Privacy Policy
Last updated: March 15, 2026
1. Information We Collect
We collect information you provide directly (name, email, payment details) and automatically (device info, browsing behavior, IP address). We may also receive information from third-party verification services when processing seller applications.
2. How We Use Your Information
We use your information to operate the platform, process transactions, verify identities, prevent fraud, personalize your experience, send relevant communications, and improve our services. We may use browsing data to provide AI-powered recommendations.
3. Information Sharing
We share information with payment processors, shipping carriers, and verification partners as needed to complete transactions. We may share anonymized analytics data with business partners. We never sell your personal data to third parties.
4. Cookies & Tracking
We use essential cookies for platform functionality, analytics cookies to understand usage patterns, and marketing cookies to show relevant content. You can manage cookie preferences through your browser settings or our cookie management tool.
5. Data Security
We implement industry-standard security measures including encryption, secure data centers, regular audits, and access controls. Payment data is handled by PCI-DSS compliant processors and never stored on our servers.
6. Your Rights
You have the right to access, correct, delete, or export your personal data. You can opt out of marketing communications at any time. EU residents have additional rights under GDPR including data portability and the right to object to processing.
7. Data Retention
We retain your data for as long as your account is active and for a reasonable period afterward for legal and business purposes. Transaction records are kept for 7 years in compliance with financial regulations.
8. Business Verification (KYB) Data
For company accounts we collect and store business verification data: certificate of incorporation or registry extract, VAT/tax registration, proof of registered address, evidence of the signatory's authority, and identification of beneficial owners holding more than 25%. These documents are stored encrypted in a private repository, are accessible only to our compliance team, and are never shared with sellers, buyers or third parties except where legally required. Under EU anti-money-laundering rules we retain KYB and identity records for 5 years after the end of the business relationship, after which they are permanently deleted. You may request access, correction or deletion of this data at any time by contacting us, subject to those legal retention obligations.
9. Contact About Privacy
For privacy-related inquiries, please contact our Data Protection Officer at privacy@one-provenance.com. We will respond to all legitimate requests within 30 days.