User Privacy Notice
eBay published a reorganized Privacy Notice (taking effect 25 November 2026) alongside the current one. The AI section was trimmed: it drops the specific list of AI use cases and removes the promise to tell you when an AI system is talking to you directly, while adding explicit language that your buying/selling/viewing activity can be used to train AI. Separately, eBay widened what data is shared about the other party in a transaction (now covers failed/cancelled deals and includes your return address) and added 'comply with legal requirements' as a new reason to access your contact and payment details.
eBay drops its promise to flag direct AI interactions and cuts detail on AI use cases
The old notice promised to tell you if you were interacting directly with an AI system, and listed specific uses (listing generation, photo editing, review summaries, fraud checks, etc.). The new notice removes that promise and replaces the specific list with a single vague example, giving you less visibility into when and how AI touches your account.
“If we use any AI system that interacts directly with you, we will let you know.”
OTHER
Your buying, selling, and browsing activity can now be used to train eBay's AI
eBay now explicitly states that data about items you list, sell, view, or buy may be used to train its AI models, for example to improve recommendations, when it decides this is necessary.
“such as information about your use of our Services, including the items you list, sell, view, or buy, where we determine it is necessary and proportionate for a specific use”
What you can do — Object to this use of your data through eBay's AI preferences page at accountsettings.ebay.co.uk/ai-preferences
DATA COLLECTION
More of your personal data is shared with the other party, even if the deal falls through
eBay will now hand over the other user's personal data, including your return address, not just after a completed transaction but also when it's cancelled, fails, or is later invalidated. This widens the circumstances and the type of data shared about you with strangers you transacted with.
“When you complete a transaction with another user (or a transaction has been cancelled, failed, or subsequently invalidated), we will provide you with the other user's personal data (such as name, username, (alias) email address, contact information, delivery and billing information, or return address).”
DATA SHARING
"Legal compliance" added as a new reason other users can access your info
eBay added a broader justification — complying with legal requirements — for letting transaction partners access your contact and payment details, beyond just finishing the sale.
“as necessary to facilitate your transactions, collect payments, and comply with legal requirements”
DATA SHARING
Seller business details may be publicly displayed where law requires
eBay added a disclosure that in some regions it may be legally required to publicly show a seller's name, business address, phone number, or other seller details. This mainly affects sellers, not buyers.
“applicable law may require us to display or otherwise make available certain seller or trader information, such as a seller's name, business address, telephone number or other legally required seller details”
DATA SHARING
| 1 | ### Your choices regarding cookies and similar technologies | |
| 2 | ||
| 3 | Please see our [User Cookie Notice](https://www.ebay.co.uk/help/policies/member-behaviour-policies/user-cookie-notice) for more information and your choices with respect to cookies and similar technologies, or go directly to [Advertising and related preferences - opens in new window or tab](https://www.ebay.co.uk/gdpr) (users in the EEA, Switzerland and the United Kingdom) or [AdChoice - eBay Advertising Preferences - opens in new window or tab](https://www.ebay.co.uk/adchoice) (all users) to manage your preferences. | |
| 4 | ||
| 5 | You are also free to disable the use of cookies and similar technologies if this is supported by your device. You can manage your cookie settings in your browser or device settings. | |
| 6 | ||
| 7 | If you decide not to allow third parties to process your personal data for advertising purposes via cookies (and similar technologies), this does not mean that we will not show you advertisements. It simply means that these advertisements will not be personalised for you using cookies or similar technologies. | |
| 8 | ||
| 9 | ## 8\. Data security | |
| 10 | ||
| 11 | We protect your personal data through technical and organisational security measures to minimise risks associated with data loss, misuse, unauthorised access and unauthorised disclosure and alteration. To this end we use network security services and data encryption, for example, as well as physical access restrictions for our data centres and logical access controls for data and systems access. You can find further information on our data security in our [Security Centre - opens in new window or tab](https://pages.ebay.com/securitycenter/index.html). | |
| 12 | ||
| 13 | ## 9\. eBay and AI | |
| 14 | ||
| 15 | We are committed to developing and using AI responsibly. Some of our tools, products, and features are powered by AI, delivered through our own AI models, third-party AI models, or both. | |
