Privacy Policy

1. Who we are

Pinsada is an online marketplace where independent sellers list products for consumers (B2C) and business buyers (B2B). We are the controller of the personal data described in this policy; sellers are independent controllers of the data they receive to fulfil your order.

This policy explains what we collect, how we use it, who we share it with, and how you can exercise your rights. It applies to our website, mobile app and any related services.

2. Data we collect

We collect the following categories of personal data:

• Account data: name, email address, password (stored hashed by our authentication provider), account role, language and display preferences.
• Order data: items purchased, quantities, prices, delivery address, order status, tracking information and communications about the order.
• Payment data: payment status, payment method type, transaction and payout references. Full card numbers are never stored on our systems — card data is entered directly with our payment processor, Stripe.
• Seller data: store name, business details you provide, listings, tax and payout account information, and payout history.
• Communications: messages you exchange with sellers, support requests, reviews and return requests.
• Technical data: device and browser type, approximate location derived from your IP address, pages viewed and actions taken in the app, used to keep the service secure and working.

3. How we use your data and our legal bases

We process personal data under the following legal bases: performance of a contract, compliance with legal obligations, our legitimate interests, and your consent where required.

• To create and manage your account, and to provide the marketplace — contract.
• To process orders, payments, payouts, invoices and deliveries — contract.
• To handle returns, refunds, disputes and customer support — contract and legitimate interests.
• To prevent fraud, abuse and illegal listings, and to keep the platform secure — legitimate interests and legal obligations.
• To send transactional emails such as order confirmations and delivery updates — contract.
• To send marketing communications where you have opted in — consent, which you can withdraw at any time.
• To meet accounting, tax and record-keeping obligations — legal obligation.

4. Who we share data with

We do not sell your personal data. We share it only as needed to run the marketplace:

• Sellers, who receive the order and delivery details required to fulfil your purchase and handle returns.
• Stripe, our payment and payout processor, which handles card payments, seller onboarding and payouts.
• Hosting, storage, email and analytics providers that process data on our instructions.
• Delivery carriers, which receive the address and contact details needed to deliver your parcel.
• Authorities and professional advisers where we are legally required to disclose information, or where necessary to establish or defend legal claims.

5. Cookies and similar technologies

We use essential cookies and local storage to keep you signed in and to remember your preferences such as theme and language. We use limited analytics to understand how the app is used. See our Cookie Policy for details and how to control them.

6. International transfers

Some of our providers are located outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, together with technical and organisational measures.

7. How long we keep data

We keep account and order data for as long as your account is active and afterwards only as long as needed for the purposes described above: order, invoice and tax records are kept for the statutory retention period, and fraud-prevention records are kept for as long as necessary to protect the marketplace. Data that is no longer needed is deleted or anonymised.

8. Your rights

If you are in the EEA or the UK, you have the rights listed below. You can exercise them from your account or by contacting us. We answer requests within one month.

• Access: obtain a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data where we have no overriding legal reason to keep it.
• Restriction and objection: ask us to limit or stop certain processing, including direct marketing.
• Portability: receive certain data in a structured, machine-readable format.
• Withdraw consent: where processing is based on consent, withdraw it at any time without affecting past processing.
• Complain: lodge a complaint with your national data protection authority.

9. Security

We use encryption in transit, access controls, role-based permissions and payment processing that keeps card data out of our systems. No online service can be perfectly secure, so please use a strong, unique password and tell us immediately if you suspect unauthorised access to your account.

10. Children

The marketplace is not intended for children. You must be at least 18 years old, or the age of legal majority in your country, to create an account or place an order.

11. Changes and contact

We may update this policy to reflect changes to the service or the law. The date at the top shows when it was last revised, and material changes will be announced in the app.

You can reach us through the app (Profile → Legal & Policies), through the Messages section of your account, or by replying to any order email you receive from Pinsada.