Sequence Commerce
GDPR Compliance
Sequence Commerce is GDPR compliant. Learn about your data rights, how we protect EU customer data, and how to exercise your privacy rights under GDPR.
Last Updated: June 9, 2025
Sequence Commerce is fully committed to compliance with the General Data Protection Regulation (GDPR). This page outlines how we protect the rights of individuals in the European Economic Area (EEA) and demonstrates our compliance framework.
Our GDPR Compliance Status
Sequence Commerce is GDPR compliant. We have implemented comprehensive technical and organizational measures to ensure the protection of personal data in accordance with GDPR requirements.
Your Rights Under GDPR
As a data subject under GDPR, you have the following rights:
Right to Access (Article 15)
You can request a copy of all personal data we hold about you, including:
- Information about how we process your data
- Categories of data we collect
- Purpose of processing
- Data retention periods
- Recipients of your data
How to exercise: Submit a request through your account dashboard or email contact@sequencecommerce.com
Right to Rectification (Article 16)
You have the right to correct inaccurate personal data and complete incomplete data.
How to exercise: Update information in your account settings or contact our support team
Right to Erasure – “Right to be Forgotten” (Article 17)
You can request deletion of your personal data when:
- Data is no longer necessary for original purpose
- You withdraw consent
- You object to processing
- Data was unlawfully processed
How to exercise: Use the “Delete My Account” option in settings or submit a deletion request
Right to Restrict Processing (Article 18)
You can limit how we use your data while we resolve any issues you’ve raised about accuracy or legitimate use.
How to exercise: Contact our Data Protection Officer with your specific restriction request
Right to Data Portability (Article 20)
You can receive your personal data in a structured, commonly used, machine-readable format and transfer it to another service.
How to exercise: Use the “Export My Data” feature in your account settings
Right to Object (Article 21)
You can object to:
- Processing for direct marketing
- Processing based on legitimate interests
- Processing for research or statistical purposes
How to exercise: Update your preferences in account settings or contact us
Rights Related to Automated Decision Making (Article 22)
You have the right not to be subject to decisions based solely on automated processing that significantly affects you.
Our approach: We use human review for all significant decisions affecting customers
Legal Bases for Processing
We process personal data under the following legal bases:
Contract Performance
- Processing orders and payments
- Delivering products
- Customer service communications
- Account management
Legitimate Interests
- Fraud prevention and security
- Product improvements
- Business analytics (anonymized)
- Network and information security
Consent
- Marketing communications
- Cookies and tracking technologies
- Product recommendations
- Newsletter subscriptions
Legal Obligations
- Tax and accounting records
- Compliance with court orders
- Anti-money laundering checks
- Consumer protection requirements
Data Protection Measures
Technical Safeguards
- Encryption at rest and in transit
- Access controls and authentication
- Regular security testing
- Incident response procedures
- Data loss prevention systems
Organizational Safeguards
- Data Protection Officer appointed
- Regular privacy training for staff
- Privacy by Design principles
- Data Protection Impact Assessments (DPIAs)
- Vendor management program
International Data Transfers
When we transfer data outside the EEA, we ensure protection through:
- Standard Contractual Clauses (SCCs)
- Adequacy decisions
- Binding Corporate Rules where applicable
- Supplementary measures as required
Data Retention
We retain personal data only as long as necessary:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account Information | Duration of account + 2 years | Legal/Tax requirements |
| Order History | 7 years | Tax and accounting laws |
| Marketing Preferences | Until withdrawn | Consent |
| Customer Service Records | 3 years | Legitimate interests |
| Payment Information | As required by PCI DSS | Security compliance |
Cookie Compliance
Our use of cookies complies with GDPR and ePrivacy Directive requirements:
- Clear cookie consent banner
- Granular consent options
- Easy withdrawal of consent
- Detailed Cookie Policy
- Cookie preference center
Data Breach Procedures
In the unlikely event of a personal data breach:
- Assessment within 24 hours
- Notification to supervisory authority within 72 hours (if required)
- Notification to affected individuals without undue delay (for high-risk breaches)
- Detailed breach records maintained
Privacy by Design
We implement privacy considerations at every stage:
- New feature development
- System design
- Vendor selection
- Product launches
- Business processes
Your Data Protection Officer
Our Data Protection Officer oversees GDPR compliance:
Contact DPO:
Email: contact@sequencecommerce.com
Mail: Data Protection Officer, Sequence Commerce, 123 Commerce Street, Suite 100, San Francisco, CA 94105
Response Time: We respond to all GDPR requests within 30 days
How to Exercise Your Rights
Online Portal
Access most rights through your account dashboard:
- Log into your account
- Navigate to “Privacy Settings”
- Select the relevant option
Email Request
Send requests to: contact@sequencecommerce.com Include:
- Your full name
- Account email address
- Specific right you’re exercising
- Any relevant details
Verification
For security, we may need to verify your identity before processing requests
Complaints
If you’re unsatisfied with our handling of your personal data:
- Contact us first: We aim to resolve all concerns directly
- Supervisory Authority: You have the right to lodge a complaint with your local data protection authority
Children’s Privacy
We do not knowingly collect data from children under 16 without parental consent. If you believe we have collected such data, please contact us immediately.
Updates to GDPR Practices
We regularly review and update our GDPR compliance measures. Significant changes will be communicated through:
- Email notifications
- Website announcements
- Updated timestamps on relevant pages
For detailed information about how we process personal data, please refer to our comprehensive Privacy Policy.
Questions about GDPR?
Email: contact@sequencecommerce.com