| 16 | ||
| 17 | ### AI-powered tools, products, and features | |
| 18 | ||
| 19 | When you use an AI-powered tool, product, or feature, the information you provide or that relates to your activity on eBay may be used as context to deliver that feature or generate a response, recommendation, summary, classification, or other output. For example, if you use a customer support chatbot regarding an issue with a transaction, an AI tool analyses your input and the relevant transaction to provide you with a relevant response. Using your information this way to provide an AI-powered feature is generally different from using it to train an AI model. Processing of personal data in these instances is done for the purposes and on the legal bases described in [section 3](). | |
| 20 | ||
| 21 | ### AI model training | |
| 22 | ||
| 23 | When training, testing, and improving generative AI models, we rely primarily on publicly available data. Some public datasets may incidentally include personal data, and in some cases we may also use certain user personal data, such as information about your use of our Services, including the items you list, sell, view, or buy, where we determine it is necessary and proportionate for a specific use (for example, to train AI models that improve product recommendations). Prior to training, we take steps to mitigate potential privacy impacts, such as de-identifying the data or applying other privacy-preserving techniques. In some jurisdictions, the data used for training as described in this section is not considered personal data; where our AI training does involve personal data as defined under applicable law, including in the European Economic Area (EEA), Switzerland, and the United Kingdom, the legal basis of our legitimate interest is set out in section 3.4. | |
± CHANGEDAI training now explicitly covers your buying and selling activity eBay now specifically says it may use data about items you list, sell, view, or buy to train its AI models, for example to improve product recommendations, and mentions removing identifying details from that data before training. | ||
| 24 | ||
| 25 | See [section 6]() for more details on your rights. To learn more about specific training use cases and our processing of your personal data for generative AI training purposes, including [the right to object \- opens in new window or tab](https://accountsettings.ebay.co.uk/ai-preferences) to such processing for certain users, visit our [Artificial Intelligence at eBay](https://www.ebay.co.uk/help/policies/member-behavior-policies/artificial-intelligence-at-ebay) page. | |
| 26 | ||
| 27 | ## 10\. Other important information regarding data protection | |
| 28 | ||
| 29 | This section contains important additional information about the protection of personal data in connection with the use of our Services, including whether you are required to provide personal data. | |
| 30 | ||
| 31 | ### Learn more about section 10 | |
| 32 | ||
| 1 | 33 | ### What happens when you share your personal data on our sites or applications? |
| 2 | 34 | |
| 35 | Other users have access to the information you share on eBay or disclose to other users. For example, other users can see your bids, purchases, items for sale, saved interests, sellers and searches, shopfronts, feedback, ratings, product reviews and associated comments. Other users can also see any information you choose to share in your profile.In some regions, applicable law may require us to display or otherwise make available certain seller or trader information, such as a seller's name, business address, telephone number or other legally required seller details. | |
+ ADDEDNew disclosure about legally required seller information eBay added a note that in some regions, the law may require it to publicly show certain seller or trader details, such as a business name, address, or phone number. | ||
| 36 | ||
| 37 | When you use our Services, your public username may be displayed and available to the public and associated with all of your public eBay activity. Notices sent to other users about suspicious activity and notice violations on our sites may refer to your public username and specific items. Accordingly, if you use a username that allows others to identify you, these others may be able to identify your eBay activities. | |
| 38 | ||
| 39 | To help protect your personal data, we allow only limited access to other users' contact, delivery and financial information as necessary to facilitate your transactions, collect payments, and comply with legal requirements. However, when users are involved in a transaction, they have access to each other's name, username, (alias) email address and other contact and delivery information. For example, we may allow users to exchange telephone numbers in order to contact each other prior to completing a transaction (e.g. a seller may opt to share their telephone number with a buyer so that the buyer may call with questions about a listed item). In this case, sellers are prohibited from using a buyer's telephone number for other purposes (e.g. completing a transaction off eBay or adding the buyer to a marketing list). | |
