Last updated · [DATE]
Privacy Policy
This policy explains what personal data we collect through the Eskro platform, why we hold it, and what you can ask us to do with it.
Draft. This document has not yet been reviewed by a lawyer and the details in brackets are placeholders. It is published so the page exists and reads sensibly; replace it before launch.
01 Who is responsible
The controller of your personal data is [LEGAL ENTITY NAME], registered at [REGISTERED ADDRESS], company number [COMPANY NUMBER]. For any question about this policy, write to [PRIVACY CONTACT EMAIL].
02 What we collect
The contact details you give us — name, email address, telephone number and the company you act for. The content of what you submit: listing details, enquiry messages, guided-search answers and subsequent correspondence. Technical data your browser sends, such as IP address and pages viewed.
03 Why we hold it
To answer your enquiry and pass it to the relevant party. To review, publish and administer listings. To carry out screening and, where a transaction requires it, the identity and source-of-funds checks that regulated dealings involve. To keep records of what we were told and when.
04 Legal bases
We rely on the performance of a contract or steps taken at your request; on our legitimate interest in operating a marketplace and keeping records of it; on your consent where we ask for it; and on legal obligations where they apply.
05 Who sees it
The counterparty to an opportunity, after screening and with your knowledge. Service providers who host and run the platform for us, under contract. Professional advisers, and authorities where the law requires disclosure. We do not sell personal data and we do not use it for advertising.
06 How long we keep it
Enquiries and correspondence are kept for [RETENTION PERIOD] from the last contact. Records connected to a completed transaction are kept for as long as the applicable regulatory and accounting rules require.
07 Your rights
You may ask for a copy of your data, ask us to correct it or delete it, object to processing or ask us to restrict it, and withdraw consent where the processing rests on consent. Write to [PRIVACY CONTACT EMAIL]. If you are not satisfied with our answer you may complain to the supervisory authority in your country.
08 Transfers outside your country
The platform serves international markets, so data may be handled in a country other than yours. Where that happens we rely on the safeguards the applicable data protection law provides for such transfers.
09 Optional website analytics
If you accept analytics, Google Analytics 4 (Google Ireland Limited / Google LLC) receives page categories and public content identifiers, traffic sources, device and browser information, language, clicks, searches without search text, and form progress without answers or contact details. Google uses cookies to distinguish browsers and processes technical connection data, including your IP address; GA4 does not log or store individual IP addresses. We load Google Analytics only after consent. Advertising permissions, Google Signals, session recordings and heatmaps are disabled. Event data is retained for 14 months. We store your consent choice for 180 days across all site languages. Use “Analytics settings” in the footer to accept or reject at any time. Rejection stops collection and removes analytics cookies without clearing your form. Data may be processed by Google outside your country, including in the United States.