Seller privacy
Seller privacy
Effective Aug 29, 2026 · EN
KodeMarket
Effective date: August 27, 2026
Last updated: August 27, 2026
1. Introduction
KodeMarket (“KodeMarket,” “we,” “us,” or “our”) respects the privacy and personal data of sellers who register, list products, or sell products through https://kodemarket.co/ and its related services (collectively, the “Platform”).
This Seller Privacy Policy explains how we collect, use, disclose, store, and protect sellers’ personal data and describes the rights available under applicable data protection laws, including Thailand’s Personal Data Protection Act B.E. 2562 (2019) (“PDPA”).
This Policy applies to individual sellers and individuals acting for business sellers, including business owners, directors, authorized representatives, account administrators, beneficial owners, and payout recipients.
2. Data Controller
The data controller responsible for processing personal data under this Policy is:
Legal or business name: KODEMARKET
Registered or contact address: [Nonthaburi Thailand 11120
Privacy email: [email protected]
Support email: [email protected]
Telephone number: 094 185 9962
Payment processors, identity-verification providers, and financial institutions may act as independent data controllers for certain processing activities governed by their own privacy policies.
3. Personal Data We Collect
Depending on how a seller uses the Platform, we may collect the following categories of personal data.
3.1 Account and Contact Information
Full name
Username and account identifier
Email address and telephone number
Residential, business, or contact address
Profile image and seller biography
Country, language, time zone, and account preferences
Password stored in encrypted or hashed form
3.2 Store and Business Information
Store name, trading name, and business description
Company name, registration number, and country of registration
Business website, social-media accounts, and contact details
Product information, prices, licenses, and service terms
Sales history, revenue, fees, refunds, and disputes
Documents demonstrating ownership or authorization to sell products
3.3 Identity and Compliance Information
Date of birth, age, nationality, and country of residence
National identification or passport details
Copies of identity documents and proof of address
Photographs, video, liveness checks, or facial comparison data where required
Information about directors, shareholders, beneficial owners, or persons controlling a business
Results of fraud, anti-money-laundering, counter-terrorist-financing, and sanctions screening
Some of this information may constitute sensitive personal data. We process sensitive personal data only where permitted by law or with explicit consent where consent is required.
3.4 Payment and Tax Information
Bank-account holder name and payout account information
Seller payment-account information, such as a Stripe Connect account identifier
Account verification and payout status
Payout, fee, refund, reserve, and adjustment history
Tax identification number, tax status, and supporting documents
Currency, bank-account country, and information necessary to issue payouts
Complete payment-card or financial-account details may be collected and processed directly by our payment providers. KodeMarket may receive only limited account information, transaction status, or reference identifiers.
3.5 Product and Content Information
Product files, source code, documentation, images, videos, and previews
Product descriptions, categories, tags, prices, and license information
Product update and revision history
Product review, approval, rejection, or removal information
Messages, reviews, replies, and communications with buyers or support staff
Personal data contained in files uploaded by a seller
Sellers are responsible for ensuring that uploaded files do not unnecessarily contain another person’s personal data and that they have an appropriate right or legal basis before providing such data.
3.6 Technical and Usage Information
IP address
Device type, operating system, and browser
Device identifiers and online identifiers
Access dates, times, duration, and pages viewed
Login and account-activity records
Approximate location inferred from an IP address
Cookies, pixels, and similar technologies
Error reports, performance data, and security logs
3.7 Communications and Support Information
Emails, messages, chats, and support requests
Reports, complaints, disputes, and supporting evidence
Surveys, feedback, and seller responses
Support communications and call records where permitted by law
3.8 Information Received from Other Sources
We may receive personal data from:
Payment processors and financial institutions
Identity-verification and fraud-prevention providers
Buyers and other Platform users
Analytics and cybersecurity providers
Government authorities, courts, and regulators
Lawfully available public sources
4. How We Collect Personal Data
We may collect personal data:
Directly from sellers during account registration, store setup, or product submission
When sellers contact us, complete transactions, or use Platform functions
Automatically through cookies, system logs, and similar technologies
From payment processors, identity-verification services, and other partners
From buyers, other persons, or lawfully available public sources
If a seller provides another person’s personal data, the seller represents that the person has received all required notices and that the seller has the right or lawful basis to disclose that data to us.
5. Purposes and Legal Bases for Processing
We may process personal data for the following purposes.
