Privacy Policy

1. Who we are

Mastersel is operated by UAB Mastersel (company code 307424990), registered at Europos pr. 34-47, Kaunas, Lithuania. We are the data controller for the personal data processed through our website (mastersel.com), platform (app.mastersel.com), and related services.

Mastersel provides a free cross-border e-commerce platform that helps online sellers list, sell, and ship products across 30+ European countries.

2. Data we collect

We collect the following categories of personal data:

Account & business data

• Name, email address, phone number
• Business name, registration number, VAT ID
• Business address and warehouse location
• E-commerce platform credentials (API keys, store URL)

Product & order data

• Product catalog (titles, descriptions, images, prices, stock levels)
• Order details (items, quantities, customer shipping addresses)
• Shipping labels, tracking numbers, customs documentation

Technical data

• IP address, browser type, operating system
• Pages visited, referral source, session duration
• Device identifiers and screen resolution

Communication data

• Emails and support inquiries sent to us
• Phone call records when you contact our support line

3. How we use your data

We process your personal data for the following purposes:

4. Legal basis for processing

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Contract performance Processing necessary to provide our services to you (account management, order processing, shipping, inventory sync).
• Legitimate interests Improving our platform, preventing fraud, ensuring security, and providing customer support.
• Legal obligations Compliance with tax, customs, and accounting regulations across EU member states.
• Consent Where required, such as for marketing communications and non-essential cookies. You can withdraw consent at any time.

5. Data sharing & transfers

We share personal data only when necessary to operate our service:

• Courier partners (DHL, DPD, GLS, Omniva) — Shipping addresses and parcel details to fulfill deliveries.
• Customs authorities Product declarations and values required for cross-border shipments.
• Marketplace channels Product listings and order data to sell in target markets.
• Infrastructure providers Cloud hosting, analytics, and email services that process data on our behalf under strict data processing agreements.

When data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Data retention

We retain your data only as long as necessary for the purposes described in this policy:

When data is no longer needed, it is securely deleted or anonymized.

7. Your rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access Request a copy of the personal data we hold about you.
• Right to rectification Request correction of inaccurate or incomplete data.
• Right to erasure Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing Request that we limit how we use your data.
• Right to data portability Receive your data in a structured, machine-readable format.
• Right to object Object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at [email protected] or call +370 664 80225. We will respond within 30 days.

If you believe your rights have been violated, you have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (ada.lt) or your local supervisory authority.

8. Cookies

Our website uses cookies and similar technologies to ensure functionality, analyze usage, and improve your experience. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

We use Google Analytics and PostHog (EU region). PostHog provides heatmaps, session recordings and conversion funnels. Registration steps can be replayed with all entered values and personal summaries masked. Agreement contents, chat contents, other forms and embedded booking frames are excluded from recordings. With analytics consent, we save your email address to your PostHog profile when you continue past the account step, and your company name and contact phone number when you continue past company details, even if you do not finish registration. This helps us understand registration progress. Passwords, bank details and chat messages are not sent to PostHog. You can stop future collection through Cookie preferences in the footer. With advertising consent, Meta Pixel measures public page visits, successful registrations and confirmed calls booked through the calendar embedded on this website. It also records registration starts, calendar opens and video starts as separate events, not leads. We do not send your form values or enable automatic advanced matching. You can stop future tracking through Cookie settings. LinkedIn also measures confirmed calls booked through the calendar embedded on this website, with advertising consent. Opening the calendar is not a lead. With advertising consent, the OpenAI measurement pixel measures public page visits, successful registrations and confirmed calls booked through the calendar embedded on this website, so we can see results from ChatGPT advertising. It runs in a separate page that cannot read our forms, and it sets the __oppref (30 days) and __obref (1 year) cookies. We do not send your form values. You can stop future tracking through Cookie settings.

9. Security measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• TLS/SSL encryption for all data in transit
• Encryption at rest for stored personal data
• Access controls and role-based permissions
• Regular security audits and vulnerability assessments
• Secure data processing agreements with all sub-processors

While no system is 100% secure, we continuously improve our security practices and promptly address any vulnerabilities.

10. Children's privacy

Mastersel is a business-to-business platform designed for e-commerce sellers. Our services are not directed at children under 16 years of age, and we do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.

11. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via email or a prominent notice on our website. We encourage you to review this page periodically.

12. Contact us

If you have questions about this Privacy Policy or want to exercise your data protection rights, contact us:

[email protected]

+370 664 80225

UAB Mastersel, Europos pr. 34-47, Kaunas, Lithuania

307424990

You can also reach us through our contact page.