Privacy Notice

1. Status and controller

This is a pre-launch draft. The final notice must identify the legal entity acting as controller, its address, privacy contact and, where required, data protection officer and EU representative.

2. Data we expect to process

• Account, identity, contact, address and authentication information.
• Seller application, trade-register, tax and compliance information.
• Catalogue, offer, order, delivery, return, review and communication data.
• Payment and payout status received from Stripe; new bank details are not stored in the Seekersplace application database.
• Security, device, log, cookie and fraud-prevention information.

3. Purposes and legal bases

Expected purposes include providing accounts and marketplace services, processing orders and payouts, preventing abuse, answering requests, improving the service, and meeting tax, accounting, product-safety and platform-law duties. The final notice must map every purpose to an appropriate GDPR legal basis and explain legitimate interests where used.

4. Sharing and service providers

Data may be shared with the buyer or seller needed to perform an order, and with payment, hosting, database, email, analytics, fraud-prevention, support and professional-service providers. Stripe separately handles information submitted through Stripe-hosted onboarding under its own privacy terms. Authorities or other parties may receive data where required by law or necessary to protect rights and safety.

5. International transfers

Where personal data leaves the European Economic Area, the final notice must identify the relevant transfer mechanism, such as an adequacy decision or approved contractual safeguards, and explain how a copy may be obtained.

6. Retention

Data will be kept only as long as needed for the stated purposes, legal retention duties, fraud prevention and the establishment or defence of claims. A reviewed retention schedule with concrete periods for account, order, tax, verification, moderation and support records is still required before launch.

7. Your rights

Depending on the circumstances, individuals may have rights of access, correction, erasure, restriction, portability, objection and withdrawal of consent, plus the right to complain to a supervisory authority. The final notice must provide a working request channel and identify the competent authority.

8. Automated decisions, cookies and children

The final notice must explain any solely automated decision with legal or similarly significant effects. A consent mechanism and separate cookie information are required before optional tracking is enabled. Seekersplace is not intended for children to operate seller businesses; the final buyer age position remains to be approved.