Terms & Privacy

Grossistas Ltd, company number 17479165, registered in England and Wales. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Email: [email protected].

Grossistas is intended only for companies, organisations and people acting in the course of business, not consumers. A person accepting these Terms for an organisation confirms authority to bind it; that organisation is the Customer.

Grossistas provides tools for business profiles, company connections, catalogues, structured orders, comments, status history, exports and related functions. Access may require approval.

Grossistas facilitates interactions between independent businesses and is not party to their supply contracts or orders. Each business remains responsible for products, descriptions, prices, taxes, availability, compliance, delivery, payment and performance.

Beta or preview features may change. Grossistas may improve, replace or discontinue features but will not intentionally remove the core paid service during a current paid term without a reasonable substitute or appropriate remedy.

Grossistas may reject an application or suspend verification while checking eligibility or suspected abuse.

• Provide accurate, current business and account information.
• Ensure users are at least 18 and authorised to act for the Customer.
• Keep credentials secure, report suspected misuse and manage access when roles change.
• Remain responsible for account activity and use Google Sign-In only through an entitled account.
• Do not share individual seats between people.

• Do not use the service unlawfully, fraudulently or to infringe rights; upload malicious code; interfere with security or availability; probe vulnerabilities without written authorisation; access data without permission; scrape or automate outside authorised features; unlawfully reverse engineer; resell without agreement; upload unnecessary sensitive data; publish unlawful or deceptive material; or use Grossistas for consumer orders or regulated goods without prior written agreement.

The Customer retains rights in submitted data and grants Grossistas a worldwide, non-exclusive, royalty-free licence during the relationship to use it only as necessary to provide, secure, support and improve the service and comply with law.

The Customer warrants it has necessary rights, notices and lawful bases. Businesses receiving intentionally shared data may act as independent controllers. Customers must review orders and exports; snapshots do not replace invoices, tax records, delivery terms or payment arrangements.

Grossistas handles personal data as described in the Privacy Policy. The Customer must give that notice to users and must not instruct unlawful processing.

Grossistas uses reasonable measures appropriate to an early-stage B2B SaaS service, but no service is completely secure. Customers must maintain endpoint security, exported-record backups and internal access controls. The parties may enter a DPA where Grossistas acts solely on documented instructions.

The Start plan is €50 per month or €550 per year. It includes one user account, up to 25 connected buyer companies, core ordering features, catalogue import and export in XLSX and CSV, order export in PDF, and self-service setup and launch.

• Assisted setup and launch sales from €350 one time.
• Complex catalogue migration from €750 one time.
• Each additional user account €15 per month.
• Each additional pack of 25 connected buyer companies €25 per month.

Paid subscriptions are expected to be sold and billed through Paddle as Merchant of Record or authorised reseller. When checkout is enabled, the Customer purchases from the Paddle entity identified there and accepts Paddle's terms and privacy notice. Paddle handles payment, applicable tax, invoices and payment-related refunds under its terms. Grossistas provides and supports the software.

When paid checkout is enabled, a subscription begins on confirmed payment and renews monthly or annually until cancelled. Cancellation stops the next renewal and access continues to the paid term's end unless terminated for cause.

Except where law, Paddle terms or a written order requires otherwise, fees are non-refundable and unused time is not credited. One-time services become non-refundable once work begins except for undelivered work. Failed payments may lead to suspension after reasonable notice.

Grossistas and its licensors own the service, software, designs, documentation, databases and branding, excluding Customer data and third-party material. During a paid subscription the Customer receives a limited, non-exclusive, non-transferable and non-sublicensable internal-business-use right.

Feedback may be used without identifying the Customer or disclosing confidential information.

Each party must protect the other's non-public information and use or disclose it only as needed for the relationship. Public, already-lawfully-known, independently developed or lawfully received information is excluded. Legally required disclosure is permitted with notice where lawful and limited scope.

The service depends on providers such as Hetzner, Cloudflare, Firebase, Google and, when enabled, Paddle. Their services may have separate terms. Grossistas is not responsible for third-party services outside its reasonable control but will use reasonable efforts to manage material dependencies.

