Privacy policy
Work document: requires completing the operator contact, retention, and verifying suppliers/data transfers before validation.
1. Data controller
AITEL LTD, a company registered in England and Wales under number 17492195, operates LowStock. The full address, data protection contact, and any representative in the European Union, if mandatory, are currently being confirmed.
2. What data is processed
Depending on usage: account data (email, identifier, profile), data published in ads, requests, offers, messages, orders, confirmations, notifications, technical information and security logs. We do not request bank card details for transactions between users in the current flow.
3. Purposes and grounds
We process data for account creation, marketplace operation, messaging, and transaction records (service execution); fraud prevention, security, and moderation (legitimate interests, within the limits of the law); compliance with legal obligations; and, where necessary, based on consent.
4. Visibility and recipients
The information of a published lot is public to the extent indicated in the interface. Conversations, requests and orders are accessible to authorized participants. The seller's private contact data is not published in the listing; for eligible orders through the platform, it is disclosed to participants after acceptance. Authorized staff and technical providers may have limited access for operation, security and support.
5. Storage and transfers
The platform uses third-party technical services, including Base44 infrastructure. The effective hosting regions, recipients, international transfers, and applicable safeguards must be confirmed through provider documentation before the final validation of this policy.
6. Data retention
Data is kept only as long as necessary for the stated purposes and legal obligations. Concrete retention periods for accounts, conversations, orders, and logs must be established and documented before final approval.
7. Data subject rights
Under the conditions of applicable law, you may request access, rectification, erasure, restriction, portability or objection to processing and you may withdraw consent when it is the basis. You may lodge a complaint with the competent data protection authority. The official channel for requests must be completed.
8. Security
We use authentication, authorization checks, and access restrictions for private data. No technical measure provides an absolute guarantee against incidents.
Merchant verification
At the merchant's request, we use the country, registration number, and company name to consult the available registry. We store the result, source, time of verification, and intervention history for data reliability and fraud prevention. The declared data of the representative and business contacts from the verification file are accessible to the holder and authorized personnel. We do not collect identity documents or banking data here. Registry verification does not confirm identity or the right of representation. Specific retention periods and applicable legal obligations must be validated before full activation.
9. Cookies
Information about cookies and local storage is presented separately in the Cookie Policy.