MyGearMarket logoMyGearMarket

Legal

Privacy Policy

Last updated: 21 August 2026

1. Introduction

This Privacy Policy explains how MyGearMarket processes personal data when users visit, use or interact with www.mygearmarket.com.

MyGearMarket is an online marketplace for buying and selling musical instruments, musical gear, accessories and related items.

MyGearMarket processes personal data in accordance with applicable privacy laws, including the General Data Protection Regulation.

This Privacy Policy applies to visitors, registered users, buyers, sellers, verified sellers, verified dealers and other users of the platform.

2. Controller and contact

For purposes of this Privacy Policy, MyGearMarket is the operator of the platform available at www.mygearmarket.com.

For privacy-related questions, requests or complaints, please contact: support@mygearmarket.com

MyGearMarket is registered with the Dutch Chamber of Commerce (Kamer van Koophandel) under registration number 42141990.

MyGearMarket may update its operator details from time to time, including where a formal legal entity, trade name or business structure is added or changed.

3. Personal data we process

MyGearMarket may process the following categories of personal data.

Account data

  • name;
  • email address;
  • password hash;
  • account settings;
  • registration date;
  • login information;
  • authentication method;
  • account type;
  • account status;
  • acceptance of legal policies.

Profile data

  • display name;
  • first and last name;
  • profile photo;
  • country;
  • city;
  • bio;
  • phone number;
  • address information;
  • dealer status;
  • dealer website;
  • public profile information;
  • email notification preferences.

Public profile data

Certain profile information may be displayed publicly, including display name, profile photo, country, bio, account type, join date, dealer badge, dealer website and public review information.

Private profile data

Name, address, phone number and email address are not intended to be publicly visible through normal platform use.

Listing data

  • listing title;
  • item description;
  • photos;
  • asking price;
  • accepted offer or counteroffer amount;
  • category;
  • brand;
  • model;
  • variant;
  • condition;
  • year of manufacture;
  • country of manufacture;
  • location or pickup city;
  • shipping options;
  • shipping costs;
  • listing attributes;
  • listing status.

Transaction and order data

  • Secure Payment orders;
  • payment status;
  • item price;
  • shipping costs;
  • buyer and seller fees;
  • transaction value;
  • order status;
  • checkout details;
  • buyer name;
  • buyer email;
  • buyer phone number;
  • shipping address;
  • tracking information;
  • carrier information;
  • payment timestamps;
  • payout-related information;
  • cancellation and refund status where applicable.

Verification data

Where seller verification or Secure Payment is used, users may be required to provide information to Stripe or another payment or verification provider. MyGearMarket may receive and store verification status information, such as whether charges and payouts are enabled. MyGearMarket does not store full payment card details.

MyGearMarket may also process mobile phone verification data, including verification status, verification attempts and verification timestamps. Verification codes are used for the verification process and are not retained longer than necessary for that purpose.

Communication data

  • messages sent through the platform;
  • message read status;
  • email notifications;
  • contact form submissions;
  • support requests;
  • appeals;
  • support ticket messages;
  • correspondence with MyGearMarket.

Reports, moderation and safety data

  • user reports;
  • listing reports;
  • order reports;
  • review reports;
  • moderation actions;
  • suspension status;
  • permanent restriction status;
  • appeal information;
  • admin notes;
  • fraud prevention information;
  • security-related logs;
  • transaction safety alerts;
  • transaction-limit evaluations;
  • risk-monitoring information;
  • chargeback and payment-dispute information;
  • payout hold information;
  • administrative review records.

Review data

  • ratings;
  • review text;
  • reviewed user;
  • reviewing user;
  • related order;
  • review moderation status.

Import data

  • URL import attempts;
  • imported URLs;
  • source website host;
  • import status;
  • import error information;
  • import logs;
  • CSV upload information;
  • imported listing data;
  • imported image URLs.

AI-assisted feature data

  • listing photos submitted for AI photo suggestions;
  • listing text, title, descriptions or specifications used for AI-assisted normalisation;
  • AI-generated suggestions;
  • user corrections to AI suggestions.