Without a separate SLA, service and support are provided on a reasonable-efforts basis without guaranteed uptime or response time. Support is available at [email protected]. Material term changes apply prospectively after reasonable notice; a materially disadvantaged Customer may cancel before effect and request a pro-rata refund for unused prepaid time as its exclusive remedy.

Grossistas may suspend or terminate for security risk, unlawful use, material breach, non-payment, harm or legal requirement, with notice and cure where practical. Customers may terminate by cancelling and ceasing use. Customers should export needed records before access ends.

To the fullest extent permitted by law, the service is provided as is and as available without a promise that it is uninterrupted, error-free or that every import, export, user, product, price, tax treatment or transaction is accurate or suitable. Grossistas does not provide legal, tax, accounting, logistics or payment advice. Mandatory obligations are not excluded.

Nothing limits liability that cannot lawfully be limited, including death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or wilful misconduct. Subject to that, neither party is liable for indirect or consequential loss or loss of profit, revenue, savings, goodwill, opportunity or data.

Subject to those rules, aggregate liability in a rolling 12 months is limited to fees paid or payable in the preceding 12 months; if none, Grossistas's cap is €100. The cap does not limit payment obligations or Customer liability for intellectual-property misuse, acceptable-use breach or unlawful Customer data.

The Customer will indemnify Grossistas against third-party claims and reasonable costs arising from Customer data, Customer transactions, breach of account/data/acceptable-use duties or unlawful use, except to the extent caused by Grossistas's breach or negligence. Grossistas will notify the Customer and allow reasonable defence control subject to protective conditions.

These Terms and related non-contractual obligations are governed by the laws of England and Wales, whose courts have exclusive jurisdiction, subject to urgent protective relief elsewhere and mandatory local law. Before filing a claim, a party should give notice and allow 30 days for good-faith resolution unless urgency or a deadline makes that impractical.

Neither party is liable for delay beyond reasonable control except payment. The Customer may not assign without consent; Grossistas may assign to an affiliate or with a merger, financing, reorganisation or sale. Grossistas may subcontract while remaining responsible.

These Terms, accepted order or checkout and incorporated policies form the entire agreement. A signed order controls conflicts, then these Terms, then a policy. Failure to enforce is not waiver; invalid terms are adjusted only as necessary. No third party has enforcement rights under the Contracts Rights of Third Parties Act 1999. Notices to Grossistas: [email protected].

Grossistas Ltd is the controller of the personal data described in this policy unless we state otherwise.

Grossistas Ltd. Company number 17479165. Registered in England and Wales. Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Privacy contact: [email protected].

Depending on how you use Grossistas, we may collect the following categories. Please do not enter special-category data, criminal-offence data, personal payment data, health information or unnecessary personal information in free-text fields.

• Account and identity data: name, business email address, Firebase user identifier, sign-in method and basic Google account information within the scopes shown at sign-in.
• Business profile data: company name, country, tax number, company telephone number and address, and the user's role or authority where supplied.
• Access applications and communications, partnership identifiers and status, and order data including company, product, price, quantity, status and limited comment information.
• Subscription data received from Paddle; Paddle controls payment details under its own privacy notice and Grossistas should not receive full card details.
• Technical and security data such as IP address, browser or device information, request and authentication logs, timestamps and security events.
• Preference data such as language, storage-notice status, and any marketing choice with its timestamp and source.

We collect data directly from you, from another authorised user of your company, from a company interacting with yours, from your use of the service and from our service providers. Google supplies authentication information to Firebase and Grossistas when Google Sign-In is chosen. Paddle supplies subscription and transaction status when a purchase is made.

A business that provides another person's business contact details must have authority and a lawful basis and must give that person appropriate privacy information.

Where we rely on legitimate interests, we consider the purpose, necessity and impact on individuals. You may object as explained below. We do not use special-category data as part of the intended service.

