Privacy policy

Last updated: 26/08/2026

We process your personal data under the GDPR and collect only what is needed to resell a box safely.

Data we collect

Email, hashed password, optional profile photo, language and country, listings and box photos.

Account creation, box verification, buyer seller matching, fraud prevention, commission invoicing.

After account deletion, data is erased within 30 days.

Access, rectification, erasure, portability and objection.

privacy@secondbox.eu