🔒 Privacy Policy

Last Updated: 20 September 2026 · Compliant with UK GDPR & Data Protection Act 2018

At Dola Express Auto Hub, we take your privacy seriously. This policy explains what personal data we collect, how we use it, who we share it with, and your legal rights under data protection law.

1. What Data We Collect

We collect and process the following categories of information:

1.1 Information You Provide Directly

• Account Data: Name, email address, phone number, postal address, company details (if applicable), and password;
• Transaction Data: Items viewed, enquiries made, purchases completed, payment details (processed securely via PCI-DSS compliant providers);
• Communications: Messages sent through our platform, support requests, and feedback;
• Verification Data: Proof of identity or business details provided to confirm seller status.

1.2 Automatically Collected Data

• Technical Data: IP address, browser type, device identifiers, time spent on pages, click patterns, and referring URLs;
• Location Data: Approximate location derived from IP address for regional content and currency display;
• Cookies: See Section 6 below.

2. How We Use Your Data

We process your data only where we have a legal basis to do so — consent, performance of contract, legal obligation, or legitimate interest. Purposes include:

• ✅ Providing, maintaining, and securing our platform and services;
• ✅ Processing transactions and facilitating communication between Buyers and Sellers;
• ✅ Verifying user identity and preventing fraud, abuse, or illegal activity;
• ✅ Personalising your experience — showing relevant listings and regional content;
• ✅ Sending essential service updates — account notifications, transaction status, security alerts;
• ✅ Improving our platform — analysing usage patterns to enhance performance and features;
• ✅ Complying with legal obligations — accounting, tax, and regulatory requirements.

3. Who We Share Data With

We share your data only as necessary and only with parties committed to protecting it:

• Transaction Partners: Payment processors, shipping providers, and verification services — limited to what is required to complete services;
• Platform Partners: Technology providers supporting our infrastructure, cloud hosting, and security systems — bound by strict data processing agreements;
• Legal Authorities: When required by law, court order, or valid legal process;
• Business Transfer: In the event of merger, acquisition, or asset sale — subject to confidentiality and continuity protections.

We do not sell your personal data to third parties for marketing purposes.

4. Data Retention

We keep your data only as long as necessary for the purpose it was collected:

• Active account data — retained while your account remains open;
• Closed accounts — retained for 7 years for tax, accounting, and dispute resolution purposes;
• Marketing preferences — retained until you opt out;
• Anonymised analytics — may be retained indefinitely without identification.

5. Your Rights

Under UK data protection law, you have the right to:

• 🔍 Access — request a copy of all personal data we hold about you;
• ✏️ Rectification — correct inaccurate or incomplete data;
• 🗑️ Erasure — request deletion of your data where there is no compelling reason for continued processing;
• 🚫 Restriction — limit how we process your data under specific circumstances;
• 📤 Portability — request your data in a machine-readable format for transfer to another provider;
• ❌ Objection — object to processing based on legitimate interest or direct marketing;
• ✅ Withdraw Consent — where processing is based on consent, withdraw it at any time.

To exercise any right, contact us via our Contact Us page. We will respond within 30 days. You also have the right to complain to the Information Commissioner’s Office (ICO) if you are dissatisfied.

6. Cookies & Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how our platform is used. You can control cookie settings through your browser. Essential cookies cannot be disabled as they are required for the platform to function.

7. Security

We implement industry-standard security measures including encryption, access controls, and regular security audits. However, no online transmission is 100% secure — you use the platform at your own risk and are responsible for keeping your login credentials confidential.

8. Children’s Privacy

Our platform is not intended for individuals under the age of 18. We do not knowingly collect data from children. If we become aware we have done so, we will delete it immediately.

9. International Transfers

Some of our service providers may process data outside the UK. We ensure appropriate safeguards are in place — such as data transfer agreements — to protect your information.

10. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be notified via platform announcement. Your continued use of our platform after changes take effect constitutes acceptance.

11. Contact Us

For privacy-related enquiries, to exercise your rights, or to reach our Data Protection Officer, please visit our Contact Us page.