Skip to main content

The Sellers Index processes Amazon seller business contact data under GDPR Article 6(1)(f) legitimate interests. All records relate to registered business entities sourced from public registries and verified Amazon storefronts — not consumer data. Sellers may request removal at any time via [email protected].

GDPR b2b data compliance rests on Article 6(1)(f) legitimate interests — not consent. The Sellers Index processes Amazon seller business data sourced exclusively from public registries (Companies House, Handelsregister, INPI/INSEE) and verified Amazon storefronts. All records are business entities, no consumer data is held, and a Legitimate Interests Assessment confirming necessity and proportionality has been completed.
  1. GDPR Article 6(1)(f) legitimate interests is the correct lawful basis for B2B data processing — not consent
  2. GDPR Recital 47 explicitly names direct marketing as a legitimate interest
  3. A Legitimate Interests Assessment (LIA) must confirm the purpose, necessity, and balancing tests
  4. Data must be limited to business-context information — company names, registered addresses, business emails, registration numbers
  5. Consumer data, private individual data, and Article 9 sensitive categories must never be included
  6. Data subjects retain the right to object; suppression must be applied within a defined timeframe
  7. Under UK PECR, direct electronic marketing to business email addresses is permitted on a legitimate interest basis
Legal & Compliance · UK GDPR · EU GDPR

GDPR & B2B data
compliance.

How we process Amazon seller intelligence — lawfully, proportionately, and under the correct legal basis. Every record sourced from public registries. No consumer data. Ever.

Article 6(1)(f) compliant LIA completed 72-hr removal guarantee
Email Compliance Team Privacy Policy
TSI data security compliance — shield with checkmark and padlock representing GDPR-compliant Amazon seller data processing
Processed under GDPR Article 6(1)(f) · Legitimate Interests Assessment on file

Framework

Seven pillars of lawful B2B data processing

The legal framework for B2B data under GDPR is established — provided you follow it precisely.

Last updated: 21 May 2026

  1. Legitimate interests — not consent

    GDPR Article 6(1)(f) is the correct lawful basis for B2B data processing. Consent is not required and is not the appropriate basis for commercial outreach to business entities.

  2. Recital 47 explicitly names direct marketing

    GDPR Recital 47 explicitly recognises direct marketing as a legitimate interest. The UK ICO confirms this position for B2B commercial data.

  3. LIA — purpose, necessity, and balance

    A Legitimate Interests Assessment must confirm the three-part test: purpose, necessity, and that processing does not override the data subject's fundamental rights.

  4. Business-context data only

    Processing is limited to company names, registered addresses, business emails, VAT and registration numbers — fields publicly listed for commercial purposes.

  5. No consumer or Article 9 data — ever

    Consumer personal data, private individual contact details, and sensitive categories under GDPR Article 9 are never processed or held.

  6. Right to object — 72-hour suppression

    Data subjects retain the right to object at any time. Suppression is applied within 72 hours and maintained across all future data refreshes.

  7. PECR — B2B email on legitimate interest

    Under UK PECR, direct electronic marketing to business email addresses is permitted on a legitimate interest basis, provided a clear opt-out mechanism is included.

GDPR Article 6(1)(f)

Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

The Sellers Index processes Amazon seller data under Article 6(1)(f) of both UK GDPR and EU GDPR — legitimate interests. Amazon sellers publicly list their business contact details for commercial activity; using those details for B2B outreach is expected and proportionate. Recital 47 explicitly recognises direct marketing as a legitimate interest; the UK ICO confirms this position.

Legitimate interest requires a completed Legitimate Interests Assessment (LIA) — we have completed one, confirming that the balancing test weighs in favour of processing: sellers have reduced privacy expectations for publicly listed business fields, and no financial, consumer, or sensitive-category data is included. See our privacy policy.

PECR and electronic marketing

Under UK PECR, unsolicited direct marketing emails to corporate subscribers do not require prior consent, provided a clear opt-out is included. Customers using data for direct electronic marketing must comply with current ICO PECR guidance — see our terms of service.

What we process — and what we never touch

The Sellers Index records cover 11 verified business fields sourced from public registries and Amazon seller storefronts. No consumer data is ever held.

