GDPR Privacy Notice (EU / UK)
Last updated: October 22, 2026
This notice supplements our Privacy Policy for individuals in the European Economic Area, Switzerland and the United Kingdom. Controller: Elefair International Inc, New York, USA. Contact: support@elefairtech.com.
Legal bases
- Contract — operating your account, processing orders, payouts, deliveries and support.
- Legal obligation — tax, accounting, anti-fraud, KYC/AML, sanctions.
- Legitimate interests — security, fraud prevention, service improvement, B2B communications with sellers; we balance these against your rights.
- Consent — marketing emails, non-essential cookies, push notifications. Withdraw at any time.
Your rights
Access, rectification, erasure, restriction, portability, objection, and the right not to be subject to solely automated decisions with legal effect (our fraud rules flag orders for human review; they do not automatically refuse you). Use the tools in your account or email us. You may lodge a complaint with your local supervisory authority (for the UK, the ICO).
International transfers
Your data is transferred to the United States. We rely on the EU Standard Contractual Clauses (2021/914) and the UK International Data Transfer Addendum with our processors, plus supplementary measures (encryption, access controls).
Retention
As stated in the Privacy Policy; we delete or anonymise data when no longer needed for the purposes above.
Sellers as controllers
Sellers who receive buyer data to fulfil orders act as independent controllers for that data and must comply with GDPR, including using it only for the order and not for marketing without consent.
Last updated October 22, 2026