Privacy Policy

Last updated: 23 July 2026

1. Who we are

Sell4Me.ie ("we", "us") operates the classifieds website at sell4me.ie. We are the data controller for personal data processed through this site. You can contact us at Support@sell4me.ie.

We have not appointed a Data Protection Officer as we are not required to under Article 37 GDPR. Data protection queries go to the address above.

2. Data we collect

• Account data: email, password (hashed), display name. If you list ads, the contact email on each ad is visible to other signed-in users on that ad's page so they can email you directly about it; it remains hidden from visitors who are not signed in.
• Profile data: full name, phone number, postal address, Eircode, county.
• Listing data: ads, photos, prices, descriptions, location.
• Auction & bid data: bids placed, auctions won.
• Messages: messages sent between buyers and sellers.
• Payment data: handled by Stripe; we store a reference to the transaction only.
• Technical data: IP address, browser type, device info, pages viewed.
• Cookies: see our Cookie Policy.

3. Why we use your data (legal basis)

• Contract: creating your account, listing ads, running auctions, processing payments, delivering messages.
• Legal obligation: tax, fraud prevention, responding to lawful requests.
• Legitimate interest: securing the service, preventing abuse, basic analytics.
• Consent: personalised advertising, analytics and any non-essential cookies.

4. Sharing your data — processors we use

We share data only with the following processors, each bound by a Data Processing Agreement:

• Supabase (EU region): database hosting, authentication and file storage.
• Cloudflare: content delivery, DDoS protection and edge hosting of the web app.
• Stripe Payments Europe, Ltd (Ireland): card payments, SEPA Direct Debit, subscriptions and payouts to sellers.
• Google Ireland Ltd: Google AdSense (advertising) and Google Analytics 4 (aggregate usage stats) — both loaded only if you consent.
• Resend (email delivery): transactional and account emails sent from notify.sell4me.ie.
• Google Workspace (Google Ireland Ltd): hosts our staff mailboxes at sell4me.ie.
• An Post: tracked-parcel labels for Buy Now orders that use postage.
• MotorCheck: vehicle registration lookup when sellers list a vehicle by reg number.
• Other auction party: when an auction completes, the winner and seller exchange names, phone numbers and addresses to arrange handover.
• Buy Now buyers and sellers: when a Buy Now order is placed, the buyer's name, shipping address and phone number are shared with the seller so they can post the item and generate an An Post tracked label.

We never sell your personal data.

5. International transfers

Data is primarily processed in the EU/EEA. Where a processor transfers data outside the EU/EEA (e.g. Stripe, Google, Cloudflare, Resend), it is protected by the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

6. How long we keep data

• Account & profile data: until you delete your account.
• Ads & auction history: up to 3 years after expiry, for dispute resolution and accounting.
• Messages: up to 2 years after the related ad ends.
• Payment records: 6 years (Irish accounting law).
• Backups: rolling 30 days.

7. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data (via your profile page).
• Delete your account and personal data ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent at any time (e.g. cookies).
• Lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

You can export or delete your data directly from your profile page, or email Support@sell4me.ie. We respond within one month of a verified request, as required by Article 12(3) GDPR.

8. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you (Article 22 GDPR).

9. Security and data breaches

Data is encrypted in transit (HTTPS) and at rest. Access is restricted by row-level security policies. We never store payment card details on our servers. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Irish Data Protection Commission within 72 hours as required by Article 33 GDPR, and notify affected users without undue delay where the risk is high.

10. Children

Sell4Me.ie is not intended for anyone under 16. We do not knowingly collect data from children. Accounts confirmed to belong to under-16s are deleted.

11. Changes to this policy

We may update this policy. Material changes will be notified by email or on-site banner.