Privacy Policy

1. Who this policy covers

This Privacy Policy explains how DORESELL LTD, a company registered in England and Wales (company number 17374162) with its registered office at Flat 509, 8 Victoria Mill, Lower Vickers Street, Manchester, England, M40 7NA ("doresell", "we", "us"), collects and processes personal data.

It applies to visitors of doresell.com, sellers who register at app.doresell.com ("Sellers"), and end customers who purchase products through a doresell checkout ("Buyers"). For most processing described here, doresell acts as a data controller. Where a Seller receives Buyer data from us to deliver and support their product, the Seller is an independent controller of that data.

You can contact us about anything in this policy at contact@doresell.com.

2. Data we collect

We collect the following categories of personal data:

• Account data (Sellers): name, email address, business name and address, tax identifiers, and identity verification documents required by anti-money-laundering law.
• Payout data (Sellers): bank account or payout method details needed to pay you.
• Transaction data (Buyers): name, email address, billing country and address, purchased product, amount, currency, tax calculated, and order history.
• Payment data (Buyers): card details are collected and processed by our PCI DSS compliant payment providers; doresell receives only tokenised references, the card type, last four digits and issuing country.
• Location evidence (Buyers): billing address, IP-derived country and card BIN country, which tax law requires us to capture and retain as evidence of the place of supply.
• Technical data: IP address, device and browser information, and interaction logs collected when you use our websites, including for fraud prevention.
• Communications: messages you send to our support and the related correspondence.

3. Why we process it and on what legal basis

We process personal data for the following purposes:

• To provide the merchant of record service — processing orders, delivering receipts and invoices, paying out Sellers (performance of a contract).
• To calculate, collect and remit VAT, GST and sales tax, and to retain the evidence required by tax authorities (legal obligation).
• To verify Seller identities and screen for money laundering, sanctions and fraud (legal obligation and legitimate interests).
• To prevent fraudulent transactions and manage chargebacks and disputes (legitimate interests).
• To operate, secure and improve our websites and platform (legitimate interests).
• To send Sellers service communications about their account, and marketing only with consent or as permitted by law, always with an opt-out (consent / legitimate interests).
• To comply with legal process and enforce our terms (legal obligation and legitimate interests).

4. Who we share data with

We share personal data only where necessary to run the service:

• Payment service providers, acquiring banks and card schemes, to process payments, payouts, refunds and disputes.
• The Seller whose product a Buyer purchased, so they can deliver the product and provide support.
• Identity verification, fraud prevention and sanctions screening providers.
• Tax authorities, where we are required to report and remit transaction taxes.
• Cloud hosting, email delivery, analytics and customer support providers acting as our processors under data processing agreements.
• Professional advisers, and authorities where disclosure is required by law.
• A purchaser or investor in the context of a corporate transaction, subject to confidentiality.

5. International transfers

We are based in the United Kingdom and some of our providers operate in other countries, including the United States. Where personal data is transferred outside the UK or the European Economic Area, we rely on adequacy regulations or decisions, or on the UK International Data Transfer Agreement / EU Standard Contractual Clauses, together with additional safeguards where appropriate.

6. How long we keep data

We keep personal data only as long as needed for the purposes above, then delete or anonymise it. Indicative periods:

• Transaction records and tax evidence: 10 years, as required by VAT and tax law.
• Seller account and verification records: for the life of the account plus 6 years, as required by anti-money-laundering and company law.
• Fraud and dispute records: up to 6 years from the relevant event.
• Support correspondence: up to 3 years after the matter is closed.
• Technical logs: typically 12 months or less.

7. Cookies and analytics

Our websites use strictly necessary cookies for security, sessions and checkout functionality. Where we use analytics or marketing cookies, we ask for your consent through a cookie banner, and you can withdraw it at any time. We honour the choices you make there; blocking non-essential cookies does not affect your ability to buy or sell through doresell.

8. Security

We protect personal data with encryption in transit, access controls, network isolation, logging and regular review of our providers. Card data is handled exclusively by PCI DSS Level 1 certified payment providers and never touches doresell's servers in raw form. No system is perfectly secure; if a breach occurs that risks your rights, we will notify you and the relevant supervisory authority as required by law.

9. Your rights

Under the UK GDPR and EU GDPR you have the right to access your personal data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent where processing is based on consent. Some rights are limited where we must retain data by law — for example, tax evidence attached to completed transactions.

To exercise any right, email contact@doresell.com. We respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

10. Children

The Services are not directed at children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the service or the law evolves. Material changes will be announced by email to account holders or by a notice on our websites. The date of the latest revision is shown at the top of this page.

12. Contact

DORESELL LTD, Flat 509, 8 Victoria Mill, Lower Vickers Street, Manchester, England, M40 7NA. Email: contact@doresell.com.