Data Processing and GDPR

For MyRepost account, order, security and support information, the business operating MyRepost generally acts as a data controller and decides why and how that information is used.

When MyRepost processes listing-account or listing information solely to provide functions requested by a user or business customer, its role may be closer to a processor acting on that customer’s instructions. The exact role depends on the information and context.

• Identity, account and contact information.
• Connected listing account credentials and session information.
• Listing content, identifiers, status and available statistics.
• Package, order and limited payment information.
• Security, device, access, support and operational records.

We process personal data to create and secure accounts, connect authorised listing accounts, import and manage listings, provide automatic reposting, display available statistics, process orders, provide support and meet legal obligations.

Depending on the activity, processing may be necessary to perform a contract, comply with law, protect legitimate interests or act on consent where consent is the appropriate basis.

People in the UK or European Economic Area may have rights to access, correct, erase, restrict or object to processing, request portability and withdraw consent where processing relies on consent.

Rights can be limited where retention or processing is required by law, needed to protect others or necessary to establish or defend legal claims.

Submit an access, correction or deletion request through the Contact page. Provide enough information to identify the relevant account. We may request reasonable proof of identity before releasing or deleting information.

MyRepost may use service providers for hosting, databases, infrastructure, email, security, support and related operations. Appropriate contractual and security measures are used where required.

Stripe processes checkout and payment information under its own data-protection responsibilities. MyRepost does not store full card details directly, but may receive transaction references, payment status and limited payment-method information needed for an order.

Service infrastructure or providers may process data outside the country where a user is located. Where UK or EU rules require safeguards for an international transfer, we use an appropriate legal mechanism or provider commitment.

We use proportionate technical and organisational controls, including access restrictions, protected credentials, secure sessions, monitoring and operational procedures. Security measures are reviewed as the service and risks change.

Contact MyRepost through the Contact page for a data-protection request or question. You may also have the right to complain to the UK Information Commissioner’s Office or the relevant supervisory authority in your country.

MYREPOST LTD

Company number: 17280273