Technical data

  • IP address;
  • browser type;
  • device information;
  • operating system;
  • pages visited;
  • timestamps;
  • log files;
  • security logs;
  • session information;
  • cookie and local storage identifiers.

4. Purposes and legal bases

MyGearMarket processes personal data for the following purposes.

To provide the platform: account creation, authentication, listings, public profiles, search, messaging and marketplace functionality. Legal basis: performance of a contract.

To enable buying and selling: listing management, offers, counteroffers, order creation, shipping information, tracking, buyer and seller communication and order history. Legal basis: performance of a contract and legitimate interest.

To provide Secure Payment: checkout information, policy acceptance, fee calculation, payment through Stripe, order status, seller payout and limited pre-shipment cancellations or refunds where supported by the platform. Legal basis: performance of a contract, legitimate interest and legal obligation where applicable.

To support seller verification: connecting eligible sellers to Stripe Connect and recording verification status. Legal basis: performance of a contract, legitimate interest and legal obligation where applicable.

To operate verified dealer features: assigning dealer status, displaying dealer badges, enabling dealer website links and providing dealer import tools. Legal basis: performance of a contract and legitimate interest.

To process URL and CSV imports: importing listing information, processing image URLs, checking import limits, logging import attempts and preventing abuse. Legal basis: performance of a contract and legitimate interest.

To provide AI-assisted features: AI photo suggestions and AI-assisted listing normalisation. Legal basis: performance of a contract and legitimate interest. Where required by law, consent may be requested.

To provide messaging and notifications: platform messages, unread badges and email notifications for relevant platform activity. Legal basis: performance of a contract and legitimate interest.

To handle reports, moderation and appeals: reviewing reported users, listings, orders or reviews, enforcing platform rules, suspending accounts, restoring accounts and handling appeals. Legal basis: legitimate interest, performance of a contract and legal obligation where applicable.

To respond to contact requests: contact form submissions, support tickets, appeals and email correspondence. Legal basis: legitimate interest or steps prior to entering into a contract.

To maintain security and prevent fraud: monitoring suspicious activity, evaluating transaction limits and transaction eligibility, enforcing restrictions, preventing re-registration after permanent restriction, maintaining records necessary to prevent re-registration using verified contact details, monitoring payment risk, managing payout holds, processing chargeback-related information, protecting users and cooperating with payment providers where necessary. Legal basis: legitimate interest and legal obligation where applicable.

To improve the platform: bug fixing, analytics where enabled, performance monitoring, user experience improvements and service quality. Legal basis: legitimate interest or consent, depending on the technology used.

To comply with legal obligations: tax, accounting, fraud prevention, regulatory requests, dispute handling, sanctions compliance, payment compliance and legal claims. Legal basis: legal obligation and legitimate interest.

5. Sharing of personal data

MyGearMarket may share personal data with service providers and third parties where necessary for operating the platform.

These may include:

  • Supabase, for database, authentication and storage;
  • Stripe, for payment processing, Stripe Connect, seller verification, payouts, fraud prevention and compliance checks;
  • OpenAI, for AI-assisted listing and photo suggestion features;
  • Lovable, for hosting, development infrastructure, managed email and platform services;
  • Trustpilot, where the Trustpilot widget or review-related integrations are used;
  • email service providers;
  • hosting and infrastructure providers;
  • security and fraud prevention providers;
  • professional advisers;
  • payment providers, banks, card issuers and payment schemes;
  • public authorities, regulators or courts where legally required.

MyGearMarket only shares personal data where necessary and, where required, subject to appropriate contractual safeguards.

6. Stripe and payment data

Secure Payment transactions are processed through Stripe.

Stripe may process payment information, identity information, business information, compliance information, sanctions screening information, bank account information and payout information.

Stripe may act as an independent controller for certain payment-related processing. Users should review Stripe’s legal and privacy information at https://stripe.com/legal.

MyGearMarket does not store full payment card details.

7. OpenAI and AI-assisted processing

MyGearMarket may use OpenAI or similar AI providers for optional AI-assisted platform features, such as photo suggestions and listing normalisation.

Depending on the feature, data sent to an AI provider may include compressed listing photos, listing titles, descriptions, specifications or other listing-related text.

