Last updated: 1st of october 2025
Effective date: 1st of october 2025
Table of Contents
- Our role in protecting your privacy
- What data do we collect?
- How do we use your data?
- Who we share your data with
- How long do we keep your data?
- How we protect your data
- Your choices
- Your rights
- Contact us
Our role in protecting your privacy
“We” are EVER LASTING, the company that operates and markets the Ever Lasting application (hereafter, the Site).
When you use the Site (and in certain other cases mentioned below), we act as your data controller. This means we are responsible for protecting your data and ensuring it is handled in compliance with applicable laws, including the General Data Protection Regulation (GDPR).
For transparency, this policy explains: what data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and how we protect it. To keep you in control, we also outline your rights and choices.
What data do we collect?
As soon as you start interacting on Ever Lasting (signing up, using the app, contacting us), you entrust us with personal data (any information that identifies you or can be linked to you as an individual).
The categories and amount of data collected depend on how you use the Site and how you interact with us.
Data you provide
When you use the Site or otherwise interact with us, you may share, for example:
- Identification data: first and last name.
- Contact details: email address, phone number, postal address.
- Account data: username, password, verification info, account settings.
- Demographic data: language, gender, age (date of birth).
- Location data: country, city.
- Activity data: profile description and photo, ratings/reviews, uploaded media, etc.
- Listing data: information about items (name, category, features, photos).
- Communication data: messages sent and received (emails, in-app messages, support conversations), date/time, participants, attachments.
- Financial data: payment method, card info (card identifier, last four digits) and/or IBAN.
- Transactional data: history of purchases and payments, donations, item pickups, invoices, any receipts.
- Business data (if you use the Site as a Professional): company name, registration numbers, information about the legal representative.
- Ratings and survey data: survey responses, any interview recordings.
- Legal and compliance data: consent logs, exercised rights, copies of documents confirming you own your account, copies of contracts, etc.
We only collect the data necessary based on what you do on the Site (e.g., if you never subscribed, we won’t hold payment/transaction data). Most of the time you choose what to share; however, some data may be mandatory (legal requirements or needed to conclude/perform a contract).
Data we collect automatically
Some data is collected automatically when you use the Site:
- Activity data: session date/time and duration, pages viewed, search history, user journey, features used, interactions with listings/ads.
- Location data: approximate location (geolocation).
- Technical/device data: IP address, browser type, device model, operating system, screen resolution, settings, error logs, technical diagnostics, unique identifiers.
- Security data: fraud/malware detection alerts, information about account restrictions (dates, reasons), cybersecurity incident reports.
Data from other sources
We may receive data about you from:
- Other platforms: if you sign up/log in/verify your account with Google, Facebook, or Apple, we receive (according to your permissions) your name, email, and profile photo.
- Service providers and partners: e.g., payment services (transaction statuses, fraud alerts), security providers, etc.
- Other users: reviews/ratings about you, reports.
- Social networks: public interactions (comments, messages, “likes”) with our content.
- Public sources: public reviews or comments about Ever Lasting on third-party sites.
- Other sources: your representatives (exercising rights), public authorities (requests/complaints), rights holders (IP matters), companies we acquire or merge with.
How do we use your data?
1) To run the Site and provide our services
- Let you browse and use the Site.
- Create, configure, and display your account.
- Enable you to give and receive items for free.
- Process payments.
- Personalize your experience.
- Provide help and support.
2) To keep you and Ever Lasting safe
We make sure the Site remains a safe place for everyone:
- Safe use of the Site (preventing scams/abuse).
- Protecting your account.
- Securing and validating payments.
- Complying with our Terms of Use and the law.
3) To improve your experience on the Site
- Analyze and enhance the Site (usage stats, satisfaction).
- Collect and act on your feedback.
- Maintain a reliable platform that learns and improves continuously.
4) For marketing purposes
- Keep you informed about news, offers, and relevant content.
- Run promotional campaigns, contests, referral programs.
- Engage our communities on social media.
- Show more relevant advertising.
5) For legal purposes
- Comply with legal obligations (consumer law, tax, accounting, digital services, archiving, etc.).
- Protect our rights and interests (disputes, investigations, complaints).
- Ensure business continuity and growth.
Who we share your data with
We only share your data when necessary for the purposes above.
Other users (registered or not)
Your username, listings, reviews, and certain information (like your Barometer) may be visible to others.
If you join Ever Lasting with a referral code, the referrer may see that you signed up and whether you met the reward conditions.
Some data (e.g., listing photos) may be visible to non-logged-in visitors (browsing, external ads).
