Privacy Policy

Thryft Trade Ltd ("we", "us" or "our company") takes your privacy seriously and strictly complies with the EU General Data Protection Regulation (GDPR) (EU) 2016/679 and other applicable EU data protection regulations.

This Privacy Policy describes how we collect, use, disclose and protect your personal information when you visit our website www.thryfttrade.com or use our services.

1. Information We Collect

We may collect the following types of personal data:

Contact Information: Name, email address, phone number, shipping/billing address.

Payment Information: Credit/debit card information (processed securely through a third-party payment platform).

Website usage data: IP address, browser type, device information, cookies and analytics data.

Communication Data: information sent via e-mail, contact forms or customer service channels.

2. Purpose of data use

We process your personal data for the following purposes:

To process and fulfill your order.

Communicate with you regarding your purchases, inquiries, or customer service requests.

Optimize websites, products and services through data analysis.

Fulfilling legal obligations (e.g. tax, anti-fraud).

To send marketing information with your explicit consent.

3. Legal basis for data processing

Under the GDPR, we process data based on the following legal bases:

Performance of contract (order processing).

Legitimate interests (improving services, preventing fraud).

User consent (for marketing emails, which you can withdraw at any time).

4. Data Sharing and Third Parties

We may share your data in the following circumstances:

Payment processors (e.g. Stripe, PayPal) to complete the transaction.

Logistics service providers (such as DHL and FedEx) are used for the delivery of goods.

Service providers (such as website hosting, data analysis) and sign a confidentiality agreement.

Legal authorities (if required by law).

We will not sell your personal data to third parties.

5. International Data Transfers

If data is transferred outside the EU, we will ensure that appropriate safeguards are in place (such as standard contractual clauses or GDPR-approved mechanisms).

6. Your GDPR Rights

You have the right to:

Access, correct or delete personal data.

Restriction of or opposition to data processing.

The right to data portability (obtain a copy of your data).

Withdrawal of consent (for marketing messages).

Complain to a supervisory authority.

To exercise the above rights, please contact: [email protected].

7. Data Retention Period

We retain data only for as long as necessary to fulfill the purposes stated in this policy or as required by law.

8. Cookies and Tracking Technologies

We use cookies to enhance your user experience. You can manage your preferences through your browser settings.