Causee Privacy Policy

Effective Date: 31 July 2026

Welcome

At Causee, we believe trust is just as important as technology. Causee exists to create positive social impact through everyday commerce, and protecting your personal information is an important part of earning and maintaining that trust.

This Privacy Policy explains what personal information we collect, how we use it, who we may share it with, and the rights and choices available to you. It applies to your use of the Causee website, mobile application and related services.

1. Who We Are

Causee is the controller of the personal information collected through the Causee marketplace.

If you have questions about this Policy or how we handle your information, please contact us using the contact details published on www.causee.com.

2. Information We Collect

We may collect:

• Account information (name, email, telephone number and login details).
• Profile information.
• Listing information, photographs and descriptions.
• Purchase, sale and transaction records.
• Messages exchanged through the platform.
• Reviews and ratings.
• Payment-related information (processed primarily by our payment providers).
• Delivery and tracking information.
• Device, browser and technical information.
• Cookie and analytics information.

3. How We Collect Information

We collect information directly from you, automatically when you use our services, and from trusted third parties including payment providers, delivery partners, fraud prevention services and our SaaS provider.

4. Why We Use Your Information

We use your information to:

• Create and manage your account.
• Operate the marketplace.
• Process purchases and sales.
• Communicate with you.
• Provide customer support.
• Detect and prevent fraud.
• Improve our products and services.
• Meet legal and regulatory obligations.
• Send marketing communications where permitted.

5. Legal Basis

We process personal information where necessary to perform our contract with you, comply with legal obligations, pursue our legitimate interests, or where you have given consent.

6. Sharing Information

We may share information with payment providers, delivery providers, our SaaS provider, cloud hosting providers, analytics providers, customer support providers, professional advisers, insurers, auditors, regulators and law enforcement where legally required.

7. International Transfers

If personal information is transferred outside the UK, we will ensure appropriate safeguards are in place in accordance with applicable data protection laws.

8. Security

We use appropriate technical and organisational measures including access controls, encryption where appropriate, monitoring and staff confidentiality obligations. However, no internet-based service can be guaranteed to be completely secure.

9. Data Retention

We retain personal information only for as long as reasonably necessary to provide our services, resolve disputes, prevent fraud, meet accounting requirements and comply with legal obligations.

10. Your Rights

Depending on applicable law, you may have the right to:

• Access your information.
• Correct inaccurate information.
• Request deletion.
• Restrict processing.
• Object to certain processing.
• Request data portability.
• Withdraw consent where consent is relied upon.
• Complain to the Information Commissioner's Office (ICO).

11. Marketing

You can opt out of marketing communications at any time by using the unsubscribe link in our emails or by updating your account preferences where available.

12. Cookies

We use cookies and similar technologies to operate and improve the Causee marketplace.

Please also read our separate Cookie Policy.

13. Children's Privacy

Causee is not intended for children unless permitted under applicable law and, where appropriate, under the supervision of a parent or legal guardian.

14. Changes to this Policy

We may update this Privacy Policy from time to time. The latest version will always be published on www.causee.com, together with the effective date.

15. Contact Us

If you have any questions about this Privacy Policy or how Causee handles your personal information, please contact us using the contact information published on www.causee.com.

We believe transparency builds trust and will always do our best to answer your questions clearly and promptly.

This Privacy Policy should be read alongside the Causee Terms & Conditions, Cookie Policy and any other policies or guidelines published by Causee from time to time on www.causee.com.

Google User Data

This section describes how we access, use, store, share, retain, and delete data obtained from Google APIs when You sign in to or connect Your Google account with our Service. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data We Access from Google

When You choose to sign in with Google, we request access to the following Google user data, limited to the OAuth scopes You authorize at sign-in:

• Your Google Account profile information, including Your name and profile picture (profile scope)
• Your Google Account email address (email scope)
• A unique Google user identifier used to associate Your Google account with Your Causee account (openid scope)

We do not access Your Gmail messages, Google Drive files, Google Calendar, Contacts, or any other Google product data unless a specific feature explicitly requests an additional scope and You grant consent at that time.

How We Use Google User Data

We use the Google user data we access solely for the following purposes:

• To create and authenticate Your Causee account
• To pre-fill Your profile (name, email, profile picture) so You do not need to re-enter it
• To allow You to sign back in to Your account on subsequent visits
• To communicate with You at the email address associated with Your Google account, in line with the "Use of Your Personal Data" section above

We do not use Google user data for advertising, we do not sell it, and we do not use it to train generalised or large-language AI/ML models. Any human access is limited to (a) security investigations, (b) complying with applicable law, or (c) where You have given us explicit consent.

How We Share Google User Data

We share Google user data only with the third-party Service Providers that are necessary to operate our Service:

• Sharetribe — our marketplace platform provider, which hosts Your account and profile information on our behalf.
• Our authentication and hosting infrastructure providers — used solely to deliver the Service to You.

We do not share Google user data with any third party for that party's independent use, advertising, or marketing. We do not sell Google user data.

How We Store and Protect Google User Data

Google user data is stored on the same secure infrastructure as the rest of Your account data, operated by our platform provider. We protect it using industry-standard measures, including:

• Encryption in transit (HTTPS/TLS) between Your device, our Service, and Google
• Encryption at rest on the systems where account data is stored
• Restricted access — only authorised personnel may access account data, and only when necessary to operate or support the Service
• OAuth access and refresh tokens are stored securely and are never exposed to other users

Data Retention and Deletion

We retain Google user data for as long as Your Causee account remains active, or as needed to comply with our legal obligations, resolve disputes, and enforce our agreements.

You may revoke our access to Your Google account at any time by visiting https://myaccount.google.com/permissions and removing Causee.

To request deletion of Your account and all associated Google user data, You can:

• Delete Your account from within the Service via Your account settings, or
• Email us at info@causee.com with the subject line "Delete my account". We will action verified deletion requests within 30 days, except where we are legally required to retain certain records.