Privacy policy

Who this policy is for

Our services are for businesses. The personal data we handle is mostly about the people who work for our sellers, buyers and partners: names, work email addresses, phone numbers and job titles.

What we collect

We collect the following. We never collect payment card details.

• Account details: your email address and name, your password (stored only in encrypted form) or your Google sign-in, and the language you use.
• Application details: company name, address, country, website or online store, VAT number, phone number, what you buy or sell, and your other answers.
• Deal information: the lots you view, your proposals and our counter-offers, messages with our team, offers for your stock, payouts and invoices.
• Messages you send us by email or through the platform, including attachments.
• Our team members' contact cards, which buyers see: name, photo, job title, email, phone and WhatsApp.
• Technical data in our server logs: IP address, browser type, the pages requested and the time.

Why we use it, and on what legal basis

• To create and run your account, review applications, and arrange deals, collections, payments and payouts: to perform our contract with you, or to take steps before one.
• To email you about your account, applications, proposals, offers and payouts: to perform our contract with you.
• To check that a business is genuine, and to prevent fraud and misuse: our legitimate interests, and legal obligations where they apply.
• To keep accounting and tax records: legal obligations.
• To keep the platform secure and improve our services: our legitimate interests.
• To tell you about new lots, if you ask us to: your consent, which you can withdraw at any time.

Who receives your data

We share data only as far as needed to provide our services:

• Supabase, which runs our database and sign-in, hosted in the EU (Ireland).
• Hetzner, whose servers in Germany run the platform.
• Google, for sign-in with Google and for Google Workspace, which we use for email.
• The other side of a deal, only where the deal requires it, for example to arrange a collection.
• Authorities, auditors and professional advisers, where the law requires it or to protect our rights.

We do not sell your data

We do not sell personal data, and we do not share it for advertising.

Transfers outside the EU

Our main providers store data in the EU. Some providers, such as Google, may process data outside the European Economic Area. Where they do, the transfer is covered by the European Commission's standard contractual clauses or another safeguard recognised under the GDPR.

How long we keep it

• Account and application data: while your account is open, and for up to 3 years after it closes, in case of questions or claims.
• Applications we decline: up to 2 years.
• Invoices and accounting records: 10 years, as Lithuanian law requires.
• Server logs: a short period, normally no longer than 90 days.

Cookies

We use only the cookies the platform needs to work:

• A sign-in cookie that keeps you signed in.
• A language cookie that remembers your language for up to a year.
• A short-lived cookie used during sign-in with Google, deleted after 10 minutes at the latest.

No tracking

We do not use analytics or advertising cookies, so we do not ask you to accept cookies. If you block cookies in your browser, you will not be able to sign in.

Security

We use encrypted connections, encrypted password storage and access controls. Only the team members who need your data for their work can see it.

Your rights

Under the GDPR you have the right to:

• Get a copy of your personal data.
• Have incorrect or incomplete data corrected.
• Have your data erased, where the law allows.
• Restrict or object to how we use your data, where the law allows.
• Receive your data in a portable format.
• Withdraw your consent at any time, where we rely on it.

Using your rights

Email liquidations@regainables.com. We answer within one month. You can also complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt) or to the data protection authority where you live.

If the California Consumer Privacy Act applies to you, you can ask us what personal information we hold about you and ask us to delete it, in the same way.

Children

Our services are for businesses and not meant for children. We do not knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy. The date at the top shows the latest version, and we tell account holders about important changes by email.