Privacy Policy

1. Introduction

Drix.ie ("we", "our", "us") is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the Irish Data Protection Acts 1988–2018. This Privacy Policy explains how we collect, use, store and share your personal information when you use our platform.

Our Data Controller is ERD Solutions Ireland. If you have any questions, contact us at privacy@drix.ie.

2. What Data We Collect

• Account Information: Name, email address, phone number, and profile details.
• Listing Data: Vehicle details, images, pricing, and descriptions you submit.
• Transaction Data: Payment information processed securely via Stripe (we do not store card details).
• Communication Data: Messages exchanged between buyers and sellers on the platform.
• Technical Data: IP address, browser type, device information, and usage analytics.
• Cookie Data: As described in our Cookie Policy.

3. Legal Basis for Processing

• Contract: To provide you with our marketplace services.
• Legitimate Interests: To improve our platform, prevent fraud, and ensure security.
• Consent: For marketing communications and non-essential cookies.
• Legal Obligation: To comply with applicable Irish and EU laws.

4. How We Use Your Data

• To create and manage your account
• To publish and manage vehicle listings
• To facilitate communications between buyers and sellers
• To process payments securely
• To send service-related notifications
• To improve platform functionality and user experience
• To prevent fraud and ensure platform safety
• To comply with legal obligations

5. Data Sharing

We do not sell your personal data. We may share data with:

• Stripe: For secure payment processing
• Service Providers: Hosting, analytics, and email services operating under GDPR-compliant agreements
• Legal Authorities: When required by law or to protect our rights
• Other Users: Seller contact information is visible to buyers as part of the listing service

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Account data is deleted within 90 days of account closure. Transaction records are retained for 7 years for legal compliance.

7. Your Rights Under GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: At any time for consent-based processing

To exercise these rights, contact privacy@drix.ie. You also have the right to lodge a complaint with the Data Protection Commission Ireland.

8. Security

We implement appropriate technical and organisational measures to protect your personal data including encryption, secure servers, and access controls. However, no internet transmission is completely secure.

9. Changes to This Policy

We may update this policy periodically. We will notify you of material changes by email or prominent notice on our platform.

10. Contact

For any data protection queries, contact us at privacy@drix.ie or visit ERD Solutions Ireland.