Privacy and data-processing notice

Operator and contact

The controller’s legal name and service address must be configured before the marketplace is opened to the public. Send privacy, access, correction, objection or deletion requests in writing to [email protected].

Legal grounds and data rights

Under section 6 of the North Cyprus Personal Data Protection Law 89/2007, data is processed to provide the account, listing, messaging or report service you request and take pre-contract steps; meet applicable legal duties; and pursue service-security and fraud-prevention interests balanced against users' rights. Newsletter delivery and optional analytics rely on your express consent, which you may withdraw later. You can unsubscribe without signing in through the personal link in the confirmation, welcome and later newsletter emails; the link does not contain your email address. Do not add sensitive data to free-text or photo fields.

Under sections 14 and 15, you may ask whether your data is processed; access the data, its source, purpose and recipient categories; correct inaccurate or incomplete data; request deletion or blocking where the conditions apply; and object for legitimate reasons relating to your particular situation. You may apply to the North Cyprus Personal Data Protection Board if an access request is not answered within thirty days, an objection is not answered within fifteen working days, or the answer is unsatisfactory.

Account and form data

When you create an account, we process your email address, one-way password hash, email-verification and session records, language preference, and any optional name, phone and city you add to your profile. We also store information you submit through contact, newsletter and dealer-claim forms. Only a one-way digest of the random key in a newsletter unsubscribe link is stored.

Your IP address is processed transiently for security and rate limiting. The rate-limit memory keeps a short-lived SHA-256 digest instead of the raw IP. If you save a calculator result on your device, it stays only in your browser's local storage and is not sent to the server.

Listing data and public information

A published listing is visible to anyone on the internet. It includes the vehicle details, description, city, seller type, phone or WhatsApp number, photos, and the seller's condition and legal declarations. Those declarations may cover accidents, chassis, airbags, flood or fire history, service and mileage, mechanical condition, body panels, known issues, origin, inspection and road-tax dates, registration document, authority to sell, finance or liens, and steering side. For a vehicle in Japan or in transit, current location, estimated arrival, customs and North Cyprus registration status, included costs, deposit terms and whether photos show that exact vehicle are also published. Declaration dates and later versions are recorded for safety and review.

A phone number and city from your profile may be prefilled in the listing form; only the contact details and city you submit with the listing become visible when it is published. Your account email is not displayed on the listing page. Personal information you place in a description or photo also becomes public. Search engines or other people may copy a public listing, and those copies may remain for a time after the listing is removed.

Buyer and seller activity

Favorites are private to your account. Listing messages, participant names and conversation history are shown to the buyer and seller; a new-message email may also contain the message text. A good-faith listing report, its reason and detail are shown to authorised site staff who review reports. The reporter's identity is not public or shown to the seller.

When a listing is reported, a versioned copy of its public vehicle, contact and declaration fields and photo addresses is taken for review. Readable photos managed by the application are copied to private evidence storage that is not publicly served; their byte count and SHA-256 digest are recorded. Unreadable or unmanaged sources are recorded with that status and are not fetched from the internet. Only authorised administrators can access this evidence. Existing conversations for a listing suspended for safety are closed to new messages; during retention, their history remains readable only to the participants.

During a security, fraud or abuse review, authorised administrators may suspend a listing or marketplace account, or revoke verified dealer ownership, only with a recorded reason. The action may reject active listings, close open conversations to new messages and revoke account sessions. The reason, administrator identity, before-and-after revisions and affected listing identifiers are kept in immutable audit records. You may request review or appeal by writing to [email protected].

Limited usage data such as listing views, language, and phone or WhatsApp clicks may be processed to operate the service, prevent abuse and give sellers aggregate interest figures. A seller sees totals for views, contact actions and messages on their listing, not the identity of individual visitors.

Photo processing, use and recipients

Uploaded vehicle photos are auto-oriented, resized and re-encoded as JPEG. Embedded metadata from the original file, including location data where present, is not carried into the public copy; the application stores only the processed copy.

We use data to provide accounts and secure sessions, run listing, favorite, messaging, reporting, moderation and support features, send service emails, prevent abuse and meet applicable obligations. We do not sell data. Hosting, database, file-storage, email-delivery and optional analytics providers may process only the data needed for their service. Public listing data is available to all visitors, messages to the conversation participants, and reports to authorised staff.

Retention and deletion

Account and marketplace records are kept while needed to provide the account and related service. Expired session, verification and password-reset records are removed periodically. Newsletter delivery stops immediately after unsubscribe; if the subscription remains inactive, its record is routinely deleted after 30 days. Withdrawing a listing, marking it sold or reaching its 60-day publication expiry hides it from the public; the listing, declaration versions, moderation, message and report records may be kept longer to manage the account, protect the service, and review an open dispute or report. Evidence for an open safety report is kept until the case is resolved. Twenty-four months after resolution, report evidence and private photo copies, moderation-action records and conversations closed for safety are routinely deleted if no other case for that listing remains open. A documented legal hold may extend this period only for the named listing, gallery or account scope; the scope, approver and next review date are recorded, and the hold is released when the obligation ends.

You can close your account from My account by using your current password and the displayed confirmation phrase; passwordless accounts use the valid current session and that phrase. Closure hides active listings, removes listing contact details, descriptions and public photos, deletes profile, favorite, session and access-token data, and irreversibly anonymizes the account identity. Messages, seller declarations and open safety-report records remain linked to the anonymous account for the period above to preserve participant and review integrity. Condition and legal seller-declaration revisions linked to the anonymous account are routinely deleted 24 months after account closure when the listing is inactive and no open safety case or active legal hold applies; private evidence photos are not made public and no new message can be sent to a deleted account. Request access, correction or other deletion at [email protected].