Included

Business data

  • Amazon seller store name and URL
  • Registered business address
  • Business email address (publicly listed)
  • Company registration number (CH / HRA / SIREN etc.)
  • VAT / TVA number (public registry)
  • Business domain / website
  • Product categories and seller summary
  • Operational base country
  • Active marketplace(s)
Never processed

Personal data

  • Personal consumer data
  • Private individual contact details
  • Sensitive categories (Article 9)
  • Financial transaction data
  • Consumer purchase history

All records are sourced from public registries (Companies House, Handelsregister, INPI/INSEE SIREN/SIRET) and verified Amazon seller storefronts — not consumer databases. See full field details on the verified Amazon seller leads page.

B2B vs B2C — why the GDPR distinction matters

B2B data occupies a distinct legal position from consumer data. The UK ICO confirms that commercial outreach to businesses differs materially from consumer marketing: because Amazon sellers publicly list contact details for commercial purposes, their privacy expectations for those specific fields are materially lower. Learn more on the about page.

Data type Applies to The Sellers Index?
Consumer personal data (B2C) No
Business entity data (B2B) Yes
Sensitive categories (Article 9) No
Publicly listed business contacts Yes
Private individual contacts No

Data subject rights and how to exercise them

Because The Sellers Index relies on Article 6(1)(f), the right to object is particularly strong. Any seller who objects has a right to have processing cease unless compelling legitimate grounds override their interests.

Right to object / erasure

Email [email protected] to object or request deletion. Processing ceases and a permanent suppression flag is applied within 72 hours — the record will not be re-added in future refreshes. The ICO (ico.org.uk) is the supervisory authority for UK complaints.

Right of access and rectification

Request a copy of data we hold or correction of inaccurate fields. We respond within 30 days of a verified request, confirming the fields held and their public-registry source.

Customer obligations

Customers using The Sellers Index data for commercial outreach must ensure their own use complies with UK GDPR, EU GDPR, and PECR where electronic marketing is involved. B2B outreach to registered businesses is a recognised legitimate interest under Recital 47. Customers must honour opt-outs and maintain their own suppression lists. Resale is not permitted — see our terms.

Market-specific GDPR B2B data compliance

GDPR B2B data compliance requirements apply consistently across UK and EU markets under the legitimate interests framework, with registry sources varying by country.

United Kingdom

UK GDPR applies. Data sourced from Companies House. Supervisory authority: ICO.

Germany

EU GDPR and BDSG apply. Data sourced from Handelsregister. Supervisory authority: State DPAs.

France

EU GDPR applies. Data sourced from INPI/INSEE SIREN/SIRET. Supervisory authority: CNIL.

Italy & Spain

EU GDPR applies. Data sourced from public business registries. Supervisory authorities: Garante / AEPD.

Frequently asked

GDPR B2B data compliance — common questions

Is B2B data lawful to process under GDPR?

Yes. Processing B2B data for commercial outreach is lawful under GDPR Article 6(1)(f) legitimate interests, provided a Legitimate Interests Assessment confirms the processing is necessary, proportionate, and does not override data subjects' fundamental rights. GDPR Recital 47 explicitly names direct marketing as a recognised legitimate interest under both UK and EU data protection law.

Is The Sellers Index GDPR compliant?

Yes. The Sellers Index processes Amazon seller data under GDPR Article 6(1)(f). All records relate to registered business entities whose contact details are publicly listed on Amazon's marketplace. A Legitimate Interests Assessment has been completed and sellers may request removal at any time via [email protected].

What legal basis is used for processing B2B data?

GDPR Article 6(1)(f) — legitimate interests. Consent is not the correct basis for B2B commercial data; legitimate interest is, as confirmed by ICO guidance on lawful bases for processing.

Can I opt out of The Sellers Index database?

Yes. Contact [email protected] to request removal. A suppression flag is applied within 72 hours and maintained across all future data refreshes. The ICO (ico.org.uk) is the supervisory authority for UK data subjects.

How do customers use this data lawfully?

Customers must comply with UK GDPR, EU GDPR, and PECR for direct electronic marketing. B2B outreach to registered businesses is a recognised legitimate interest under Recital 47. Customers must honour opt-outs and maintain their own suppression lists. Resale is not permitted — see our terms.

Further reading & references

Compliance team

Compliance questions?

Our compliance team responds to all enquiries within one business day. Removal requests are processed within 72 hours.

Email [email protected] General contact