Privacy policy

What we collect

• Account data: email address, display name, password hash, country.
• Order data: listings viewed and bought, chat messages, delivery confirmations.
• Payment data: payout method details and transaction records (card numbers stay with our payment processor).
• Technical data: IP address, device and browser type, and security event logs.

Why we use it

• To run your account, orders and escrow — our contract with you.
• To prevent fraud, chargebacks and stolen-goods trading — our legitimate interest.
• To meet accounting, tax and anti-money-laundering duties — legal obligation.
• To send product news, only if you opt in — consent, withdrawable any time.

Who we share it with

Payment processors, identity-verification providers, cloud hosting and customer-support tooling, each under a data-processing agreement. We never sell personal data. Your counterparty in an order sees only your display name, rating and order history.

How long we keep it

Account and order records are kept for seven years to satisfy accounting and dispute obligations. Security logs are kept for 12 months. Marketing consent records are deleted 30 days after you withdraw consent.

Your rights

• Access a copy of your data, and get it in a portable format.
• Correct anything inaccurate from your settings page.
• Delete your account and data, except records we must retain by law.
• Object to profiling and ask for a human review of an automated decision.

International transfers

Data is stored in the EU. Where a processor operates outside the EU we rely on standard contractual clauses and encrypt data in transit and at rest.

Contact

Data requests: privacy@eldorado.market. You may also complain to your local data protection authority.