GDPR Compliance Statement

1-1Who This Statement Covers

This statement applies when you access Listifys while located in the EEA or UK, or when we otherwise determine that GDPR or UK GDPR applies to our processing of your personal data.

It supplements our Privacy Policy and does not replace jurisdiction-specific notices such as our India DPDP Act Compliance or California Privacy Rights statements.

1-2Data Controller

For GDPR and UK GDPR purposes, Listifys, located at 1000 Bearcat Way Suite 105 Unit 5, Morrisville, NC 27560, USA | Workafella Cyber Crown HiTech City, 7th Floor HUDA Techno Enclave Madhapur, Hyderabad Telangana 500081, India, acts as the data controller for personal data processed through the Platform unless we identify a different controller for a specific product or partnership.

1-3Data Protection Contact

Privacy inquiries and data-subject requests: contact@listifys.com. Postal correspondence may be sent to the address above with attention to "Data Protection."

2-1Lawfulness, Fairness, and Transparency

We process personal data only where we have a valid legal basis and provide clear information about what we collect, why we use it, and with whom we share it.

2-2Purpose Limitation and Data Minimization

We collect data for specified marketplace, security, analytics, and compliance purposes. We avoid collecting sensitive categories unless necessary and permitted for fraud prevention or where required by law.

2-3Accuracy, Storage Limitation, and Integrity

We take reasonable steps to keep data accurate, retain it only as long as needed under our Data Retention Policy, and implement technical and organizational measures to protect confidentiality and integrity.

2-4Accountability

We maintain records of processing activities where required, assess high-risk processing through data protection impact assessments when appropriate, and train personnel with access to personal data on privacy obligations.

3-1Contract

We process account, listing, messaging, checkout, and support data as necessary to perform our contract with you and provide the Listifys marketplace.

3-2Legitimate Interests

We rely on legitimate interests for fraud prevention, service improvement, security monitoring, and limited direct marketing to existing users, balanced against your rights. You may object to certain interest-based processing as described in Section 6.

3-3Consent

Where required, we obtain consent for non-essential cookies, certain marketing communications, and optional features such as precise geolocation or promotional profiling. You may withdraw consent without affecting the lawfulness of prior processing.

3-4Legal Obligation and Vital Interests

We process data when necessary to comply with tax, anti–money laundering, law-enforcement, and content-moderation obligations, or to protect vital interests in emergency situations.

4-1Data Categories

• Identity and contact data: name, email, phone, address, verification documents
• Account and profile data: username, photo, preferences, saved searches
• Transaction data: listings, offers, orders, payouts, disputes
• Communications: messages, support tickets, call recordings where disclosed
• Technical data: IP address, device identifiers, logs, cookies
• Safety and compliance data: reports, sanctions screening, moderation actions

4-2Recipients and Processors

We share data with cloud hosting providers, payment processors, identity vendors, analytics partners, customer-support tools, and professional advisers under written contracts requiring appropriate safeguards.

A current summary of major processor categories is available on request at contact@listifys.com.

4-3Automated Decision-Making

We use automated systems to detect spam, fraud, and policy violations. These systems may restrict messaging, payments, or visibility without human review in urgent risk scenarios.

You may request human review of decisions that produce legal or similarly significant effects, subject to verification and safety constraints.

5-1Transfers from the EEA and UK

Because Listifys is U.S.-based, personal data may be transferred to the United States and other countries where our providers operate. We implement appropriate safeguards such as Standard Contractual Clauses, UK International Data Transfer Agreements, or equivalent mechanisms recognized under applicable law.

5-2Supplementary Measures

Where required by transfer impact assessments, we apply supplementary technical measures including encryption in transit and at rest, access controls, and minimization of remote access to EEA and UK data sets.

6-1Rights Available

• Access to personal data and certain processing information
• Rectification of inaccurate data
• Erasure in limited circumstances
• Restriction of processing
• Data portability for contract-based automated processing
• Objection to processing based on legitimate interests or direct marketing
• Withdrawal of consent where processing is consent-based

6-2How to Exercise Rights

Submit requests through in-app privacy settings where available or email contact@listifys.com. We may verify your identity before fulfilling a request. We respond within one month, extendable by two further months for complex requests with notice.

6-3Limitations

Rights may be limited where we must retain data for legal claims, fraud prevention, freedom of expression, or compliance obligations. Deleting data required for open transactions or investigations may be deferred until those matters close.

7-1Notification to Authorities and Users

If we become aware of a personal data breach likely to result in risk to individuals in the EEA or UK, we will notify competent supervisory authorities within seventy-two (72) hours where required and communicate to affected users without undue delay when the breach is likely to result in high risk to their rights and freedoms.

8-1Right to Lodge a Complaint

You may lodge a complaint with your local supervisory authority. UK users may contact the Information Commissioner's Office. EEA users may contact the authority in their country of habitual residence, workplace, or place of alleged infringement.

8-2Changes to This Statement

We update this statement when our processing practices, providers, or legal obligations change. Material updates will be posted in the Legal Center with a revised effective date.