5.1 Providing the Platform and Performing Our Contract
We use personal data to:
Create and administer seller accounts
Activate and manage stores
Review, approve, and publish products
Process orders, product delivery, and licenses
Calculate fees, seller earnings, and account balances
Process payouts, refunds, reserves, and account adjustments
Provide support and resolve disputes
The legal basis is the necessity to enter into or perform a contract with the seller.
5.2 Identity Verification and Legal Compliance
We use personal data to:
Verify identity, age, and contractual capacity
Verify business information and beneficial ownership
Prevent money laundering, fraud, and suspicious transactions
maintain accounting, tax, and transaction records
Respond to lawful requests from courts and competent authorities
The legal bases include compliance with legal obligations and our legitimate interests.
5.3 Security and Abuse Prevention
We use personal data to:
Detect unauthorized account access
Prevent malware, pirated products, and unlawful content
Investigate violations of the Seller Terms
Prevent fraud, fee avoidance, and manipulated reviews
Protect the rights, property, and safety of KodeMarket, buyers, and others
The legal basis is our legitimate interests and the legitimate interests of affected parties.
5.4 Analytics and Service Improvement
We use data to:
Analyze Platform performance
Correct errors and develop new features
Understand sales and usage trends
Improve search, ranking, and product recommendations
Assess seller quality and performance
The legal basis is our legitimate interests or consent where required by law.
5.5 Communications and Marketing
We use data to:
Send account, order, payout, and service notices
Send security and regulatory communications
Send newsletters, promotions, or marketing recommendations where the seller has consented or applicable law otherwise permits
Measure and improve marketing communications
Sellers may unsubscribe from marketing communications at any time. Unsubscribing does not stop essential account, transaction, security, or legal communications.
5.6 Legal Claims
We may process data to enforce agreements, collect amounts owed, investigate disputes, pursue or defend legal claims, and protect our or another person’s legal rights.
6. Public Information and Information Shared with Buyers
Certain seller information may be visible publicly or to buyers, including:
Store and display name
Profile image, logo, and store description
Seller country or region, if enabled
Product listings, previews, prices, and license terms
Ratings, reviews, sales counts, and store-performance indicators
Answers or messages posted in public areas
Sellers should not publish personal information they do not want to be publicly accessible.
We may provide buyers with information necessary to perform a contract, issue tax documents, deliver products, resolve disputes, or comply with applicable law.
7. How We Share Personal Data
We may disclose personal data to:
Payment processors, including Stripe, and relevant financial institutions
Hosting, cloud, database, and content-delivery providers
Email, notification, and customer-support providers
Analytics, cookie, and performance-monitoring providers
Identity-verification, fraud-prevention, and cybersecurity providers
Accountants, auditors, lawyers, insurers, and professional advisers
Buyers, where necessary for transactions or dispute resolution
Affiliates, business successors, or parties to a merger or acquisition
Courts, regulators, law-enforcement agencies, and public authorities
We do not sell sellers’ personal data directly for money. However, advertising cookies or certain disclosures may be considered a “sale” or “sharing” under the laws of some jurisdictions. Sellers may exercise an opt-out right where applicable.
Third-party providers may have their own privacy policies and independent legal obligations. Sellers should review those policies before using the relevant services.
8. Stripe Connect and Payment Services
If KodeMarket uses Stripe Connect or another payment provider, a seller may be required to create or connect an account with that provider.
The payment provider may collect and use seller data directly to:
Verify identity and bank-account information
Process payments and payouts
Prevent fraud and manage financial risk
Conduct anti-money-laundering and sanctions screening
Complete tax and regulatory reporting
Meet the provider’s legal obligations
KodeMarket may receive information such as a seller’s name, contact details, account identifier, verification status, partial bank-account information, balance, payout status, and certain risk indicators. KodeMarket may not receive complete financial-account details.
Stripe’s processing is governed by Stripe’s applicable privacy policy and agreements, which sellers should review before connecting an account.
9. Automated Decision-Making
We and our service providers may use automated systems to detect fraud, assess risk, rank products, moderate content, or hold unusual transactions.
These systems may result in a request for additional information, delayed payouts, account restrictions, or human review. Where required by law, sellers may request human review of an automated decision that produces legal or similarly significant effects.
10. Cookies and Similar Technologies
We may use cookies and similar technologies to:
Authenticate sellers and maintain login sessions
Remember settings and preferences
Protect accounts and prevent fraud
Analyze Platform performance and usage
Measure marketing and display relevant content
Sellers can manage cookies through our consent-management tool or browser settings. Disabling strictly necessary cookies may prevent parts of the Platform from functioning.
