Privacy Policy

FlipIt Digital ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, share, and safeguard your information when you use the FlipIt Digital marketplace.

1. Information we collect

Account information

Name, email, phone number, password (hashed), profile picture.

Identity verification

Government-issued ID, selfie photos, and liveness video for KYC. This is processed by our verification partners (Persona, Onfido) and retained as required by AML / KYC regulations.

Transaction information

Items bought / sold, prices, currencies, payment method (last 4 digits only), wallet balances, and dispute records.

Device information

IP address, browser type, device fingerprint, OS, language, and access timestamps. Used for fraud detection.

Cookies & analytics

Essential cookies for sessions; analytics cookies (with consent in EU/UK) to measure aggregate platform usage.

2. How we use your information

• To operate and improve the marketplace
• To verify your identity and prevent fraud
• To process transactions and resolve disputes
• To comply with legal obligations (AML, tax, sanctions)
• To send you order updates and (if opted in) marketing

3. Sharing your information

We share information with:

• Buyers / sellers in a transaction: only what's necessary to complete the order (display name, ratings, region).
• Service providers: payment processors, KYC vendors, cloud hosting, fraud detection, customer support tools — all under data-processing agreements.
• Legal authorities: when required by law, court order, or to investigate fraud.
• Acquirers: in case of merger or acquisition, with notice to you.

We never sell your personal information.

4. International transfers

Information may be transferred to countries outside your residence. We use Standard Contractual Clauses and other safeguards required by GDPR, UK GDPR, and similar laws.

5. Retention

We retain account data while your account is active and for up to 5 years after closure to comply with AML / KYC requirements. Transactional data is retained as required by tax law (typically 7 years).

6. Your rights

Depending on your jurisdiction (EU/UK GDPR, CCPA, etc.) you have the right to:

• Access your data
• Correct inaccuracies
• Delete data (subject to legal retention)
• Object to or restrict processing
• Data portability
• Lodge a complaint with a supervisory authority

To exercise these rights, email privacy@flipitdigital.com.

7. Security

We use encryption in transit (TLS 1.3) and at rest (AES-256), 2FA, role-based access controls, and continuous monitoring. No system is 100% secure, but we work hard to make ours close to it.

8. Children

FlipIt is not intended for users under 18. We do not knowingly collect data from minors.

9. Cookies

We use essential cookies for authentication and security. With your consent (where required), we use analytics cookies to improve the platform. You can manage cookies in your browser.

10. Changes to this policy

We will notify you of material changes by email and a prominent notice on the platform.

11. Contact

For privacy questions, contact our DPO at privacy@flipitdigital.com.