Privacy Policy
This policy explains what personal data Waxonic collects, why, and what rights you have over it, in line with the GDPR.
1. Data controller
The data controller is the individual operating Waxonic under individuali veikla (sole proprietor activity) in Lithuania.
2. What we collect
Account details (email, username, display name, avatar, bio, country); listings you create; messages and offers you send; order and transaction details; and basic technical data (like your session and device info) needed to keep you signed in and the service secure.
3. Why we collect it
To provide the marketplace service you've signed up for (performing our contract with you); to detect and prevent fraud and off-platform payment abuse (our legitimate interest); and to meet legal and accounting obligations, such as record-keeping for completed sales.
4. How long we keep it
We keep account data while your account is active, and for a reasonable period afterward where needed for legal, tax, or accounting purposes. Order records are kept as long as required by applicable law. You can request deletion sooner — see your rights below.
5. Your rights
Under the GDPR, you can request access to, correction of, or deletion of your personal data, ask us to restrict or object to certain processing, and request a portable copy of your data. You can also lodge a complaint with your national data protection authority (in Lithuania, the State Data Protection Inspectorate).
6. Cookies
We currently use only essential cookies needed to keep you signed in and remember your preferences (like language and theme) — no third-party advertising or tracking cookies.
7. Who we share data with
We use Supabase to host our database, authentication, and file storage, and Discogs' public catalog data to help you list records (no personal data is sent to Discogs). Once payments and shipping go live, a payment processor and shipping carriers will process the data needed to complete your order (such as your delivery locker and payment confirmation).
8. Age
Waxonic isn't intended for children under 16, and we don't knowingly collect their data.
9. Changes to this policy
We may update this policy from time to time. Material changes will be posted here with an updated date.
Last updated: 2026-07-11