11. International Data Transfers
Seller data may be stored or processed in countries whose data protection laws differ from those in the seller’s country.
Where required, we use appropriate safeguards, which may include:
Data-processing agreements
Standard contractual clauses
Transfers to jurisdictions recognized as providing adequate protection
Lawful exceptions or other approved transfer mechanisms
Additional technical and organizational safeguards where appropriate
12. Data Retention
We retain personal data only for as long as reasonably necessary, taking into account:
The period during which the seller maintains an account or uses the Platform
Transaction, warranty, refund, and dispute periods
Accounting, tax, financial, and regulatory recordkeeping requirements
Applicable limitation periods for legal claims
Fraud-prevention and security requirements
Orders from courts or competent authorities
After an account is closed, we may retain transaction, accounting, tax, identity-verification, and dispute records for the period required by law or necessary to establish, exercise, or defend legal claims.
When data is no longer required, we will appropriately delete, destroy, anonymize, or otherwise de-identify it.
13. Data Security
We apply reasonable technical and organizational measures designed to protect personal data, including:
Encryption during transmission
Password hashing
Access controls
Logging and monitoring of important activities
Backups and incident-response procedures
Vendor and security-risk assessments
No information system can be guaranteed to be completely secure. Sellers must protect their passwords, verification codes, and devices and notify us immediately if they suspect unauthorized access to their accounts.
14. Seller Privacy Rights
Subject to applicable conditions and exceptions, sellers may have the right to:
Request access to and obtain a copy of personal data
Correct inaccurate or incomplete data
Request deletion or destruction of data
Restrict certain processing
Object to certain processing
Receive or transfer data in a legally prescribed format
Withdraw consent at any time without affecting prior lawful processing
Object to direct marketing
Request review of certain automated decisions
File a complaint with Thailand’s Personal Data Protection Committee or another competent supervisory authority
Some rights may be restricted where we must retain or process data to comply with law, complete transactions, protect another person’s rights, or establish, exercise, or defend legal claims.
15. Exercising Rights and Requesting Deletion
Sellers may submit a privacy request through:
Email: [email protected]
Suggested subject: “Seller Personal Data Request”
Request form: https://kodemarket.co/th/contact
A request should include the seller’s name, registered email address, requested action, and sufficient details to locate the relevant data. We may request additional information to verify identity and prevent unauthorized disclosure.
We will respond within the period required by applicable law. If a request is complex or an extension is permitted, we will notify the seller accordingly.
Deleting an account may not result in immediate deletion of all data. We may retain certain information for accounting, tax, fraud prevention, dispute resolution, or legal-compliance purposes.
16. Seller Responsibilities for Buyer and Third-Party Data
When sellers receive buyers’ personal data through KodeMarket, they must:
Use the data only to fulfill orders, provide support, or comply with law
Not use the data for marketing without legally valid consent
Not sell, disclose, or use the data for unrelated purposes
Maintain appropriate security safeguards
Delete the data when no longer necessary unless retention is legally required
Notify KodeMarket promptly of an actual or suspected personal-data breach
Comply with the PDPA and all other applicable data protection laws
A seller may act as a separate data controller when using buyer data for purposes outside KodeMarket’s instructions. In that case, the seller is responsible for its own privacy notice, legal basis, security, and compliance obligations.
17. Minors
Seller accounts are intended for persons who are at least 20 years old or otherwise legally of age and capable of entering into binding contracts under applicable law.
If we learn that an account has been opened by a person who lacks legal capacity, we may suspend the account and delete associated data unless retention is required or otherwise permitted by law.
18. Third-Party Websites and Services
The Platform may link to or integrate with third-party websites and services. We are not responsible for those third parties’ privacy practices. Sellers should review the relevant third-party privacy policy before submitting personal data.
19. Changes to This Policy
We may update this Policy to reflect changes to our services, technology, business practices, or legal obligations. We will publish the updated version with a revised “Last updated” date.
Where legally required, we will provide additional notice through the Platform, the seller’s account, or email before a material change takes effect.
20. Contact Us
Questions, complaints, and requests concerning personal data may be directed to:
KodeMarket – Privacy Team
Email: [email protected]
Address: Nonthaburi Thailand 11120
Telephone: 094 185 9962
If we appoint a Data Protection Officer, the officer may be contacted at [email protected]