Privacy Policy

Information we collect

Account information you give us (name, work email, company, phone), the contents of messages and requests you send, and your orders. To keep the site secure and prevent abuse, our servers also log technical data, including your IP address and browser type, when you sign in or submit a form. At a trade show, a rep using our booth app may photograph your badge and note the products you discussed.

How we use your information

To operate your account: to show your pricing, process orders, route you to the right rep, and keep the service secure. If your business has ordered from us before, we use that order history to suggest products you may want to reorder or add. Some suggestions may also reflect what is selling in businesses like yours: stores under the same banner, or on the same pricing terms. The purpose is to show you what is moving in your part of the market. Those patterns are pooled and anonymous. A suggestion is never built from one business, only from several combined, and it never shows who they are, what they ordered, or what they paid. We record whether a suggestion was shown, opened, added to an order, or ordered. That activity is attached to your business account, not to your individual user profile. It is kept on this site for 180 days to improve the suggestions, and a business-level copy stays in our internal order records. We do not sell personal information, and we do not use it for advertising.

Pricing and account confidentiality

Your negotiated pricing is visible only to users on your account, behind sign-in. It is never displayed publicly, never included in pages served to visitors who aren't signed in, and never shared with other customers. Access to it is checked on every request against your account membership.

Cookies and platform analytics

We use only first-party, functional cookies: a sign-in session cookie so you stay logged in, a guest cart cookie that holds only the items in your cart, a quote cookie that holds the products you add to a pricing request, a language-preference cookie, a theme cookie that remembers your light or dark choice (saved to your user profile if you are signed in), and a region cookie if you choose a different area for the home page. We do not use advertising or cross-site tracking cookies. Our page-view analytics are cookieless and anonymous. No cookie, no IP address, and no per-visitor identifier is stored. The country and region our infrastructure provider derives from your connection may be used to suggest which area's home page to show you. That guess is shown to you and you can change it in one click; we remember only the area you choose. The guess itself is not stored and is not linked to you. Product and supplier pages may show videos through YouTube's privacy-enhanced player or Vimeo; nothing from those providers loads until you press play, and from that point the provider's own privacy policy and cookies apply.

Service providers and international transfers

We share personal data with the service providers that help us run Seffla. The store and its database are hosted in Canada, by DigitalOcean in Toronto. Cloudflare sits in front of the site for security and delivery. It blocks attacks and abuse and delivers pages, so your connection, including your IP address, passes through its network. Cloudflare also stores our encrypted backups. Resend sends our account and order emails. An AI provider, Anthropic, in the United States, reads trade-show badge photos taken at a booth to fill in the visitor's contact details, and prepares a first review of each supplier application from the business details submitted. Resend and Anthropic process data in the United States, and Cloudflare may handle it outside Canada, so some information is transferred outside Canada under appropriate safeguards. We do not sell your personal information.

Data retention

We keep account and order records for as long as your account is active and for the period required by tax and commercial record-keeping law. Security and audit logs (including IP addresses) are kept for up to about 18 months, anonymous analytics for up to about 13 months, and resolved contact messages for about 12 months; expired sign-in sessions are purged automatically. Suggestion activity is kept on this site for 180 days. Personal data is deleted or anonymized once these periods pass.

Your rights

You may request access to, a copy of, correction of, or deletion of your personal information, and ask us to stop processing it. Contact us and we'll verify your identity and respond within 30 days. Some records (such as completed orders) may be retained where the law requires, in which case we restrict their use rather than delete them. If you are in Quebec, you may also file a complaint with the Commission d'accès à l'information du Québec.

Signed-in customers can download or delete their data from account settings at any time.

Contact

Questions about this policy or your data: contact [email protected]. The person in charge of the protection of personal information at Seffla is Jon Ceolin, Co-founder and CEO, reachable at that address. You can also reach out through the contact page and we'll route it to the right person.