Privacy Policy — Sibro Marketplace

At Sibro Marketplace (sibro.es), we process your personal data to manage orders, payments, shipping, and to improve your experience on the platform. We are responsible for most of the data processing activities on this website. However, when you purchase from an independent vendor on the marketplace, that vendor will receive the necessary data to process and deliver your order (name, address, phone number, and order details). Read the full version below for more details.

Data Controller

Controller: Sibro Marketplace
Address: Calle Aparejador Antonio Monzó 4, Quart de Poblet, Valencia, Spain
Contact Email: privacy@sibro.es.

Scope and Recipients

This policy applies to all users of the sibro.es platform: customers, visitors, vendors, and service providers. In certain cases (for example, sales between a customer and a vendor), the customer’s personal data is shared with the vendor to fulfill the purchase contract.

Data We Collect and Purpose

We summarize below the data category, purpose, and legal basis:

  • Contact and order details (name, address, email, phone, billing and shipping info): to manage orders and deliveries. Legal basis: contract performance.

  • Payment data (payment token, last 4 digits of card if applicable, transaction identifiers): to process payments. Legal basis: contract performance / legal obligation.

  • Account data (username, encrypted password, order history): to manage the user account. Legal basis: contract performance.

  • Vendor data (onboarding documents, bank details for payouts, ID for KYC verification): to manage the vendor relationship and payouts. Legal basis: contract performance / legal compliance.

  • Technical and usage data (IP, cookies, logs, on-site behavior): for security, analytics, and improvement of the service. Legal basis: consent for non-essential cookies / legitimate interest for security and fraud prevention.

  • Marketing (email for newsletters): only with explicit consent.

Data Sharing

We may share data with:

  • Payment gateways (e.g., PayPal, Stripe) to process payments.

  • Shipping and logistics companies to deliver orders.

  • Hosting providers, email service providers, and analytics tools (such as Google Analytics) according to their role.

  • Independent vendors: when you purchase from a vendor, we provide them with the necessary data to process and deliver your order (name, address, phone number, and order details). Vendors may act as independent controllers or joint controllers for processing related to the order. Vendors are required to comply with applicable data protection laws and maintain their own privacy policy.

Data Retention

We keep data only as long as necessary to fulfill the purpose for which it was collected and to comply with legal obligations. For example, under Spanish tax and accounting law, invoices and related documents must be kept for at least 4 years. For other data, retention periods will depend on the nature of the information.

Data Subject Rights

You have the right to:

  • Access your data.

  • Rectify inaccurate data.

  • Request erasure (right to be forgotten) where applicable.

  • Restrict processing.

  • Request data portability.

  • Object to processing on legitimate grounds.

  • Withdraw consent at any time (without affecting prior lawful processing).

To exercise these rights, contact privacy@sibro.es or use the contact form on the website. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD).

Cookies and Tracking Technologies

We use cookies to ensure the website functions correctly, manage user sessions, and improve the user experience. Non-essential cookies (analytics, marketing) are only activated with your consent. See our Cookie Policy for more details and to manage your preferences.

Security

We implement appropriate technical and organizational measures to protect your data (SSL/TLS encryption, access control, backups, etc.). However, no system is 100% secure; we will notify users of any data breach in accordance with applicable law.

Policy Updates

We may update this policy from time to time. The latest version will always include the date of the last revision. Significant changes will be communicated to users when appropriate.

Contact

Data Controller: Sibro Marketplace
Address: Calle Aparejador Antonio Monzó 4, Quart de Poblet, Valencia, Spain
Email: privacy@sibro.es