Privacy Policy

The data controller is [PLACEHOLDER — legal entity name], registered in Portugal ([PLACEHOLDER — registration number / NIF]), registered office [PLACEHOLDER — address]. For any privacy question, or to exercise your rights, contact marque.portugal@gmail.com.

Account and profile: your name, email address, language preference, and authentication data.

Activity: your listings, bids, comments, watchlist, and saved searches.

Seller declarations: the confirmations you make when listing a vehicle, stored with the date and time, a version reference, and the IP address and browser (user-agent) from which they were made, as a record of the declaration.

Payment data: handled by our payment processor, Stripe. Marque never sees or stores full card numbers; we retain only the payment status and the identifiers needed to reconcile the buyer’s premium.

Technical data: log and device data such as IP address and browser type, generated when you use the site, used to keep the service secure and running.

We rely on the following legal bases. Contract: running your account, operating auctions, and processing the buyer’s premium. Consent: optional saved-search alert emails, which you may withdraw at any time. Legitimate interests: securing the platform, preventing and investigating fraud, keeping a record of the seller declarations, and improving the service — balanced against your rights and freedoms. Legal obligation: accounting, tax, and other records we are required to keep.

To operate auctions and your account; to process the buyer’s premium; to send transactional emails (new bids, outbid notices, wins, payment reminders, and listing status updates); to send saved-search alerts where you have opted in; to prevent, investigate, and resolve fraud and disputes, including by reference to the seller declaration records; and to secure and maintain the platform. We do not sell your personal data, and we do not use it for advertising.

We use trusted service providers who process personal data only on our instructions and under a data-processing agreement: Supabase (database and authentication hosting), Vercel (application hosting), Stripe (payment processing), and Resend (transactional email). We may also disclose data where we are required to do so by law, or to establish, exercise, or defend legal claims.

Some information you provide is shown publicly on the site by design — for example your listing content and photographs, your display name on comments, and the fact that a bid was placed. Bidders are shown anonymously in bid history; your email address is never displayed publicly, and is shared with the other party only after a sale completes so the transaction can be concluded.

Some of our processors — in particular Stripe, together with certain hosting and email infrastructure — may process personal data outside the European Economic Area, including in the United States. Where that happens, the transfer is protected by appropriate safeguards under Chapter V of the GDPR, such as the European Commission’s Standard Contractual Clauses or an adequacy decision. Contact us for more detail on the safeguards that apply.

We keep your account and activity data for as long as your account is active. Records we are legally required to retain — including transaction, invoicing, and accounting data, and the seller declarations that evidence a sale — are kept for the period required by Portuguese law (accounting records are generally retained for up to 10 years). Technical logs are kept for a short period for security purposes. When data is no longer needed, we delete or anonymise it. [PLACEHOLDER — confirm exact retention periods.]

Under the GDPR you have the right to access your personal data, to have it corrected or erased, to receive it in a portable format, to restrict or object to its processing, and to withdraw consent for optional emails at any time (withdrawal does not affect processing carried out before then). To exercise any of these rights, contact marque.portugal@gmail.com. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD).

Marque uses only essential cookies: those needed to sign you in and keep your session active, and one that remembers your cookie-consent choice. We do not currently use advertising or third-party analytics cookies. If we add any non-essential cookies, we will ask for your consent first and update this policy.

Marque is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this policy from time to time; the date above shows the current version. Where changes are material, we will highlight them or notify you directly.

Privacy questions or requests: marque.portugal@gmail.com.