AI output may be inaccurate. Users remain responsible for reviewing and correcting AI-assisted suggestions before publishing or relying on them.

8. Public information

Some information may be publicly visible on MyGearMarket, including active listings, listing photos, listing descriptions, listing prices, listing location information, seller display name, public profile information, verified dealer badges, dealer website links, reviews, ratings and aggregate ratings.

Users should not include sensitive personal data in listings, messages, reviews, reports or public profile fields.

9. International transfers

Some service providers may process data outside the European Economic Area.

Where this happens, MyGearMarket will use appropriate safeguards where required, such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.

10. Retention periods

MyGearMarket does not keep personal data longer than necessary for the purposes described in this Privacy Policy.

Indicative retention periods:

  • account data: as long as the account exists and for a reasonable period afterwards where necessary;
  • public profile data: as long as the profile exists;
  • listing data: as long as the listing is active and for a reasonable period afterwards;
  • listings linked to orders: retained as necessary for order history, fraud prevention, disputes, legal compliance and platform integrity;
  • messages: retained as necessary for account functionality, support, fraud prevention, safety and legal purposes;
  • order and transaction data: retained as necessary for payment, accounting, tax, fraud prevention, dispute handling and legal purposes;
  • reports and moderation records: retained as necessary for platform safety, enforcement, appeals and legal compliance;
  • verified contact details associated with a permanent restriction: retained where necessary to prevent re-registration, fraud, abuse or circumvention of platform enforcement measures;
  • support tickets and appeals: retained as necessary for support, safety, legal claims and accountability;
  • import logs: retained as necessary for abuse prevention, security, troubleshooting and legal compliance;
  • technical logs: normally retained for a limited period unless needed for security, fraud prevention or legal purposes;
  • records required for legal, tax or accounting purposes: retained as long as legally required.

Some data may be retained after account closure where necessary for legal compliance, fraud prevention, order history, platform safety, reporting, dispute handling or legitimate business purposes.

11. Security

MyGearMarket takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse and alteration.

These measures may include authentication, access controls, private storage, signed URLs, server-side checks, role-based admin access, rate limits, logging and fraud-prevention measures.

However, no online platform can guarantee absolute security.

12. Admin access

Authorised admins may access account information, profile data, listings, reports, reviews, orders, support tickets, appeals, verification status and other platform data where necessary for platform operation, support, moderation, fraud prevention, legal compliance or enforcement of platform rules.

13. Your rights

You may have the following rights under privacy law:

  • right of access;
  • right to rectification;
  • right to erasure;
  • right to restriction of processing;
  • right to data portability;
  • right to object;
  • right to withdraw consent;
  • right to lodge a complaint with a supervisory authority.

In the Netherlands, the supervisory authority is the Autoriteit Persoonsgegevens.

To exercise your rights, contact: support@mygearmarket.com

Some rights may be limited where MyGearMarket needs to retain information for legal compliance, fraud prevention, security, order history, disputes, accounting, tax or legitimate platform safety purposes.

14. Children and Secure Payment

MyGearMarket is not intended for children.

Users must be at least 18 years old to use Secure Payment.

MyGearMarket does not currently carry out a general technical age verification check.

15. Automated decision-making

MyGearMarket uses certain automated systems to protect users, payment providers and the platform against fraud, abuse, payment risk and other security-related risks.

These systems may evaluate transaction eligibility, transaction limits, transaction frequency, transaction value, account verification status, payment-related risk indicators, chargeback-related information and other risk signals.

As a result, certain transactions may be automatically blocked, restricted, delayed, cancelled or referred for manual review where applicable platform rules, transaction limits, fraud-prevention controls or payment-risk controls are triggered.

MyGearMarket may also automatically place or maintain payout holds in specific circumstances, including fraud reviews, chargeback monitoring, payment-provider requirements or transaction-safety reviews.

Account suspensions, permanent restrictions, moderation decisions and similar enforcement actions may involve automated signals, but may also include human review where appropriate.

Users who have questions about an automated restriction, transaction block or payout hold may contact MyGearMarket through the available support channels.

16. Changes to this Privacy Policy

MyGearMarket may update this Privacy Policy from time to time.

The latest version will always be available on the website.