1. Who is responsible for your data
Sibro is responsible for personal data used to operate the marketplace, customer and seller accounts, checkout, platform security and Sibro support. The independent seller identified on a product or order may be separately responsible for data it uses to fulfil the sale, issue invoices, provide customer service and meet its legal obligations. Sibro’s final legal entity name, registered address, company number and privacy contact must be inserted before commercial launch.
2. Who this notice applies to
This notice applies to marketplace visitors, registered customers, prospective and approved sellers, authorised business-account users, people who contact support and anyone whose information is provided in connection with an order, delivery or seller verification.
3. Personal data we collect
The information depends on how you use Sibro and the choices you make.
- Identity, account and contact details, including name, email, telephone number and login information
- Delivery and billing addresses, order history, returns, refunds, invoices and customer-service communications
- Payment-related information, transaction references and fraud-prevention signals; full card details should be handled by the payment provider rather than stored by Sibro
- Seller identity, business, tax and verification information where requested for marketplace participation
- Device, browser and technical information, security logs and permitted cookie or usage information
- Information you provide in reviews, forms, messages, complaints, safety reports or other marketplace content
4. Where we obtain information
We collect information directly from you when you browse, register, buy, sell or contact us; automatically through devices and permitted cookies; from sellers and delivery partners involved in an order; and from payment, identity-verification, fraud-prevention or public-register sources where lawful.
5. How and why we use personal data
Sibro uses personal data only for defined marketplace purposes.
- Create and secure accounts, remember preferences and provide requested marketplace features
- Process orders and payments, connect customers with sellers, support delivery, returns, refunds and invoices
- Verify sellers, review listings and protect customers from unsafe, prohibited or counterfeit products
- Detect, investigate and prevent fraud, misuse, security incidents and violations of marketplace rules
- Respond to enquiries, disputes, legal requests, complaints and product-safety concerns
- Measure performance and improve search, usability, reliability and support
- Send service messages and, where permitted, marketing that can be withdrawn
6. Legal bases for processing
Depending on the activity, Sibro relies on performance of a contract or steps requested before a contract; compliance with legal obligations; legitimate interests such as securing and improving the marketplace, preventing fraud and resolving disputes; consent where required for optional cookies or marketing; and, in limited cases, protection of vital interests or establishment and defence of legal claims.
7. When we share personal data
Sibro does not sell personal data. Information is shared only where needed for the stated purposes.
- The independent seller and, where relevant, delivery or fulfilment providers handling an order
- Payment, identity-verification, fraud-prevention, hosting, analytics, communications and customer-support providers acting under appropriate terms
- Professional advisers, insurers, auditors and prospective transaction parties subject to confidentiality and legal safeguards
- Courts, regulators, law-enforcement bodies, tax authorities and product-safety authorities where required or lawfully necessary
- Other users only when you intentionally publish content such as a public review or seller profile
8. International transfers
Some service providers may process information outside Spain or the European Economic Area. Where required, Sibro should use an adequacy decision, approved standard contractual clauses or another lawful safeguard, together with supplementary measures where appropriate. Customers may request information about relevant safeguards.
9. How long we keep information
Sibro keeps personal data only for as long as reasonably necessary for the purpose collected. Account and order records may be retained while an account is active and afterward for applicable tax, accounting, consumer-protection, product-safety, fraud, dispute and limitation periods. Verification and security records use risk-based schedules. Data is deleted or anonymised when no longer required.
10. Security and account protection
Sibro uses organisational and technical measures intended to protect information against accidental loss, unauthorised access, alteration or disclosure. Access should be limited by role and sensitive transmissions protected. No online service can guarantee absolute security; users should use a strong unique password, protect security codes and report suspected account misuse promptly.
11. Your data-protection rights
Subject to applicable law, you may request access, rectification, erasure, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing. You may also request not to be subject to a solely automated decision that produces legal or similarly significant effects, where that right applies.
- Requests are normally free and should be answered within one month, subject to lawful extensions
- Sibro may request proportionate information to verify identity before acting
- You may complain to the Spanish Data Protection Agency (AEPD) or the competent supervisory authority in your country
- Some information may need to be retained where a legal obligation or overriding lawful reason applies
12. Cookies and similar technologies
Necessary technologies support sign-in, security, language, basket and checkout. Preference, analytics or advertising technologies should be used only as permitted and, where required, after consent. Visit the Cookies Notice to understand categories and change available choices.
13. Children and third-party information
Sibro is not intended for children to open accounts or sell independently. If you provide another person’s delivery or contact details, you should be authorised to do so and provide information accurately. A parent or guardian who believes a child supplied personal data improperly should contact Sibro.
14. Changes and how to contact us
Sibro may update this notice as services, providers or legal requirements change. Material changes should be communicated through the marketplace or account contact details where appropriate. Privacy questions and rights requests may be submitted through Contact Sibro. The final privacy email and Data Protection Officer contact, if appointed or legally required, must be published before launch.
⚠ Pre-launch legal review required
Sibro must add its final company details, actual providers, retention schedule and privacy contacts, then obtain qualified Spanish/EU legal review before processing real customer data.