± CHANGED"Comply with legal requirements" added as a reason to access your contact and payment info eBay limits how much of your contact, delivery, and payment information other users can see. The new notice adds a new justification for giving access to this data: complying with legal requirements, on top of completing transactions and collecting payments. | ||
| 40 | ||
| 41 | ### Use of our Services through third-party applications | |
| 42 | ||
| 43 | If you use our Services from within a third-party application, that application may also collect your data in accordance with their separate privacy policies. When accessing our Services from a web browser within a third-party application (e.g. Facebook's in-app browser), you should also review that application's privacy policy for information about the application's processing of your personal data. | |
| 44 | ||
| 45 | ### Your responsibilities over transactional information you receive through eBay | |
| 46 | ||
| 47 | When you complete a transaction with another user (or a transaction has been cancelled, failed, or subsequently invalidated), we will provide you with the other user's personal data (such as name, username, (alias) email address, contact information, delivery and billing information, or return address). Independent from us, you are the controller of such data and responsible for any processing that you perform after we have shared this data with you, including compliance with any limitations imposed by this User Privacy Notice and our [User Agreement](https://www.ebay.co.uk/help/policies/member-behavior-policies/user-agreement). | |
± CHANGEDData shared about the other party in a deal now covers failed and cancelled transactions, and adds your return address Before, eBay only shared a buyer's or seller's contact details with you after a completed transaction. Now it also shares this information when a deal is cancelled, fails, or is later invalidated, and the list of shared data now includes the return address. | ||
| 48 | ||
| 49 | Unless you act for purely personal purposes, we recommend that you explain your data processing activities in your own privacy notice and protect the privacy of other users. As a seller, you must in any case comply with the applicable data protection laws and in particular protect the rights of other users as data subjects, e.g. give them the opportunity to access the personal data collected by you and demand that it be erased. | |
| 50 | ||
| 51 | You may only use the personal data that you have access to for eBay transaction-related purposes, or for other Services offered through eBay (such as delivery, fraud complaints, and member-to-member communications), and for purposes expressly consented by the user to whom the data relates. Using personal data of other users that you have access to for any other purpose, such as adding them to a mailing list without their express consent, constitutes a violation of our [User Agreement](https://www.ebay.co.uk/help/policies/member-behavior-policies/user-agreement). | |
| 52 | ||
| 53 | ### Personal data relating to third parties | |
| 54 | ||
| 55 | If you provide us with personal data relating to another person, you must obtain the consent of this person or the disclosure of the data to us must be otherwise legally permissible. You must inform the other person of how we process personal data in accordance with our User Privacy Notice. | |
| 56 | ||
| 57 | ### Filtering and safety review of messages and other content sent via our tools | |
| 58 | ||
| 59 | All messages sent via our messaging tools (including chat messages and emails sent to eBay alias email addresses) are first received by us and then forwarded to the recipient. We use automated systems and, where appropriate, human review to detect, prevent, and address content and behavior that may violate our User Agreement, policies, or applicable law. This may also apply to messages, listings, images, videos, livestreams, comments, reactions, transcripts, captions, reports, and other user-generated content shared through our Services. In the event of a violation of our [User Agreement](https://www.ebay.co.uk/help/policies/member-behavior-policies/user-agreement) (including any of our [rules and policies](https://www.ebay.co.uk/help/policies/default/ebay-rules-policies)), we reserve the right to block the transmission of the message, remove or restrict access to other content, restrict the purchase and sales functions of your eBay account, or otherwise enforce our policies. | |
| 60 | ||
| 61 | To protect our users, our Services, and our legitimate business interests, we may limit the level of detail we provide about our detection, moderation, and enforcement systems, including where disclosure could enable circumvention, undermine the effectiveness of our safeguards, or expose trade secrets or security-sensitive information. | |
| 62 | ||
| 63 | This is to protect our legitimate interests such as protecting against fraudulent or suspicious activities (e.g. spam, viruses, phishing, or other illegal activities) or enforcing our [User Agreement](https://www.ebay.co.uk/help/policies/member-behavior-policies/user-agreement) and our other [rules and policies](https://www.ebay.co.uk/help/policies/default/ebay-rules-policies) (e.g. illegal and other prohibited content), including but not limited to enforcing the [prohibition of purchases and sales outside of eBay](https://www.ebay.co.uk/help/policies/payment-policies/offers-buy-sell-outside-ebay-policy). | |
