This Privacy Policy explains how Reload People Ltd (“we,” “our”), a company headquartered in London (UK) and the owner and operator of the e-commerce platform rzxshop.com (the “Platform”), processes the personal data of users (“Users”) and sellers (“Sellers”). The goal is to ensure maximum transparency regarding the information collected, the purposes of processing, the legal bases, the entities with whom data may be shared, and the rights of data subjects.

By using the Platform, you accept this Privacy Policy, which complements and does not replace other notices or policies available on the Platform.

1. Data Controller

The Data Controller for personal data is Reload People Ltd, headquartered in London (UK). For any questions or requests regarding personal data processing, you can contact the Data Controller at: [email protected].

2. Types of Data Collected

We may collect and process the following categories of personal data:

• Registration Data: Name, surname, email address, postal address (billing/shipping), phone number (if requested), business information (company name, VAT number, business registry), and login credentials.
• Transactional and Usage Data: Details of purchases made on the Platform, amounts spent, products purchased, RZX Wallet information (balance, recharge history, credits purchased), complaints, returns, or feedback.
• Seller Data: Information necessary for eligibility verification (tax data, business registry registration), bank details for payouts, sales history, and Courier Balance data.
• Communication and Marketing Data: Preferences for newsletters and promotional communications, reviews, feedback, wishlists, and interactions via the internal messaging system.
• Technical and Navigation Data: IP address, log data, device information, cookies, and similar technologies (managed through a separate Cookie Policy).

3. Purposes and Legal Bases of Processing

We process personal data for the following purposes:

• Provision of Contractual Services: Managing User and Seller accounts, facilitating purchases, managing the RZX Wallet (recharges, credit usage), customer support, and handling complaints.
  Legal basis: Performance of a contract.
• Transaction Management and Accounting/Tax Compliance: Issuance of invoices, accounting and tax compliance, retention of transaction data as required by law.
  Legal basis: Legal obligation.
• Fraud Prevention and Security: Monitoring suspicious transactions, verifying the identity of Sellers and Users, and preventing unlawful uses.
  Legal basis: Legitimate interest and/or legal obligation (e.g., anti-money laundering laws, if applicable).
• Marketing and Promotional Communications: Sending newsletters and communications about products and offers, with the User's prior consent. Users can withdraw their consent at any time by following the instructions in the emails or contacting us.
  Legal basis: Consent.
• Service Improvement and Internal Analysis: Analyzing purchasing behavior, usage statistics to improve user experience, and commercial offerings.
  Legal basis: Legitimate interest.
• Seller Management: Verifying eligibility, setting up the store, executing payouts, and managing internal communications.
  Legal basis: Performance of a contract and legal obligations.

4. Nature of RZX Wallet Credits

The RZX Wallet allows Users to purchase credits/vouchers to be used exclusively on the Platform. These credits are non-refundable in cash except in exceptional cases (e.g., account closure). Transactions related to the RZX Wallet and associated data (recharges, balance, usage) are treated as transactional data of a commercial nature. Processing related to the RZX Wallet follows the legal basis of contract performance and related legal/accounting obligations.

5. Sharing of Data with Third Parties

Personal data may be shared with:

• Third-party Sellers: Limited to the data necessary to complete transactions and ship products.
• Payment Service Providers: For example, Stripe, for processing payments and managing RZX Wallet recharges.
• Email Marketing Providers: Such as Mailchimp, for sending newsletters, in compliance with data transfer regulations.
• Couriers and Logistics Brokers: For executing shipments and managing the Courier Balance.
• Legal and Tax Consultants, and Competent Authorities: Where necessary to fulfill legal obligations, defend our rights, prevent fraud, or manage disputes.

6. Data Transfers Abroad

The Platform is based in the UK and processes data in accordance with UK law and the GDPR, where applicable. Some providers (e.g., Stripe or Mailchimp) may process data in countries outside the European Economic Area, such as the United States. In such cases, we adopt appropriate measures to ensure an adequate level of protection, such as using Standard Contractual Clauses and complying with European Commission adequacy decisions. For more information, please refer to the privacy policies of the third-party providers listed or contact us.

7. Data Retention Period

We retain personal data only for as long as necessary to fulfill the purposes outlined above, respecting the principles of proportionality and minimization. Generally:

• Profile Data: Retained as long as the account remains active.
• Transactional and Tax Data: Retained for the period required by accounting and tax laws (typically 6–10 years).
• RZX Wallet Data: Retained as long as the account is active and thereafter as necessary to fulfill legal obligations or manage disputes.
• Marketing Data: Retained until consent is withdrawn or deletion is requested.
• Seller Data: Retained for the duration of the contractual relationship and thereafter according to legal retention requirements.

8. Data Subject Rights

Data subjects have the right to:

• Access their personal data and request a copy.
• Request the rectification of inaccurate or incomplete data.
• Request the deletion of personal data when no longer necessary or unlawfully processed.
• Restrict processing in specific circumstances.
• Object to processing for reasons related to their particular situation.
• Request data portability, where applicable.

Requests can be sent to the email address provided in the “Data Controller” section. Additionally, data subjects have the right to lodge a complaint with the relevant supervisory authority (e.g., Information Commissioner’s Office in the UK or the Data Protection Authority in their EU country of residence).

9. Data Protection

We adopt appropriate technical and organizational measures to ensure the security of personal data and prevent unauthorized access, disclosure, alteration, or destruction of data.

10. Cookies and Similar Technologies

The use of cookies and similar tools is governed by a separate Cookie Policy, available on the Platform. Users can provide or withdraw consent for non-essential cookies through the dedicated banner.

11. Updates to the Privacy Policy

This Privacy Policy may be updated periodically. In case of substantial changes, we will notify Users via notices on the Platform or email. Continued use of the Platform after the update implies acceptance of the changes.