Privacy Policy

1. Introduction

This Privacy Policy explains how Bazaaric ("we," "us," "our") collects, uses, and protects your personal data when you use our platform. We are committed to complying with the UK GDPR and, for users based in the EU (including Lithuania, Latvia, and Estonia), the EU General Data Protection Regulation ("GDPR"). For the purposes of data protection law, Bazaaric LTD is the data controller of your personal data, except where noted in Section 5 in relation to our payment processor.

2. What data we collect

We collect the following categories of personal data:

• Account data: name, email address, and password (stored securely via our authentication provider, Firebase Authentication).
• Listing data: item titles, descriptions, categories, prices, location (as freely entered by you), and photos you upload.
• Messages: content of messages exchanged with other users through the platform's chat feature, including any offers or order references sent within a conversation.
• Payment and payout data: if you make a purchase, your payment card details are collected and processed directly by Stripe and are never stored on Bazaaric's own servers. If you register as a seller to receive payouts, Stripe collects identity verification information on our behalf (such as your legal name, date of birth, address, and bank details) as part of its own Know-Your-Customer process. Bazaaric receives limited information back from Stripe — primarily whether your account is approved to receive payouts — but does not receive or store your full bank details, government ID, or other verification documents.
• Usage data: favorites, listing views, order and offer history, and general interaction data collected automatically to operate the platform.
• Technical data: IP address, browser type, and device information, collected automatically by our hosting and infrastructure providers.

3. How we use your data

We use your data to:

• Create and manage your account
• Display your listings to other users
• Enable messaging between buyers and sellers
• Process payments and payouts, via Stripe
• Maintain the security and integrity of the platform
• Communicate with you about your account or our service
• Comply with legal obligations

We do not sell your personal data to third parties, and we do not use your data for third-party advertising.

4. Legal basis for processing (GDPR)

We process your data on the following legal bases: performance of a contract (to provide the platform's core functionality to you as a registered user, including processing a payment you have chosen to make or receive), legitimate interests (to maintain and improve the security and functioning of the platform, and to prevent fraud), legal obligation (where we or Stripe are required to retain transaction records for tax, accounting, or anti-money laundering purposes), and consent (where explicitly requested, such as for optional communications).

5. Where your data is stored, and our payment processor

We use Google Firebase (Authentication, Firestore Database, and Cloud Storage) to store and manage your account, listing, and message data. Firebase may store data on servers located outside the UK/EU. Google implements Standard Contractual Clauses and other safeguards recognized under UK GDPR and EU GDPR for such international transfers. You can review Google's data processing terms at cloud.google.com/terms/data-processing-terms.

Payment and identity verification data is collected and processed by Stripe, Inc. and its affiliates, acting as an independent data controller for the payment and verification information you provide directly to Stripe. Stripe maintains its own safeguards for international data transfers. You can review Stripe's privacy policy at stripe.com/privacy.

6. Sharing your data with other users

When you create a listing, your listing details and (upon starting a conversation) your chosen username become visible to other users you interact with, so that a buyer and seller can communicate and complete a transaction. If you make or receive an in-app payment, the other party can see that a payment or offer exists and its amount, but not your card or bank details. Do not share sensitive personal or financial information through the platform's messaging feature beyond what is necessary.

7. Data retention

We retain your account and listing data for as long as your account remains active. Transaction records are retained for as long as required to meet our legal, tax, and accounting obligations, even if you later delete your account. If you delete your account, we will delete or anonymize your other personal data within a reasonable period, except where we are required to retain certain data for legal or security purposes.

8. Your rights

Under UK GDPR and EU GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data ("right to be forgotten")
• Request a copy of your data in a portable format
• Object to or restrict certain processing
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data protection authority

To exercise any of these rights over data held by Bazaaric, contact us at hello@bazaaric.com. To exercise rights over data held directly by Stripe (such as identity verification documents), you may need to contact Stripe directly.

9. Cookies

We use essential cookies and similar technologies necessary for authentication, payment processing, and core functionality of the platform. We do not currently use cookies for advertising or third-party tracking purposes.

10. Children's privacy

The platform is not intended for use by anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Security

We use industry-standard measures, including those provided by Firebase Authentication, Firestore security rules, and Stripe's PCI-compliant payment infrastructure, to protect your data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or by email.

13. Contact

For any questions about this Privacy Policy or your data, contact us at hello@bazaaric.com.