Privacy Policy

  1. Scope and Updates of this User Privacy Statement

This User Privacy Statement applies to your use of this website and all applications, services (including payment services), products, and tools (collectively, the “Services”), provided by the Company or its affiliates. This User Privacy Statement applies regardless of how you access or use the Services, including through mobile devices and applications. For regional and state privacy disclosures, please see Section 13, “Regional and State Privacy Disclosures,” below.

  1. Controllers
    The affiliated companies responsible for collecting and processing your personal data in connection with providing the services depend on how you use our Services.

2.1 Use of the Services (excluding Seller Payment Services)

Depending on your region, one of the following affiliated companies will be responsible for collecting and processing your personal data to provide you with our Services (excluding Seller Payment Services).

2.2 Seller Use of Payment Services

As stated in our Payment Terms, your personal data may be processed by one or more of these entities depending on your location and the transactions you complete with the website.

  1. Data Protection Officer and Contact Information

We have appointed Data Protection Officers in several countries to oversee the protection of your personal data. You can find the contact information for the Data Protection Officer in your country in our list of Data Protection Officers. More information is also available on our Privacy Contact page in our Privacy Center.

Furthermore, if you have any questions or complaints about this User Privacy Statement, our global data protection principles (see Section 6.1 “Transfer of Data to Affiliates” under Section 6 “Cross-border Data Transfers” below), or how we process personal data, you can contact the Privacy Team or the controller responsible for processing your personal data at any time (see Section 2 “Controllers” above for more information). This applies regardless of whether we have appointed a Data Protection Officer in your country. You can find all the necessary information and contact details in our Privacy Center.

  1. What Personal Data We Collect and Process

We collect your personal data when you use our services, create a new account, provide information to us through web forms, add or update information in your account, participate in online community discussions, or otherwise interact with us. We also collect personal data from other sources, such as other affiliates, credit agencies or reporting agencies, and data providers.

Learn more about Part 4.

  1. Purpose and Legal Basis of Data Processing and Categories of Recipients

We process your personal data for a variety of purposes and based on a variety of different legal bases. For example, we process your personal data to provide and improve our services, to provide you with a personalized website user experience, to contact you regarding your account and our services, to provide customer service, to provide you with personalized advertising and marketing messages, and to detect, prevent, mitigate, and investigate fraud or illegal activities. We may also share your information with third parties, including third-party service providers acting on our behalf, for these purposes. Additionally, we may share your personal data between affiliated companies to fulfill our contracts under the User Agreement and, where applicable, the Payment Terms.

Learn more about Part 5.

  1. Cross-Border Data Transfer

Some of your personal data recipients are located outside your jurisdiction, or their offices are located in jurisdictions where data protection laws may offer different levels of protection than those in your jurisdiction. We will provide appropriate safeguards when transferring personal data to such recipients.

Learn more about Part 6.

  1. Storage Period and Erasure
    We and our service providers will store your personal data in accordance with applicable data protection laws, but only to the extent necessary for the processing purposes described in this User Privacy Statement (for more information on processing purposes, please see Section 5, “Purpose and Legal Basis of Data Processing and Recipient Categories”). We will subsequently erase your personal data in accordance with our data retention and erasure policies, or take steps to properly anonymize the data, unless we are legally obligated or permitted to retain your personal data for a longer period (e.g., for legal compliance, tax, accounting, or auditing purposes, or to detect and prevent fraud or illegal activities). In Europe, data retention periods are typically 6 to 10 years (e.g., contracts, notices, and business correspondence). To the extent permitted or required by law, we will restrict processing of your data, rather than erasing it (e.g., restricting access). This is particularly relevant where we may still need the data to perform contracts or assert or defend legal claims, or where the law otherwise provides for or permits data retention. In these cases, the duration of processing restrictions depends on the applicable statutory limitation period or retention period. Upon the expiration of the relevant limitation period or retention period, the data will be erased.

Learn more about Part 7.

  1. Rights as a Data Subject
    As a data subject, you have the right to access, correct, delete, restrict the processing of your personal data, and demand data portability, subject to any restrictions that may be imposed under national laws. Furthermore, you can withdraw your consent and object to our processing of your personal data based on legitimate interests. You can also file a complaint with a regulatory agency.

Learn more about Part 8.

Exercising Your Rights and Managing Your Settings

  1. Cookies and Similar Technologies
    When you use our services, we and authorized third parties use cookies and similar technologies (collectively, “Cookies”) to provide you with a better, faster, and safer user experience, or to show you personalized advertising. You can find detailed information about the use of cookies and similar technologies and your choices in our User Cookie Notice.

Learn more about Part 9.

Your Choices Regarding Cookies and Similar Technologies

  1. Data Security
    We protect your personal data through technical and organizational security measures to minimize the risks of data loss, misuse, unauthorized access, disclosure, and alteration. To this end, we use technologies such as cybersecurity services and data encryption, and implement physical access restrictions on data centers, as well as logical access controls on data and system access. You can find more information about data security in our Security Center.
  2. Other Important Information about Data Protection This section contains important supplemental information about protecting your personal data when using our services, including whether you are required to provide personal data.
  3. Regional and State Privacy Disclosures For more information on regional disclosures for residents of certain U.S. states (including California), please see our State Privacy Disclosures page. For U.S. sellers (including sellers in California, Nevada, North Dakota, and Vermont). For more information on disclosures for specific regions or countries (including Brazil, mainland China, and the United Kingdom), please see our Regional Privacy Disclosures page.