Think about your privacy: check your photos (face, tattoos, identifying details) and your public profile information.
Service providers and partners
We work with trusted providers (payments, customer support, cloud, security, fraud prevention, system maintenance, technical assistance, marketing, advertising, analytics, communications).
We may also share data with advisors (lawyers, notaries, auditors), banks, accountants, translators, insurers, consultants. Providers depend on your country and the features you use.
Investors/Potential acquirers
In financing or M&A processes, limited, controlled sharing may be required.
Authorities and public bodies
We share data only when there is a legal basis: statutory obligations, suspected unlawful activity, serious risks (safety, harm), establishing/exercising/defending legal claims. Before any disclosure, we carry out strict checks.
Other recipients
With your consent or where there is a clear legal basis (e.g., data portability to another company, your legal representative).
How long do we keep your data?
We keep data as long as necessary for the purposes described. Once it’s no longer needed, we delete or anonymize it.
As a rule, we keep your data while you actively use the Site, and then for up to 5 years after you stop using it.
If you deactivate your account, it is immediately closed and hidden. We retain data for 3 months (for potential reactivation and to prevent abuse).
Exceptions
- Support contacts: 2 years (general support); 3 years (privacy-related requests).
- Transactions: transaction data 6 months; subscription payment data 10 years (accounting/tax obligations).
Card data retained for fraud prevention and saved cards: up to 180 days after card expiration if the card was used for payments, otherwise until the end of the expiration month. - Temporary/permanent blocks: data necessary to maintain the block for its duration. For permanent blocks, 6 months from the block date (to allow possible appeals).
How we protect your data
We comply with strict laws (including GDPR) and implement technical and organizational security measures. Security is a shared responsibility.
Technical measures
Encrypted connections, firewalls, access controls, regular audits and security tests, physical safeguards.
Your role
Stay vigilant online: control what you share and protect your login details. If you notice anything suspicious, contact us immediately.
Your choices
You manage your data: you can limit what you share, refuse certain purposes, disable non-essential cookies, and more.
What you share
You decide what appears in your profile, listing descriptions, and comments.
Some data remains mandatory:
- Legal obligations: e.g., data collected for tax purposes, KYC/AML requirements of payment providers (ID document). Without this information, some features will not be available.
- Contract performance (our Terms of Use): without registration data you cannot create an account; if we suspect unauthorized access, we may request proof of identity (access may be temporarily limited until verification).
Your rights
Under GDPR, you have rights to access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and to lodge a complaint with a supervisory authority. Legal exceptions may apply.
To exercise a right, contact us (details below). We may ask you to confirm your identity.
Right of access
You can ask whether we hold data about you and obtain a copy (excluding information that would harm the rights/freedoms of others), plus details on purposes, recipients, retention periods, etc.
Right to rectification
You can update outdated/inaccurate/incomplete data in your Profile Settings (including your username).
Right to erasure
We delete/anonymize data that’s no longer needed. You can also request deletion. We erase data when: the purpose has ended; you withdraw consent (where consent is the legal basis); you object and we have no compelling grounds; or in other GDPR-provided cases.
If we must retain data for legitimate reasons, we will inform you.
You can deactivate your account in Settings (immediate closure and hiding).
Right to restriction
You may request temporary restriction (e.g., you contest accuracy, processing is unlawful, you need the data to establish/defend claims). During restriction, we process data (beyond storage) only with your consent, for legal claims, to protect others’ rights, or for important public interest. We’ll notify you before lifting the restriction.
Right to object
You can object where the legal basis is legitimate interest. We will stop processing unless we demonstrate compelling legitimate grounds or need the data for legal claims.
For direct marketing, processing stops immediately and without exception.
Withdrawal of consent
If processing is based on your consent, you can withdraw it at any time (without affecting the lawfulness of prior processing). We will stop the relevant purpose(s) unless another legal basis applies.
Automated decisions and profiling
You have the right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you—subject to exceptions (contract necessity, law with appropriate safeguards, your explicit consent).
We ensure you can present your point of view, request human intervention, and challenge the decision.
If a listing is hidden or an account is banned, you can appeal the decision (automated or not).
Right to complain
If you have questions or a dispute, contact us first (details below). You may then contact the data protection authority in your country of residence/work or where the issue occurred.
Contact us
For any questions about how we handle your data or to exercise your rights: contact@ever-lasting.eu
We may update this page from time to time. If we make significant changes, we’ll notify you by email or in the app. Please check back regularly so you don’t miss any updates.