Privacy Policy

This Privacy Policy explains how Online Asset (“we”, “us”, or “our”) collects, uses, shares, and protects your personal data when you use our platform and related services (the “Service”). We act as the data controller for the personal data described below. We are committed to handling your data lawfully, fairly, and transparently.

1. Information We Collect

We collect information you provide directly, such as your name, email address, billing details, and any content you submit when creating listings or messaging other users. We also collect information automatically, including device identifiers, IP address, browser type, and usage data, and we may receive information from third parties such as identity-verification and payment providers.

2. How We Use Your Information

We use your personal data to provide and operate the Service, process transactions, verify identities, prevent fraud, provide customer support, send service and marketing communications (where permitted), and comply with our legal obligations. We rely on one or more lawful bases for processing, including performance of a contract, our legitimate interests, your consent, and compliance with legal obligations.

3. How We Share Information

We share personal data with service providers who process it on our behalf (such as hosting, analytics, and payment processors), with other users where necessary to facilitate a transaction, and with authorities or advisers where required by law or to protect our rights. We require all processors to provide appropriate safeguards. We do not sell your personal data.

4. Your Rights (GDPR & CCPA)

Depending on your location, you have rights over your personal data. Under the EU/UK General Data Protection Regulation (GDPR), you may have the right to access, rectify, restrict, or object to processing, to data portability, and to withdraw consent at any time. Under the California Consumer Privacy Act (CCPA/CPRA), you may have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the sale or sharing of personal information. We will not discriminate against you for exercising any of these rights.

5. Data Export and Erasure

You may request a portable export of the personal data you have provided to us in a structured, commonly used, machine-readable format. You may also request that we erase your personal data (the “right to be forgotten”), and we will do so unless we are required to retain it to meet a legal obligation, resolve disputes, or enforce our agreements. To make a request, contact us using the details below; we will verify your identity and respond within the timeframe required by applicable law.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, tax, or regulatory requirements. Transaction and financial records are typically retained for the period mandated by applicable law. When data is no longer required, we securely delete or anonymise it.

7. International Transfers

Your personal data may be transferred to and processed in countries other than your own. Where we transfer data outside the European Economic Area or other regulated regions, we put appropriate safeguards in place, such as Standard Contractual Clauses, to ensure your data receives an adequate level of protection.

8. Security

We implement technical and organisational measures designed to protect personal data against unauthorised access, loss, or misuse, including encryption in transit, access controls, and regular security reviews. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

9. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal data from children. If we become aware that we have collected such data, we will take steps to delete it.

10. Changes and Contact

We may update this Privacy Policy from time to time and will update the “Last updated” date above when we do. To exercise your rights or ask questions about this policy, contact our privacy team at legal@onlineasset.com.