| 64 | ||
| 65 | ### Are you obliged to provide your personal data to us? | |
| 66 | ||
| 67 | Some of the personal data that you provide to us (e.g. data by which we can identify you) are required to enter into the User Agreement and the [Payments Terms of Use - opens in new window or tab](https://pages.ebay.co.uk/payment/2.0/terms.html) and/or to comply with legal obligations. For example, under the [Payments Terms of Use - opens in new window or tab](https://pages.ebay.co.uk/payment/2.0/terms.html) you must provide us with certain identification information including legal name, date of birth, and tax identification number or social security number so that we may fulfil our legal "Know Your Customer" (KYC) obligations. As described in our User Privacy Notice and in the [Payments Terms of Use - opens in new window or tab](https://pages.ebay.co.uk/payment/2.0/terms.html), we may share this data with other eBay Affiliates in order to facilitate transactions and with service providers, including payment processors, credit agencies and bureaus. Although the provision of any other personal data (e.g. address and delivery data) is voluntary, it may be necessary for the use of our Services, such as bidding, purchase and sales data to complete a transaction. | |
| 68 | ||
| 69 | ### Children's privacy | |
| 70 | ||
| 71 | Our services are not intended for the use by children. We do not knowingly collect personal data from users who are considered children under applicable national laws. Under our User Agreement, children are not permitted to use our Services. | |
| 72 | ||
| 73 | ### Staying signed in | |
| 74 | ||
| 75 | When you sign into your account on our Services, we give you the option to stay signed into your account for a certain amount of time. If you are using a public or shared computer, we encourage you to decline. You or any other user of the computer/browser you signed in on will be able to view and access most parts of your account and take certain specific actions during this signed in period without any further authorisation. The specific actions and account activities that you or any other user of this computer/browser may take include: | |
| 76 | ||
| 77 | - Bid, buy or make an offer on an item | |
| 78 | - Check out or add items to your cart | |
| 79 | - Purchase an item with PayPal using Faster Checkout (if enabled in your account) | |
| 80 | - View the activity header | |
| 81 | - View the My eBay page | |
| 82 | - View or edit the Watchlist or order details | |
| 83 | - View the profile page | |
| 84 | - Send member-to-member messages | |
| 85 | - Conduct after-sale activities, like leaving feedback, cancelling orders, requesting returns or submitting claims | |
| 86 | ||
| 87 | If you attempt to change your password or username, update any other account information or attempt other account activity beyond those listed above, you may be required to enter your password. | |
| 88 | ||
| 89 | You can typically end your signed in session by either signing out and/or clearing your cookies. If you have certain browser privacy settings enabled, simply closing your browser may also end your signed in session. If you are using a public or shared computer, you should sign out and/or clear your cookies when you are done using our Services to protect your account and your personal data. | |
| 90 | ||
| 91 | ### Blockchain and controllership | |
| 92 | ||
| 93 | Certain features in our marketplace may enable tokens, smart contracts and/or other digital assets (e.g. immutable tokens for eBay Authenticity Certificates) to be deployed to a public blockchain with your separate agreement to certain terms and conditions. Please note that notwithstanding other provisions in this User Privacy Notice addressing data controllership, the blockchain is an inherently public and decentralised infrastructure that cannot be controlled by any one person or group and is therefore outside of our ability to control. For example, details of blockchain-based transactions are immutable and cannot be deleted by any one person or group. | |
| 94 | ||
| 95 | To the extent that certain Services involve personal data processed on eBay websites or applications such as through account or wallet registration, customer service interactions or marketing activities, one of the eBay Affiliates is responsible for the processing of your personal data depending on the region in which you reside (see section [11]()). Such eBay Affiliate is also the controller for its independent activities involving your personal data on the blockchain to verify and manage risk involving digital wallets or to enable features for brands, collectors, sellers, traders or such eBay Affiliate for user engagement or marketing purposes. By contrast, neither eBay Inc. nor an eBay Affiliate is the controller for activities you choose to conduct via the blockchain, publicly visible digital wallets or other decentralised networks (e.g. which allow you to engage in transactions on public blockchains and which inherently involve personal data placed on the public blockchain ledger). In addition, we may engage third-party partners who may act as independent data controllers to assist to facilitate transactions you request, and your interactions with that third-party partner as an independent data controller are governed by the applicable terms of service and privacy policy of that third party. | |
