Privacy Policy

Last updated: May 17, 2026. We respect your privacy, collect only what we need, and keep it only as long as we need it.

1. What we collect

Information you give us

• Account data: name, email, phone, country, password (hashed with bcrypt ??? we never see your plaintext password).
• Shipping data: delivery address, optional delivery instructions.
• Order data: items purchased, totals, the seller who fulfilled each order, return/refund correspondence.
• Payment data: we never store full card numbers. Card processing is handled by Stripe (PCI-DSS Level 1). We retain only: card brand (Visa, Mastercard, etc), last four digits, and expiry month/year ??? for receipts and dispute lookup. For PayPal we retain only the PayPal email used. For crypto we retain only the transaction hash.
• Profile data: avatar, bio, social links ??? if you choose to add them.
• Seller data (sellers only): business name, registered address, government-issued ID (encrypted at rest), tax ID, payout account (bank or wallet).

Information we collect automatically

• Device data: browser, operating system, device type, screen resolution.
• Usage data: pages visited, products clicked, search queries, time spent per session.
• Approximate location: city + country, derived from your IP via Cloudflare. Used to display prices in your currency and estimate shipping.
• Cookies and similar technologies: see Section 5.

2. How we use it

• To process and ship your orders.
• To verify seller identities and prevent fraud.
• To detect, investigate, and prevent abuse (chargebacks, fake reviews, counterfeit listings, account takeovers).
• To send transactional emails ??? order confirmation, shipping updates, password resets. You can???t opt out of these without closing your account.
• To send marketing emails ??? only if you opt in. You can unsubscribe in one click from any email.
• To improve LeadVio ??? which categories load slowly, which features get used, which screens cause confusion.
• To comply with legal obligations (tax reporting, court orders).

3. Who we share it with

We share the minimum necessary, only with the parties below:

We do not sell your data to advertisers, brokers, or anyone else. Ever.

4. International data transfers

LeadVio is operated globally. Your data may be processed in the United States, the European Union, the United Kingdom, and Singapore. Where we transfer data outside your country, we rely on the European Commission???s Standard Contractual Clauses (or the equivalent in your jurisdiction). Sellers and couriers may process your data in their country to fulfill your order.

5. Cookies and similar technologies

We use three categories of cookies:

Strictly necessary

• laravel_session ??? keeps you signed in.
• XSRF-TOKEN ??? protects forms from cross-site request forgery.
• lv_cart ??? remembers your cart between pages.

Preference

• lv_locale ??? your chosen language.
• lv_currency ??? your chosen currency.
• lv_country ??? your delivery destination.

Analytics (opt-in only)

We use a self-hosted, privacy-respecting analytics tool. No third-party trackers (no Google Analytics, no Facebook Pixel) load unless you explicitly opt in via the cookie banner.

See Cookie Policy for the full table.

6. Data retention

7. Security

• All traffic is encrypted in transit with TLS 1.3.
• Passwords are hashed with bcrypt (cost factor 12).
• Card details never touch our servers ??? Stripe handles them directly.
• Production database access requires SSH key + 2FA + IP allowlist.
• We run quarterly penetration tests by an independent firm.
• If we ever experience a breach affecting your personal data, we will notify you within 72 hours, as required by GDPR.

8. Your rights (GDPR / CCPA)

If you are in the EU, UK, or California, you have the following rights:

• Right of access ??? Request a copy of all personal data we have on you.
• Right to rectification ??? Correct anything that is wrong.
• Right to erasure ??? Delete your account and all associated data (except what we must keep for tax/legal reasons).
• Right to object / restrict ??? Object to specific processing or restrict it to storage only.
• Right to portability ??? Get your data in a machine-readable format and move it to another service.
• Right to opt out of sale (CCPA) ??? We don???t sell your data, so this is automatically respected.

Email [email protected] with any of the above. We respond within 30 days. If we miss it, you can complain to your local Data Protection Authority.

9. Children

LeadVio is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has created an account, email [email protected] and we will remove it.

10. Changes to this policy

We may update this policy from time to time. For material changes we will email registered users at least 30 days before the new policy takes effect. Continued use of LeadVio after the effective date means you accept the new policy.

11. Contact & Data Protection Officer

Data Protection Officer: [email protected]

Postal: LeadVio Marketplace, Attn: DPO. We will respond to written requests at the same address.

This policy is governed by the laws of the seller of record. Disputes go to the LeadVio support team first, then to the data protection authority of your jurisdiction.