Privacy policy

Last updated: March 2026

1. Introduction

AllTheProducts ("we", "our", "the Platform") is committed to protecting the privacy and personal data of its users. This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR).

2. Data controller

The data controller responsible for processing your personal data is AllTheProducts. For any enquiries related to data protection you can contact us at: privacy@alltheproducts.com.

3. What personal data we collect

• Account data — name, email address, phone number, password (hashed).
• Company data (business accounts) — company name, tax ID (CUI), reg. number, address, logo.
• Listing data — product titles, descriptions, images, price, location.
• Transaction data — orders, offers, bids, reviews.
• Messages — private messages exchanged between buyers and sellers.
• Technical data — IP address, browser type, device info, pages visited (collected via cookies and server logs).

4. Legal basis for processing

• Contract performance — processing necessary to provide the marketplace service (account management, listings, orders).
• Legitimate interest — fraud prevention, platform security, analytics.
• Consent — marketing communications, non-essential cookies.
• Legal obligation — tax and accounting requirements.

5. How we use your data

• Create and manage your account.
• Facilitate buying, selling, and communication between users.
• Process orders, invoices, and payments.
• Send transactional notifications (order updates, messages).
• Improve platform functionality and user experience.
• Prevent fraud, abuse, and ensure platform security.

6. Data sharing

We do not sell your personal data. We may share data with:

• Other users — your public profile, listing details, and reviews are visible to other users.
• Service providers — hosting, email delivery, analytics (only what is strictly necessary).
• Legal authorities — when required by law or court order.

7. Data retention

We retain your personal data for as long as your account is active. After account deletion, we may retain certain data for up to 5 years for legal and accounting obligations. Anonymised data may be kept indefinitely for analytics.

8. Your rights (GDPR)

As a user within the European Economic Area, you have the following rights:

• Right of access — request a copy of your personal data.
• Right to rectification — correct inaccurate or incomplete data.
• Right to erasure — request deletion of your account and data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to restrict processing — ask us to limit how we use your data.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — withdraw consent at any time for consent-based processing.

To exercise any of these rights, go to My Account → Settings or contact us at privacy@alltheproducts.com.

9. Data security

We implement appropriate technical and organisational measures to protect your data, including encryption of passwords, secure HTTPS connections, and access controls.

10. International transfers

Your data is stored on servers within the European Union. If any transfer outside the EEA is necessary, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

11. Changes to this policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or a notice on the Platform.

12. Contact

For any privacy-related questions, please contact: privacy@alltheproducts.com.