1Who This UK Notice Applies To

This UK Notice applies to individuals located in the United Kingdom who access or use the Services, including buyers, sellers, and visitors. It describes how we process personal data as a controller and, in limited cases, as a processor on behalf of sellers.

2Data Controller & Contact Details

For UK data protection purposes, Xaysi Inc. is the data controller for most processing described in this UK Notice. Our contact details are provided in the “Contact Us” section and in our main Privacy Policy.

3Personal Data We Collect

We may collect the following categories of personal data:

• Account data: name, email, login credentials, profile details, preferences.
• Transaction data: purchase history, billing/shipping information, payment status (card details handled by payment providers).
• Seller/business data: business details, tax information where required, store and contact information.
• Device/usage data: IP address, device identifiers, cookies, analytics and log data.
• Support communications: messages and records of support interactions.

4Lawful Bases for Processing

We process personal data under one or more lawful bases, depending on the context:

• Contract: to provide the Services and complete transactions.
• Legal obligation: to comply with applicable laws (e.g., recordkeeping, fraud prevention).
• Legitimate interests: to run, secure, and improve the Services (balanced against your rights).
• Consent: for certain marketing and cookie activities where required (withdrawable anytime).

5How We Use Your Personal Data

We use personal data for purposes such as:

• Providing and operating the Services
• Processing payments, orders, refunds, and resolving disputes
• Security, fraud detection, and account verification
• Customer support and service communications
• Analytics and improving our products and user experience
• Marketing and advertising (subject to your choices and applicable law)

6Sharing of Personal Data

We may share personal data with trusted parties for business and operational purposes, such as:

• Service providers: hosting, payment processing, analytics, security, and support providers.
• Sellers/buyers: to facilitate transactions (e.g., shipping and order communications).
• Professional advisers: legal, audit, and insurance providers where necessary.
• Authorities: where required by law or to protect users, rights, and platform integrity.

7International Transfers

Your personal data may be transferred to and processed outside the UK. Where we transfer personal data internationally, we apply appropriate safeguards under UK law (such as the UK IDTA or other approved mechanisms) and implement additional protections where needed.

8Data Retention

We retain personal data only as long as necessary for the purposes described in this UK Notice, including to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements.

9Your UK Privacy Rights

Subject to certain conditions and exemptions, you may have rights to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase data in certain circumstances
• Restrict processing in certain circumstances
• Object to processing (including direct marketing)
• Data portability where applicable
• Withdraw consent where processing is based on consent

10How to Exercise Your Rights

You can exercise your rights through account settings (where available) or by contacting us using the details in the Contact Us section. We may request verification to protect your information.

11Automated Decision-Making

We may use automated tools to help secure the Services and detect fraud. Where automated decisions produce legal or similarly significant effects, you may have rights to request human review and contest the decision, as applicable.

12Complaints (ICO)

If you have concerns about our use of your personal data, please contact us first so we can help. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

13Changes to This UK Notice

We may update this UK Notice from time to time. We will post the updated version and, where appropriate, provide additional notice for significant changes. Continued use of the Services after updates means you accept the revised notice.

14Contact Us

For questions about this UK Notice or to exercise your rights, please contact us using the contact information provided in our main Privacy Policy or via our support channels.