Privacy Policy

Your rights

You can use any of them at any time, without penalty. All of these are free of charge, and using them costs you nothing beyond asking. We answer within 10 working days.

• See your data — a copy of everything we hold about you, downloadable instantly from your privacy settings.
• Correct it — if something we hold is wrong, ask and we fix it.
• Erase it — delete your account from your privacy settings; "What erasure keeps" below explains the little the law requires us to keep.
• Object to processing — tell us to stop using your data for something, and we stop or explain why we lawfully cannot.
• Take it with you — a machine-readable copy rides along with every data export.
• Withdraw consent — anything that runs on your consent, like promotional notifications, switches off in notification settings with one tap, as easily as it switched on.

If we refuse a request and you disagree, you may complain to the Personal Data Protection Authority. The reason for any refusal is recorded and shown to you.

What erasure keeps

Erasing your account anonymises you rather than deleting history the law requires us to keep: order and payment records are retained under financial record-keeping obligations with your identity removed, and our tamper-evident security log is retained as a safeguard — new entries store masked contact details only. Everything else leaves the live service the moment we act on your request. Two kinds of copy outlast that moment, and neither is reachable from the site: your photographs, which are withdrawn immediately and then destroyed within thirty days, and our nightly backups, which are never rewritten — editing a backup would defeat its purpose — and instead expire on their own schedule. No copy survives more than thirty-one days.

Cookies

We set: a sign-in session cookie (required), a language preference cookie (1 year), a random view-counting identifier (6 months) used only to avoid double-counting listing views and never stored with your account, and short-lived passkey sign-in cookies (5 minutes).

What we hold, and why

Third parties

Your data is processed by the providers named here, all in the European Union: Railway (application hosting and the database, Amsterdam), Cloudflare R2 (photos, delivery evidence, and the nightly backup of the whole database, EU jurisdiction), and Sentry (error reports, EU data region). Error reports carry a technical description of the failure and your account identifier — never your name, email address, phone number or bank details. Codes and notices are still not delivered externally and payment capture is simulated, so no messaging or payment provider receives your data. If you sign in with Google or Apple, that provider processes the sign-in under its own policy. Before any payment gateway, SMS or email provider is engaged, this policy and our processing register will name it.