Privacy Policy

1. Who we are

This Privacy Policy describes how the platform collects, uses, and shares your personal information. For the purposes of the EU/UK data protection laws, the data controller is Edrive. For privacy matters, contact us.

2. Data we collect

• Account & profile data: name, email, phone number, password hash, preferences.
• Listing & transaction data: vehicle details, pricing, media, communications with sellers/buyers.
• Usage data: pages viewed, links clicked, referring URL, session duration, approximate geolocation (city/region), device/browser info.
• Support data: messages and attachments you send to our support channels.
• Cookies & similar tech: identifiers used for essential functionality, analytics, and (if enabled) marketing.

3. How we use your data

• Provide and operate the platform (account, listings, messaging, search, payments integration).
• Improve features, performance, and safety via analytics and diagnostics.
• Communicate with you (service updates, security notices, customer support).
• Prevent fraud, abuse, and violations of our terms.
• (If enabled) Personalize content or measure marketing effectiveness.
• Comply with legal obligations and enforce our agreements.

4. Legal bases (GDPR/UK GDPR)

• Contract: processing necessary to provide our services you request.
• Legitimate interests: product improvement, security, fraud prevention, basic analytics (where permitted).
• Consent: non-essential cookies (analytics/marketing) and related tracking; you can withdraw at any time.
• Legal obligation: compliance with laws and regulatory requests.

5. Cookies, consent & preferences

We use essential cookies to make the site work. With your permission, we also use analytics and marketing cookies. You can control your choices at any time:

• Manage preferences: Click Manage cookie settings to accept/reject non-essential categories.
• Region-aware consent: In the EEA/UK/CH we use opt-in for non-essential cookies; elsewhere we may use consent mode with regional defaults.
• Signals: We implement Google Consent Mode via Google Tag Manager so tags respect your choices.

6. Analytics & advertising

We use Google Tag Manager to manage tags and may use Google Analytics 4 (GA4) for aggregated usage analytics. Where required, GA4 runs only after you grant consent. GA4 can receive pseudonymous identifiers, truncated IP, device/browser metadata, and page interaction data. Marketing tags (if enabled) may use cookies to measure and optimize campaigns.

• Opt-out / controls: use the Manage cookie settings control; you can also use browser settings or the Google Analytics opt-out add-on.
• Data sharing: Some analytics/ads data may be processed in the United States by Google and its subprocessors under Standard Contractual Clauses (SCCs).

7. Sharing & processors

We share personal data only as needed:

• Vendors/processors: cloud hosting (e.g., AWS), content delivery, analytics, messaging, payments, and customer support tools.
• Business counterparties: when you engage with dealers/sellers/buyers, we share the information necessary to fulfill your request.
• Legal/safety: to comply with law, enforce terms, or protect rights, property, and safety.
• Corporate events: during a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.

8. Retention

We keep personal data only as long as necessary for the purposes described above, to comply with legal obligations, resolve disputes, and enforce agreements. When no longer needed, we delete or anonymize data.

9. Security

We employ administrative, technical, and organizational measures appropriate to the risk, including access controls, encryption in transit, and monitoring. No system is 100% secure; please use strong, unique passwords.

10. International transfers

We may process and store information on servers located outside your country. Where we transfer personal data from the EEA/UK to third countries without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, or object to processing; to portability; and to withdraw consent at any time (without affecting prior lawful processing).

To exercise your rights, contact us. We may need to verify your identity.

12. California (CCPA/CPRA)

California residents have rights to know, delete, correct, and opt-out of “sale/share” of personal information. We do not sell personal information for money, but certain advertising and analytics may be considered “sharing” under CPRA. You can opt out by disabling marketing/analytics cookies via Manage cookie settings.

13. Children's privacy

Our services are not directed to children under 16. If you believe a child has provided us personal data, please contact us and we will take appropriate steps to remove it.

14. “Do Not Track”

Some browsers offer a “Do Not Track” (DNT) signal. Because there is no industry standard for DNT, we do not respond to DNT signals. You can manage tracking via Manage cookie settings and your browser settings.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with the effective date at the top. Material changes may be communicated by additional notice.

16. Contact us