Privacy Policy

1. Who we are

Wingman operates an online marketplace where users can publish listings, contact each other, and arrange or complete transactions. This privacy policy explains what data we process, why we use it, and what rights you have.

Processing of personal data is subject to applicable privacy law, including the General Data Protection Regulation (GDPR) for users in the European Economic Area.

2. What data do we process?

Depending on how you use the service, we may process the following categories of data:

• Account and profile data: for example name, email address, password (stored securely), phone number if you provide it, and public profile information you choose to display.
• Listings and content: titles, descriptions, prices, categories, photos, and other information you upload or add to a listing.
• Communications: messages and attachments you send or receive through the platform, and related metadata (such as timestamps).
• Transaction and usage data: favourites, bids, reviews you write or receive, reports or support requests, and technical logs needed for security and operations.
• Device and technical data: including IP address, browser type, language settings, and cookies or similar technologies (see below).

3. Why we use data

We process personal data to operate the marketplace, connect buyers and sellers, prevent fraud and abuse, comply with legal obligations, and improve our service.

• Creating and managing your account and displaying your public profile and listing information to other users.
• Enabling chat, notifications, and other marketplace features.
• Handling complaints, disputes, reports, and enforcement of our terms and code of conduct.
• Analysing usage in aggregate, security, backups, and technical maintenance.

4. Marketplace visibility

A marketplace is partly public by nature: information you place in a listing or public profile may be seen, saved, or shared by other visitors outside our control.

Conversations between buyers and sellers usually run through the platform; do not share sensitive data (such as passwords or unnecessary copies of ID documents) unless strictly necessary and you understand the risks.

5. Sharing with third parties

We do not sell your personal data. We may share data with carefully selected processors who help us host the service, send email, or provide analytics or security, in line with data processing agreements where required by law.

We may disclose data when the law requires it, or to protect our rights, users, or the public, where reasonable and proportionate.

6. Retention

We keep data no longer than needed for the purposes for which it was collected, unless a longer retention period is required by law.

After you delete your account, some data may remain for a limited time in backups. Some anonymous or aggregated statistics may be retained.

7. Security

We apply appropriate technical and organisational measures to protect personal data. No online service can guarantee absolute security; please use a strong password and beware of phishing.

8. Your rights

Under the GDPR you have rights including access, rectification, erasure, restriction of processing, data portability, and objection to certain processing.

You may also lodge a complaint with a supervisory authority, for example in your country of residence.

9. Cookies

We use cookies and similar technologies for essential functionality (such as sessions and language), security, and where permitted for analytics or personalisation. You can configure your browser to limit cookies; this may affect how the site works.

10. Transfers outside the EEA

If data is transferred outside the European Economic Area, we use appropriate safeguards (such as standard contractual clauses approved by the European Commission) where the law requires.

11. Changes

We may update this privacy policy from time to time. The “Last updated” date will change. For material changes we will aim to notify you via the platform or by email.

12. Contact

For questions about this privacy policy or a request relating to your data, please use the contact address shown on the platform (for example [email protected]).