1. Introduction

Your privacy matters to us. This Privacy Policy explains how we collect, use, and protect your personal data when you use xpressdeals.eu (the “Platform”). It applies to all visitors, registered users, and vendors, and is compliant with the General Data Protection Regulation (GDPR – EU 2016/679) and other applicable EU laws.

2. Data We Collect

2.1. Data You Provide to Us

• Account details: name, email address, password.
• Billing & shipping information: address, phone number.
• Payment information (processed securely by Stripe, Mollie, or PayPal – we never store full card details).
• Communications: emails, messages, or chat with our support team.

2.2. Data Collected Automatically

• IP address, browser type, operating system.
• Pages visited, time spent, referring URLs.
• Cookies and similar tracking technologies (see our Cookies Policy).

2.3. Data from Third Parties

• Payment gateways (Stripe, Mollie, PayPal).
• Analytics and advertising platforms (Google Analytics, Meta/Facebook).
• Language translation services (GTranslate).

3. How We Use Your Data

• To operate and maintain your account.
• To process and deliver your orders.
• To process vendor applications and manage vendor accounts.
• To process payments securely.
• To send service-related messages (order confirmations, updates).
• To improve our services and user experience.
• To detect and prevent fraud, abuse, and security threats.
• To comply with legal obligations.

4. Legal Basis for Processing (GDPR Art. 6)

• Contract performance – to fulfill our agreement with you (e.g., process orders, payments).
• Legal obligation – to comply with tax, accounting, and consumer protection laws.
• Legitimate interests – to improve our services, prevent fraud, and secure our platform.
• Consent – for marketing emails, non-essential cookies, and optional features.

5. Sharing Your Data

We only share your data with trusted partners necessary for operating the Platform:

• Payment processors: Stripe, Mollie, PayPal.
• Shipping providers: as selected by vendors/customers.
• Analytics: Google Analytics (IP anonymization enabled).
• Advertising: Meta/Facebook, Google Ads (only with consent).
• Technology: WooCommerce, Dokan, GTranslate.

All partners are bound by GDPR-compliant agreements.

6. International Data Transfers

Some partners process data outside the EU/EEA. Where applicable, we ensure adequate safeguards via Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

We keep personal data only for as long as necessary to fulfill the purposes outlined above or as required by law. After that, data is securely deleted or anonymized.

8. Security Measures

• HTTPS encryption for all data in transit.
• Encrypted storage for sensitive data.
• Role-based access control for staff.
• Regular security audits and monitoring.

9. Your Rights under GDPR

You have the right to:

• Access your personal data.
• Request correction or deletion of your data.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time (without affecting prior lawful processing).
• Lodge a complaint with your local data protection authority.

To exercise these rights, contact our DPO at office@xpressdeals.eu.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date.