Privacy Policy

1. Who We Are

Onlycarsmalta ("we", "us", "our") is a Malta-based online marketplace for buying and selling used vehicles. We operate the website onlycarsmalta.com.

Data Controller contact: hello@onlycarsmalta.com

2. What Data We Collect

• Account data: Your name, email address, and phone number (when provided).
• Listing data: Car details, photos, price, mileage, and description that you submit when creating a listing.
• Usage data: IP address, browser type, pages visited, and actions taken on the site (collected via Google Analytics).
• Communications: Any messages you send to us via email.
• Cookies: Session tokens and analytics cookies. See our Cookie Policy.

3. Why We Process Your Data

• Contract performance (Article 6(1)(b) GDPR): To provide you with an account and allow you to post and respond to listings.
• Legitimate interest (Article 6(1)(f) GDPR): To improve the platform, prevent fraud, and ensure site security.
• Consent (Article 6(1)(a) GDPR): For analytics cookies (Google Analytics), only after you have given consent via the cookie banner.
• Legal obligation (Article 6(1)(c) GDPR): To comply with Maltese and EU laws where required.

4. How Long We Keep Your Data

• Account data: For as long as your account is active, plus 12 months after your last login or account deletion request.
• Listing data: Active listings are kept while published. Deleted listings are removed immediately from the platform. Anonymised listing metadata may be retained for up to 2 years for market analytics.
• Analytics data: Google Analytics retains data for 26 months by default.

5. Who We Share Your Data With

We do not sell your data. We share it only with:

• Supabase Inc. — our database and authentication provider (servers in the EU and US; standard contractual clauses apply).
• OpenAI, L.L.C. — car images you upload are sent to OpenAI for AI-powered analysis only during the listing creation process. OpenAI's privacy policy applies.
• Google LLC — analytics data if you have consented to cookies. Google's privacy policy applies.
• Other users: Your listing details and phone number (if provided) are visible to all visitors. Your email is never shown publicly.

6. Your Rights Under GDPR

As an EU/EEA resident you have the right to:

• Access: Request a copy of your personal data.
• Rectification: Correct inaccurate data via your Profile page.
• Erasure: Delete your account and all associated data from your Profile page, or by emailing us.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdraw consent: Opt out of analytics cookies at any time via the cookie banner or your browser settings.

To exercise any right, email us at hello@onlycarsmalta.com. We will respond within 30 days.

7. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Information and Data Protection Commissioner (IDPC) of Malta:

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of any material changes by email. Continued use of the platform after changes constitutes acceptance.