Privacy Policy
This policy explains what personal data Odys Market collects when you use odyscars.com, why we collect it, and what rights you have over it. We are the data controller for that data under the General Data Protection Regulation (GDPR).
What we collect
When you create an account: your email address, a display name, and your password (stored only as an Argon2 hash — we never hold the password itself). You may optionally add a phone number, which stays hidden from other users unless you explicitly choose to show it on your listings.
If you register as a dealer: your business name, and optionally a description, county, address, website and logo. This information is published on your public dealer profile.
When you list a car: the vehicle details and photographs you provide. Published listings are public.
When you contact a seller or buyer: the content of your messages, which is visible to you, to the other party, and — where a message is reported — to our moderators.
When you are signed in: a session record containing your IP address, browser user-agent string, and the times the session was created and last used. This is how we keep you logged in and how we investigate abuse.
Your saved searches and favourites, so we can show them back to you and, if you have opted in, alert you to matching cars.
What we deliberately do not collect
We use no third-party analytics, advertising or tracking services. There are no tracking pixels, no advertising cookies and no data sharing with ad networks. We do not build a server-side history of the cars you browse — your "recently viewed" list is stored only in your own browser and never reaches us. Listing view and impression counts are stored as daily totals per listing, not per viewer, so they cannot be traced back to an individual.
Cookies
We set a single cookie, odys_session, which identifies your signed-in session.
It is strictly necessary for the site to work and is not used for tracking or advertising.
Clearing it signs you out.
Why we are allowed to use it
- Contract — to give you an account, publish your listings and pass messages between buyers and sellers.
- Legitimate interests — to keep the marketplace safe: rate limiting, fraud and abuse investigation, and moderating reported content.
- Consent — for optional notification emails such as saved-search alerts, price-drop alerts and engagement summaries. You can withdraw consent at any time in your account settings or from the unsubscribe link in any such email.
- Legal obligation — where we are required to retain or disclose data.
Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our instructions: our email delivery provider, used to send verification, password reset, and notification messages. Our servers and database are hosted within the European Economic Area, and we do not transfer your personal data outside it.
How long we keep it
Account data is kept while your account is open. Sessions expire automatically. Listings and the messages attached to them are retained while your account is open so that both parties keep a record of their conversation. If you delete your account, we delete your personal data and your listings, except where we must retain a limited record to comply with a legal obligation or to defend a legal claim.
Your rights
Under the GDPR you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it, and to receive it in a portable format. To exercise any of these, email [email protected] and we will respond within one month.
If you are unhappy with how we have handled your data, you can complain to the Irish Data Protection Commission at dataprotection.ie.
Changes to this policy
If we change how we use your data we will update this page and change the date at the top. Where the change is significant, we will tell you by email.
Contact
Questions about this policy: [email protected].