Privacy Policy

1. Who we are ABC Timber, SIA (registration no. 50203139001, Riga, Meza prospekts 28 - 2, LV-1014) is the controller of the personal data processed through ABC Timber. Contact: info@abctimber.com. 2. What we process and why - Account data: name, surname, e-mail, phone, password (stored only as a hash), language. Needed to provide your account (contract, GDPR Art. 6(1)(b)). - Content you publish: listings, company profiles, services, alerts, bookmarks and uploaded images. Needed to run the marketplace (contract). Listings and company profiles are public. - Security data: IP addresses of sign-ins, trusted locations, verification codes and activity logs. Used to protect accounts and prevent fraud (legitimate interest, Art. 6(1)(f)). - Payments: amount, status and Stripe references. Card details are handled only by Stripe (contract and accounting duties, Art. 6(1)(b) and (c)). - Support conversations: to answer your requests. - News digest e-mails: sent only while enabled. You can unsubscribe in every digest or in Settings > Notifications. 3. Who receives data Our hosting provider, Stripe (payments), our e-mail delivery provider, Google (Google sign-in and pages using maps or address tools), Cloudflare Turnstile (automated-abuse checks on sign-in and registration; it processes technical data including IP addresses and browser signals) and Sentry (error reports, without personal data by default). Providers may process data outside the EEA; contact us for information about the applicable destinations and transfer safeguards. Cloudflare privacy information: https://www.cloudflare.com/turnstile-privacy-policy/. 4. How long we keep data Account data: while your account exists. Verification-code retention after expiry (days): 1. Trusted locations: 365 days after last use. Unfinished sign-ups: 7 days. Security and admin logs: 90 days. Payment records: as long as accounting law requires, no longer linked to you after you delete your account. 5. Cookies We use first-party cookies for sign-in, security, Remember me, language and acknowledging the cookie notice. Maps and address tools connect to Google when those features load on a page, without a separate Maps permission prompt. Google receives technical data such as your IP address and may receive address searches. Google processes this data under its privacy policy: https://policies.google.com/privacy. More information about our browser storage is available at /legal/cookies. 6. Your rights You can access and download your data (Settings > Account > Download my data), correct it, delete your account (Settings > Account > Delete account), and ask us to restrict processing, object to it or port your data. You can complain to the Data State Inspectorate of Latvia (www.dvi.gov.lv).