered address: available on request for legal notices at help@sellena.co
- Email: help@sellena.co
We have not appointed a Data Protection Officer; the email address above is the contact for every privacy matter.
Merchants and their customers. This policy is only about the Site. If you use the Sellena app in your Shopify store, or you are shopping in a store that uses it, the data handling of the app itself, including our sub-processors, retention and the Shopify data-deletion flows, is described in the Sellena App Privacy Policy and, for merchants, the Data Processing Agreement.
2. What do we collect, and why?
The Site is a static marketing site. It has no user accounts. Everything we collect falls into the five categories below.
2.1 Contact form
When you send a message through our contact form we receive your name, email address, company (optional) and message. The form is delivered by Formspree (see section 5) to our inbox. We use it to answer you. Fields marked as required are needed to reply; if you do not provide them the form cannot be sent.
2.2 Partner application form
The application form on the partners page collects your name, email address, company, website and e-commerce platform, plus anything else you type into it. It is delivered by Formspree; if that delivery is unavailable, the form opens your own email client with the same details addressed to pf@sellena.co. We use it to assess and respond to your application.
2.3 Usage analytics (only with your consent)
If you accept analytics cookies in the cookie banner, Google Analytics records which pages you view, which buttons and links you click, how far you scroll, and technical details of your browser and device. Your IP address is truncated by Google before it is stored ("IP anonymisation"). None of these events contain your name or email address. Nothing is sent to Google until you accept; see section 4.
2.4 Server access logs
Our web server keeps a short technical log of every request: the requested URL, the time, your browser's user-agent string, the response code, and your IP address with its last part removed (for example 203.0.113.0 instead of the full address). Cookies and any headers that could carry your full address are not written to the log. We keep these logs for security and troubleshooting only, for 30 days.
2.5 Your cookie choice
The Site stores your answer to the cookie banner in your browser's local storage (key sellena_cookie_consent) so it does not ask again. This stays in your browser and is never sent to us.
We do not collect precise location, payment details, or any special categories of data through the Site, and we do not buy or receive data about you from third parties.
3. What is our legal basis?
Where the GDPR or the UK GDPR applies, we rely on the following bases:
| Processing | Legal basis |
|---|---|
| Answering a contact-form message or a partner application | Steps at your request before entering into a contract (Art. 6(1)(b)); for other enquiries, our legitimate interest in responding to people who write to us (Art. 6(1)(f)) |
| Usage analytics | Your consent, given in the cookie banner (Art. 6(1)(a)); you can withdraw it at any time (section 4.3) |
| Server access logs | Our legitimate interest in keeping the Site secure and available and in diagnosing faults (Art. 6(1)(f)) |
| Storing your cookie choice | Strictly necessary to honour your choice; our legal obligation to obtain and record consent (Art. 6(1)(c)) |
| Responding to legal requests or defending claims | Legal obligation (Art. 6(1)(c)) or legitimate interest (Art. 6(1)(f)) |
5. Who receives your data?
We share personal data only with the providers below, each of which processes it for us and under a contract that limits what they may do with it.
| Recipient | What they receive | Why | Where |
|---|---|---|---|
| Formspree, Inc. | Everything you submit in the contact or partner form | Delivers form submissions to our inbox | United States |
| Google LLC (Google Analytics, Google Tag Manager) | Usage events and technical data described in 2.3, only after consent | Aggregated statistics about how the Site is used | United States and EU |
| Google LLC (YouTube) | Playback data, only if you play the embedded video | Video hosting | United States and EU |
| Hetzner Online GmbH | Server access logs (2.4), at rest | Hosts the Site | Germany and Finland (EU) |
We may also disclose personal data if the law requires it, to establish or defend legal claims, or to a successor if the business is sold or reorganised, in which case this policy continues to apply to the transferred data.
We do not sell personal data, and we do not share it with anyone for cross-context behavioural advertising.
6. Is your data transferred internationally?
The Site is hosted in the European Union. Form submissions are delivered through Formspree in the United States, and analytics data is processed by Google in the United States and the EU. For transfers out of the EEA and the UK we rely on the European Commission's Standard Contractual Clauses and, where the provider is certified under it, the EU-US Data Privacy Framework and its UK extension. You can request a copy of the safeguards in place by emailing help@sellena.co.
The controller is established in Georgia; when we access data from there, the same safeguards apply.
