GDPR Compliance Policy

At LootForge Marketplace, we are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA). This policy outlines your rights and how we handle your personal data.

1. Data Controller
LootForge Marketplace acts as the Data Controller for any personal data collected through our platform. If you have any questions, contact us

2. What Personal Data We Collect
We collect and process the following data:

Account Information: Name, email, username, and password.
Transaction Data: Purchase and payment history.
Communication Data: Messages sent through our platform.
Technical Data: IP address, browser type, and device information.
3. How We Use Your Data
We use your data for the following purposes:
✅ To provide and manage our marketplace services.
✅ To process transactions and prevent fraud.
✅ To communicate with you regarding purchases and support.
✅ To improve our services based on user interactions.
✅ To comply with legal obligations.

4. Legal Basis for Processing
Under GDPR, we process your personal data based on:

Contractual Necessity: To provide our services.
Legitimate Interests: To enhance security and prevent fraud.
Legal Compliance: To meet regulatory requirements.
Consent: For marketing and optional cookies (you can withdraw consent at any time).
5. Your GDPR Rights
As an EEA user, you have the following rights:

Right to Access – Request a copy of your personal data.
Right to Rectification – Correct inaccurate or incomplete data.
Right to Erasure ("Right to be Forgotten") – Request deletion of your data under certain conditions.
Right to Restriction of Processing – Limit how we use your data.
Right to Data Portability – Receive your data in a structured format.
Right to Object – Object to processing based on legitimate interests.
Right to Withdraw Consent – Revoke consent for marketing or cookies.
To exercise your rights, contact us at [Your Email]. We will respond within 30 days.

6. Data Security & Retention
🔒 We use encryption, access controls, and secure servers to protect your data.
🗄️ We retain data only as long as necessary for our services and legal compliance.

7. Data Transfers Outside the EU
If we transfer your data outside the EEA, we ensure that appropriate safeguards (such as Standard Contractual Clauses (SCCs)) are in place.

8. Third-Party Services
We may share data with:

Payment providers (for transactions).
Analytics tools (to improve our platform).
Legal authorities (if required by law).
We do not sell or share your data with advertisers without consent.

9. Cookies & Tracking
We use cookies for essential functionality, analytics, and marketing. See our [Cookie Policy] for details.

10. Complaints
If you believe we have mishandled your data, you have the right to file a complaint with your local Data Protection Authority (DPA).

For any GDPR-related inquiries, contact us