• Review access applications and set up accounts: requested pre-contract steps, contract and legitimate interests in admitting genuine business users.
• Provide accounts, company connections, catalogues and ordering functions: contract and legitimate interests in providing the contracted B2B service.
• Authenticate users and secure the service: contract and legitimate interests in preventing fraud, abuse and unauthorised access.
• Administer subscriptions and Paddle transactions: contract, legal obligation and legitimate interests in financial administration.
• Provide support, maintain records, enforce terms and resolve disputes: contract, legal obligation and legitimate interests.
• Send optional product news, tips or offers: consent where requested or legally required. Objections and applicable direct-marketing rules will be honoured.
• Improve reliability using aggregated or appropriately minimised technical and usage data: legitimate interests.

Required fields are necessary to assess an application, create an account, provide the service or meet legal requirements. Without them we may be unable to provide the relevant feature. Optional marketing consent is not required to register or buy the service.

We disclose personal data only as needed to operate Grossistas, comply with law, complete a transaction or protect rights. Other companies using Grossistas can see business profile, partnership, catalogue and order information where the product intentionally enables that interaction.

• Hetzner for hosting, databases and infrastructure in Finland.
• Cloudflare for content delivery, network performance, DNS and security.
• Google Firebase Authentication for email/password or federated authentication, including Google Sign-In.
• Paddle, when payment is enabled, as Merchant of Record or reseller and independent controller for checkout, payment, tax and compliance activities.
• Professional advisers, auditors, insurers, courts, regulators and law-enforcement bodies where reasonably necessary.
• A buyer, investor or successor in a genuine corporate transaction, subject to appropriate safeguards.

Hetzner hosting selected for Grossistas is in Finland. Cloudflare operates a global network, and Firebase Authentication is operated from United States data centres. Other providers may also process data outside the United Kingdom or European Economic Area.

Where required, we use an applicable adequacy regulation or decision, approved standard contractual clauses including the UK addendum or UK international data transfer agreement, and supplementary measures. Information about safeguards may be requested at [email protected], subject to confidential information being redacted.

Firebase Authentication retains authentication information until deletion is initiated; provider backup deletion may take longer. Backups expire on their normal cycle. Data may be kept longer where reasonably necessary for law, fraud prevention or legal claims, and anonymous data may be retained indefinitely.

• Unsuccessful or inactive access applications: up to 12 months after the last interaction.
• Account and business profile data: while active, then normally up to 24 months after closure unless longer retention is required.
• Partnership and order records: normally up to 6 years after the relevant order or account closure.
• Subscription, tax and accounting records: normally 6 years after the end of the relevant financial year.
• Support and contractual communications: normally up to 6 years after the issue or relationship ends.
• Security and technical logs: normally 30 to 180 days unless an incident requires longer preservation.
• Marketing consent or objection records: for the duration of marketing and afterwards as needed to demonstrate the choice and maintain suppression.

We use measures designed for the risk, including encrypted network connections, access controls, authentication safeguards, provider security features, backups and logging. No online service is completely secure. Each customer is responsible for its users, devices, credentials and the personal data it chooses to enter.

Depending on where you are and applicable law, you may have rights to access, correction, deletion, restriction, portability, objection, withdrawal of consent and complaint to a data-protection authority. To exercise a right, email [email protected]. We may verify identity and authority; rights are not absolute.

You may object to processing based on our legitimate interests and to direct marketing at any time. UK complaints may be made to the ICO; EEA complaints to the authority where you live or work, including Portugal's CNPD or Spain's AEPD; and Brazilian complaints to the ANPD.

For individuals in Brazil, Grossistas acts as controller under the LGPD where applicable. Applicable rights may include confirmation, access, correction, anonymisation, blocking or deletion, portability, sharing information and review of consent choices.

Grossistas does not sell personal information or share it for cross-context behavioural advertising. If future activity triggers a US state privacy law, we will update the policy and service before that processing begins.

Grossistas is for business users aged 18 or older. We do not knowingly offer the service to children and do not make solely automated decisions producing legal or similarly significant effects.

Where registration offers marketing, the checkbox is optional and unticked. You may unsubscribe through a marketing email or by contacting us. Necessary service, security and account messages are not marketing.

We may update this policy for legal, technical or business changes. We will post the updated date and give additional notice where a change is material or law requires it.

Questions and requests: [email protected].