Privacy policy

Who is responsible

Marketplace is responsible for the personal data processed on this website. The company name, registered address and contact email are published here before the website accepts payments. Stores that sell here are responsible for how they use the customer details they receive to fulfil an order.

What we collect and why

• Account: your name, email and password (stored only as a secure hash), to sign you in and show your purchases.
• Purchases: the product, price, date, the email you used at checkout and the country of your billing address, to deliver the product, handle refunds and keep the accounting records the law requires.
• Payments: card and bank details are collected and processed by Stripe. Marketplace never receives your full card number.
• Stores: business and identity details for payouts are collected by Stripe during onboarding; we keep the store name, country and the status of its payment account.
• Security logs: technical records such as request times and error details, to keep the website safe and working.

Legal basis

We process data to perform the contract when you buy or sell, to meet legal obligations (accounting, tax and payment rules), and for our legitimate interest in preventing fraud and keeping the service secure.

Who processes data for us

• Stripe: payments, identity checks for stores, fraud prevention.
• Supabase (servers in the European Union): database, sign-in and file storage.
• Hostinger (servers in the European Union): the web server.
• Resend: sending transactional emails such as receipts and account confirmations.

Each provider only processes data on our instructions and under a data processing agreement.

How long we keep it

Purchase and payment records are kept for as long as accounting and tax law requires. Account data is kept while your account exists. Technical logs are kept for a short period, and Stripe event details are reduced after 30 days.

Cookies

We only use cookies that are needed to keep you signed in and to protect forms. We don't use advertising or tracking cookies.

Your rights

You can ask for a copy of your data, its correction or deletion, object to its processing, or ask to receive it in a portable format. Some purchase records must be kept by law even after deletion. You can also complain to your data protection authority. See also the Terms and the Refund policy.