Privacy policy

TroveMercado Privacy Policy

Last Updated: October 13, 2025

Please read this Privacy Policy carefully before using the trovemercado.com website (the "Service") operated by trovemercado.com ("us", "we", or "our"). This policy describes how we collect, use, and protect your personal information, and outlines your rights under the General Data Protection Regulation (GDPR) if you are a resident of the European Economic Area (EEA) or the UK. Our platform operates as a marketplace, connecting various independent sellers ("Vendors") with buyers like you.

By accessing or using the Service, you signify your agreement to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not use our Service.

1. Information We Collect and Its Legal Basis

We may collect the following types of information to provide and improve our Service to you, based on specific legal grounds:

  • Personal Identification Information: Name, email address, mailing address, and phone number when you register for an account.
    • Legal Basis: Contractual Necessity, Consent (for marketing), and Legitimate Interest (for security).
  • Transaction and Order Information: Shipping/billing address, and order details when you make a purchase. Payment information (like credit card numbers) is processed securely by our third-party payment gateways and is not stored on our servers.
    • Legal Basis: Contractual Necessity and Legal Obligation (for invoicing/tax).
  • Communications: Content of communications when you contact us for customer support or inquiries.
    • Legal Basis: Contractual Necessity and Legitimate Interest (to improve services).
  • Automatically Collected Data (Usage Data): IP address, browser type, device information, access times, and service usage data through cookies.
    • Legal Basis: Legitimate Interest (to maintain and improve our Service). Consent for non-essential cookies.

2. How We Use Your Information

We use the information we collect for various purposes, including to:

  • Provide, operate, and maintain our Service.
  • Process your transactions and manage your orders.
  • Manage your account and provide customer support.
  • Personalize your experience and deliver relevant content.
  • Improve our website, products, and services.
  • Send you periodic emails (order updates, service announcements, and marketing communications, based on explicit opt-in consent).
  • Detect, prevent, and address technical issues and ensure security.

3. How We Share Your Information

We do not sell, trade, or rent your personally identifiable information. We share your information with third parties only under the following circumstances:

  • With Vendors: To fulfill your order, we share necessary information (name, shipping address, contact details) with the Vendor from whom you purchased. Vendors are contractually obligated to handle your information solely for order fulfillment and customer service and to comply with applicable data protection laws.
  • With Trusted Service Providers: We share information with third-party companies for payment processing, shipping, data analysis, IT support, etc. These parties are contractually obligated to keep your information confidential and operate in compliance with GDPR.
  • For Legal Compliance: We may release your information when necessary to comply with legal obligations (e.g., tax laws, court orders).
  • Business Transfers: Your Personal Data may be transferred as a business asset during a merger or acquisition.

4. International Data Transfers

If you are a resident of the EEA or the UK, your Personal Data may be transferred to, and processed in, countries outside of the EEA/UK (e.g., to our servers in [Specify Country, e.g., South Korea]). Such countries may not have data protection laws equivalent to those in the EEA/UK.

We ensure that a similar degree of protection is afforded to it by implementing at least one of the following safeguards: using Standard Contractual Clauses (SCCs) approved by the European Commission, or transferring data to countries deemed to provide an adequate level of protection.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies for essential site functionality, performance analytics, and targeted advertising (with your consent where required).

You can instruct your browser to refuse all cookies. However, if you do not accept cookies, you may not be able to use some portions of our Service. For more detailed information, please visit our [Link to Your Cookie Policy Page - if you have one].

6. Data Retention

We will retain your Personal Data only for as long as is necessary for the purposes set out in this policy. The retention period is determined by:

  • Account Data: For the duration your account is active, and for a period of up to [e.g., 2 years] after account closure.
  • Order/Transaction Data: For a period of up to [e.g., 7 years] to comply with tax, accounting, and other legal obligations.

We retain and use your information to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our policies.

7. Data Security

We implement a variety of technical and organizational security measures to maintain the safety of your Personal Data. All supplied sensitive information is transmitted via Secure Socket Layer (SSL) technology and encrypted. Access to your Personal Data is restricted to authorized personnel who are subject to strict confidentiality obligations.

8. Your Rights and Choices (GDPR Data Subject Rights)

If you are a resident of the EEA or the UK, you have the following rights regarding your Personal Data:

  • The right to access (request copies of your Personal Data).
  • The right to rectification (request corrections to inaccurate or incomplete data).
  • The right to erasure ("Right to be Forgotten").
  • The right to restrict processing.
  • The right to object to processing (e.g., for direct marketing).
  • The right to data portability (request transfer of data).
  • The right to withdraw consent at any time.

You can exercise some of these rights directly through your account settings. For all other requests, please contact us using the details in Section 11. We will respond within one month.

Right to Complain to a Supervisory Authority: You have the right to lodge a complaint with a competent supervisory authority if you believe our processing of your Personal Data violates data protection laws.

9. Children's Privacy

Our Service is not directed to anyone under the age of 16. We do not knowingly collect personally identifiable information from children under 16.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page, updating the "Last Updated" date, and providing a prominent notice on our Service prior to the change becoming effective.

11. Contact Us

If you have any questions about this Privacy Policy, your Personal Data, or your rights, please contact us: