Privacy policy

Who we are

MyTradeMarket: Company registered with CIPC (reg. no. K2026846630) · trading name pending. Director: Kayla Dhooge; registered 22 October 2026. The approved company name is pending. For privacy enquiries, contact +27 61 628 2710+27 79 925 5460South Africa or use our data request page.

POPIA Information Officer

Kayla Dhooge is the Information Officer for MyTradeMarket under POPIA. hello@mytrademarket.com

Children

Accounts are for people aged 18 or older. Our account page asks for an age eligibility declaration before displaying account fields or starting social authentication. We do not collect a date of birth or offer guardian consent signup. A declaration is not verified proof of age. If you believe a child has supplied personal information, contact our Information Officer so we can investigate and address it lawfully.

What we collect

Only what the marketplace needs: your email address (account), first and last names and profile photo (required before trading); seller profile details you choose to publish (seller type, company name, registration and VAT number, country, city, website, bio); listings and photos you upload; messages, reviews and reports you send; your name, email, optional phone number and message when you submit a contact enquiry. We do not request payment card details, date of birth, ID numbers, ID documents or location tracking. Do not include identity documents in messages or listings. Specialist private identity verification is planned but not connected; its provider, processing and retention terms must be disclosed before collection begins.

Why we use it

To provide your account and the marketplace (contract), to detect scams such as reused serial numbers or photos, including an automated AI review of new listings (legitimate interest in keeping users safe), and to meet legal obligations. Listings flagged by the automated check are reviewed by a person before any decision is final.

Who we share it with

Your public profile, including the names and profile photo you submit, listings and reviews are visible to everyone. Messages are visible to you and the other party; when you report an incoming message, staff can read the reported message snapshot and your report details. We also store your block list and listing status history. Sale counts and sold item titles are public, seller reported records; rental history is private to the owner and staff. Contact details you include on rental listings are public; rental messages may contain contact details. We use a hosting and database provider and an AI provider for listing checks, under data processing terms. We do not sell your data or use advertising trackers.

Cookies

We only use essential storage to keep you signed in and remember your cookie choice. See our cookie policy.

Private deal records

When you propose a deal, we store its participants, listing reference, proposed price, commission estimate, delivery/collection method, transport cost responsibility, planned date, inspection requirements and ownership declaration. We retain written handover or problem statements and an append only action history for the participants and authorised staff. These are user statements, not verified payments or ownership evidence. Do not include identity documents, bank details or personal contact information in sale records. No payment details or bank account verification data are collected through this feature. Audit records may need to be retained for legal obligations or disputes; personal data requests remain subject to those obligations.

Payment testing records

Staff only simulations store test order values, commission schedules, simulated verification references, accounting entries and audit actions. These do not involve real funds or verify a seller's identity. Future payment provider processing, verification references and retention terms must be disclosed before real onboarding or payment begins; the app does not store card data or raw identity documents.

Emails

We send account emails such as sign up confirmation and password reset, and matching new listing or quote request emails when you subscribe to a saved search. Saving a deal proposal or recording an action also submits a deal record confirmation to your verified account email; either participant can request their own event confirmation. It includes the deal reference, equipment title, proposed price, commission estimate and transport responsibility, not private evidence notes or the other participant's email address. These are not payment receipts. App email delivery respects suppression and email preferences. Alerts go to your account email. Delete an alert to stop that search; app emails include a managed unsubscribe link. We do not send marketing emails.

How long we keep it

You can request account deletion on our data request page. Deletion is handled by our team, not immediately when you submit a request. Records we must keep by law (for example commission invoices) are kept for the legally required period.

External services and international transfers

Lovable Cloud provides hosting, account authentication, storage and managed email delivery. It processes account and technical connection information, uploaded content and email recipients and message content needed for these services. Equipment and profile photos may be served through storage or an asset delivery service, which receives connection information such as your IP address. Fonts are bundled with the site rather than requested from Google Fonts.

When configured, Google Cloud Vision receives listing image URLs and image content for copied photo checks, and the Lovable AI service receives submitted listing information for automated safety review. Choosing Apple, Google or Microsoft sign in shares authentication information with that provider. Opening WhatsApp support or a share link takes you to the chosen external service, which applies its own privacy terms. The app does not enable optional advertising pixels, session replay or keystroke recording. Hosting security and error diagnostics may process technical information; do not include sensitive information in page URLs or error reports.

These providers may process information outside South Africa or your country. The operator must confirm actual processing locations and contractual safeguards required by POPIA section 72 and other applicable laws. This policy does not claim that contracts or transfer assessments have already been completed. No live payment provider receives customer payment data through website checkout because checkout is unavailable.

Search email permission

Search emails require your separate unticked opt in when creating an alert. We record your account, saved search, acceptance, time, notice version and source. Earlier alerts without evidenced permission are paused until you subscribe again. Your email comes from your account, not a purchased list. Delete a search alert to withdraw permission for that search; use the managed unsubscribe link in app emails to stop app emails. Essential account security messages may still be needed. No marketing email or SMS campaign is enabled.

Your rights

You can access, correct, export or delete your data, object to processing and complain to your data protection authority (for example the Information Regulator in South Africa, or your local authority in the EU/UK). Use our data request page.