7. How long do we keep it?
| Data | Retention |
|---|---|
| Contact-form messages and partner applications | In our inbox until the enquiry is closed and for 12 months after our last exchange, then deleted; earlier on request. Formspree keeps its own copy under its terms. |
| Usage analytics | Event-level data in Google Analytics for no longer than 14 months, the longest retention Google Analytics offers; aggregated reports contain no personal data. |
| Server access logs | 30 days, then deleted automatically. |
| Your cookie choice | In your browser until you clear the Site's data. |
8. How is it kept secure?
All traffic to the Site is encrypted with HTTPS. Analytics runs only after consent and with IP anonymisation, and our own server logs never contain a full IP address, cookies or authentication headers. The Site itself stores no personal data: form submissions go to our inbox, not to a database. Access to the inbox and the servers is limited to the people who operate Sellena.
9. What are your rights?
9.1 If you are in the EEA, the UK or Switzerland
You have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected and incomplete data completed;
- have your data erased;
- restrict how we process it;
- receive the data you gave us in a portable format;
- object to processing based on our legitimate interests;
- withdraw consent at any time, without affecting processing that happened before withdrawal (for analytics, see section 4.3);
- lodge a complaint with your data protection authority: in the EEA, the authority of the country where you live or work; in the UK, the Information Commissioner's Office. We would appreciate the chance to address your concern first.
9.2 If you are a California resident
Under the CCPA/CPRA you have the right to know what personal information we collect, use and disclose; to access it; to correct it; to delete it; to opt out of its sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights. In the past 12 months we have collected the categories described in section 2 for the purposes in section 2 and disclosed them to the providers in section 5. We have not sold or shared personal information, and we do not collect sensitive personal information through the Site, so the opt-out and limit rights do not currently apply.
9.3 If you are in Georgia
The controller is established in Georgia and is also subject to the Law of Georgia on Personal Data Protection. You may exercise the rights that law gives you in the same way, and you may contact the Personal Data Protection Service of Georgia.
9.4 How to exercise your rights
Email help@sellena.co or use the contact form. We may ask you to confirm your identity, for example by replying from the email address the request concerns. We acknowledge requests promptly and respond within one month under the GDPR and UK GDPR, or within 45 days under the CCPA; in complex cases we may extend these periods once, as each law allows, and will tell you if we do. Exercising your rights is free of charge, and an authorised agent may submit a request on your behalf.
10. What choices do you have?
- Analytics: choose Reject All in the cookie banner and no analytics cookie is set; the Site works exactly the same. Details in section 4.
- Change your mind: open or the footer's "Cookie Settings" link; turning analytics off removes its cookies (section 4.3).
- Forms: the contact and partner forms are the only ways the Site collects information you type. You can email us instead, or ask us to delete a submission at any time.
- Embedded video: nothing loads from YouTube until you press play (section 4.2).
- Your data: ask for a copy, a correction or deletion, object to processing, or withdraw consent, using the methods in section 9.4.
- Complain: to your data protection authority, the UK ICO, or the Personal Data Protection Service of Georgia (section 9). We would rather hear from you first.
11. Do we make automated decisions or use AI on the Site?
No. The Site makes no automated decisions about you and does not profile you; analytics is used only in aggregate. Nothing you enter on the Site is processed by an AI model.
The Sellena app is a different matter: it is an AI shopping assistant, and how it uses an AI provider, and that customer conversations are never used to train models, is set out in the Sellena App Privacy Policy.
12. Can children use the Site?
The Site is intended for businesses and is not directed to anyone under 16. We do not knowingly collect personal data from children. If you believe a child has sent us data, email help@sellena.co and we will delete it.
13. How will you know about changes?
The "Last Updated" date at the top shows the current version. Because the Site has no accounts we cannot notify you individually; material changes are announced on the Site, and the previous version is available on request.
14. How can you contact us?
Individual Entrepreneur Ivan Gubochkin (Sellena)
Registered in Georgia, Identification Number 345814372; registered address available on request for legal notices
In short
✅ What we do
- ✓ Ask before any analytics cookie is set
- ✓ Anonymise IP addresses in analytics and in our own logs
- ✓ Keep server logs for 30 days only
- ✓ Host the Site in the EU
- ✓ Answer rights requests within the legal deadlines
❌ What we don't do
- ✗ Sell or share your data for advertising
- ✗ Run marketing or retargeting pixels
- ✗ Collect precise location or payment details
- ✗ Keep a database of visitors
- ✗ Knowingly collect data from children under 16