Privacy Policy

Website: holidaykitmarket.com
Contact: info@holidaykitmarket.com
Effective date: 1 October 2025

This Privacy Policy explains how Holiday Kit Market (“HKM”, “we”, “us”, “our”) collects, uses, shares, and protects your personal information when you use our marketplace for festive digital and printed decorative items (the “Marketplace”).

We are committed to protecting your privacy and handling your data transparently, in accordance with the General Data Protection Regulation (GDPR), the Payment Services Directive 2 (PSD2), and Strong Customer Authentication (SCA) requirements.

1. Data We Collect

We collect the following categories of information:

• Account Information: name, email, password, contact details.

• Order Information: purchased items, shipping/billing address, customization details, transaction history.

• Payment Information: handled securely by third-party payment providers; we do not store full card details.

• Seller Information: business name, payment account, tax details, identity verification documents.

• Technical Data: IP address, browser type, device identifiers, cookies.

• Communications: messages between Customers and Sellers, support inquiries.

2. How We Use Data

We use personal data to:

• process and deliver Orders,

• manage Accounts and provide support,

• enable secure payments and payouts,

• comply with legal and regulatory requirements,

• prevent fraud and enhance security,

• send service updates and (with consent) marketing messages.

3. GDPR Rights

If you are in the EU/EEA, you have the following rights:

• Access – know what data we hold.

• Rectification – correct inaccurate information.

• Erasure (“Right to be Forgotten”) – request deletion where legally possible.

• Restriction – limit processing in certain cases.

• Portability – receive your data in a machine-readable format.

• Objection – object to certain processing (e.g., marketing).

Requests may be made to info@holidaykitmarket.com. We will respond within the timelines required by law.

4. Payments, PSD2 & SCA

• Payments are processed by regulated third-party providers in compliance with PSD2.

• For certain transactions, Strong Customer Authentication (SCA) is required by law. This may involve two-factor authentication (e.g., password + SMS code, or biometric verification).

• If you do not complete SCA when required, your payment may be declined.

5. Data Sharing

We may share your data with:

• Sellers (for Customers: order details, shipping name/address).

• Payment providers (for secure transactions and fraud prevention).

• Service providers (IT hosting, analytics, customer support).

• Authorities (where required by law, e.g., tax, anti-fraud).

Sellers are independent data controllers for the Customer data they receive.

6. International Transfers

If personal data is transferred outside the EU/EEA, we ensure it is protected by Standard Contractual Clauses (SCCs) or adequacy decisions.

7. Retention

We keep data only as long as necessary for the purposes described above or to comply with legal obligations (e.g., accounting, fraud prevention).

8. Security

We implement technical and organizational measures (encryption, access control, monitoring) to protect your personal data. However, no system is fully secure; you should keep your account credentials safe.

9. Children’s Privacy

The Marketplace is not directed to children under 18 (or the local minimum age for consent to online services). We do not knowingly collect personal data from children.

10. Complaints

You may lodge a complaint with your local Data Protection Authority if you believe your rights under GDPR have been violated.

11. Changes

We may update this Privacy Policy from time to time. We will post updates on our website with a new effective date.

12. Contact

For questions or data requests, contact us at:
info@holidaykitmarket.com