1. Data controller
The data controller for the platform is the operator of Extpertia. For privacy requests contact: admin@extpertia.com
2. Data we collect
- Account data: name, email, phone (if provided), role, password hash, avatar.
- Business listing data: descriptions, photos, videos, location, category, pricing, visibility settings.
- Usage data: pages viewed, search/filter events, device type, browser, IP address, timestamps.
- Communication data: messages, support tickets, forum posts, comments, notifications.
- Billing data: plan, invoices, payment references (card data is handled by payment processors).
- Technical logs: error reports, security events, and operational diagnostics where enabled.
3. Purposes and legal bases
We process data to provide the service (contract), secure the platform (legitimate interest), comply with law (legal obligation), and — where required — with your consent (e.g. non-essential cookies or marketing if offered).
Moderation, fraud prevention, and account security are based on legitimate interest and, where applicable, legal obligations.
4. Cookies and local storage
We use cookies and browser storage for language preference, session login, theme, and cookie consent. See our Cookie Policy for details.
5. Sharing and processors
We may share data with: hosting providers, email delivery, payment gateways, analytics (if enabled), and professional advisers when required.
Public listing fields you choose to publish are visible to other users and may be indexed by search engines unless restricted by robots settings or listing visibility.
We do not sell personal data.
6. Retention
We keep account and billing records while your account is active and for a reasonable period afterwards for legal, tax, and dispute resolution purposes.
Messages, logs, and support tickets may be retained according to operational needs and legal requirements. You may request deletion subject to exceptions (e.g. ongoing investigations or invoices).
7. Your rights
To exercise rights, email admin@extpertia.com from your registered address or provide sufficient identity verification.
- Access, rectification, erasure, restriction, portability, and objection — where applicable under GDPR.
- Withdraw consent at any time for consent-based processing.
- Lodge a complaint with your local supervisory authority.
8. Security
We apply technical and organisational measures including HTTPS, access controls, CSRF protection, and role-based permissions. No online service is 100% secure; please use a strong unique password.
9. International transfers
If data is processed outside the EEA we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where applicable.
10. Changes
We may update this policy. Check the date above. Significant changes may be highlighted on the site or by email to registered users where appropriate.