| 96 | ||
| 97 | ## 11\. Controllers, data protection officers and privacy contacts | |
| 98 | ||
| 99 | ### 11.1 Controllers | |
| 100 | ||
| 101 | Which eBay Affiliate is responsible for the collection and processing of your personal data in connection with the provision of the Services depends on how you use our Services. | |
| 102 | ||
| 103 | ### 11.2 Use of services (except payment services for sellers) | |
| 104 | ||
| 105 | Depending on the region in which you reside, one of the following eBay Affiliates is responsible for the collection and processing of your personal data in connection with the provision of our Services (except payment services for sellers). Your region of residence is determined based on your account registration address (where available) or your location (in all other cases): | |
| 106 | ||
| 107 | - **USA**: eBay Inc., 2025 Hamilton Avenue, San Jose, CA 95125, USA | |
| 108 | - **Canada**: eBay Canada Limited, 155 Queens Quay East, 6th floor, Toronto, Ontario, M5A 0W4, Canada | |
| 109 | - **EU**: eBay GmbH, Albert-Einstein-Ring 26, 14532 Kleinmachnow, Germany | |
| 110 | - **United Kingdom**: eBay (UK) Limited, 1 More London Place, London, SE1 2AF, United Kingdom | |
| 111 | - **India**: eBay Singapore Services Private Limited, 1 Raffles Quay, #18- 00, Singapore 048583 | |
| 112 | - **For all other countries**: eBay Marketplaces GmbH, Helvetiastrasse 15/17, 3005 Bern, Switzerland | |
| 113 | ||
| 114 | ### 11.3 Use of payment services for sellers | |
| 115 | ||
| 116 | Depending on the region in which you reside or where your payments are processed, the following eBay Affiliates are responsible for the collection and processing of your personal data in connection with the provision of our payment services to you as a seller: | |
| 117 | ||
| 118 | - **USA**: eBay Commerce Inc., 2065 Hamilton Ave., San Jose, CA 95125, USA | |
| 119 | - **EEA/CH**: eBay S.à r.l., 22-24 Boulevard Royal, L-2449 Luxembourg | |
| 120 | - **UK:** eBay Commerce UK Ltd., 1 More London Place, London SE1 2AF, United Kingdom | |
| 121 | - **Canada:** eBay Commerce Canada Limited, 44 Chipman Hill, Suite 1000, Saint John NB E2L 2A9, Canada | |
| 122 | - **Australia:** eBay Commerce Australia Pty. Ltd., Level 18, 1 York Street, Sydney NSW 2000, Australia | |
| 123 | - **For all other countries:** eBay Commerce Inc., 2065 Hamilton Ave., San Jose, CA 95125, USA | |
| 124 | ||
| 125 | As described in our [Payments Terms of Use - opens in new window or tab](https://pages.ebay.co.uk/payment/2.0/terms.html), your personal data may be processed by one or more of these entities depending on your location and the eBay website on which a user completes a transaction with you. | |
| 126 | ||
| 127 | ### 11.4 Data protection officers and privacy contacts | |
| 128 | ||
| 129 | We have appointed data protection officers in several countries to oversee the protection of your personal data. You will find the contact details of your data protection officer in the [list of our data protection officers - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/privacy-notice/data-protection-officer-contacts/) as well as further information on the [Privacy Contact page - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/privacy-contact/) in our [eBay Privacy Centre - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/). | |
| 130 | ||
| 131 | If you have any questions or complaints regarding this User Privacy Notice, our global data protection principles or our handling of personal data, you can contact the eBay Privacy Team or the controller who is responsible for the processing of your personal data at any time. This applies regardless of whether we have appointed a data protection officer in your country. You can find all necessary information and [contact details - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/privacy-contact/) in our [eBay Privacy Centre - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/). | |
| 132 | ||
| 133 | ## 12\. Regional and State Privacy Disclosures | |
| 134 | ||
| 135 | For additional regional disclosures for residents of certain U.S. states, including California, please review our [State Privacy Disclosures - opens in new window or tab](https://www.ebayinc.com/state-privacy-disclosures/) page. For U.S. sellers (including those in California, Nevada, North Dakota, and Vermont), please follow the link to eBay Commerce Inc.'s [U.S. Consumer Privacy Notice - opens in new window or tab](https://pages.ebay.com/payments/member-behaviour-policies/paymentsprivacy). For additional disclosures for specific regions or countries, including Brazil, mainland of People's Republic of China, and the United Kingdom, please review our [Regional Privacy Disclosures - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/privacy-notice/regional-privacy-disclosures/) page. | |
| 136 | ||
| 137 | ## Previous User Privacy Notice | |
| 138 | ||
| 139 | ### Previous User Privacy Notice (effective from 21 April 2025 to 25 November 2026) | |
± CHANGEDNew privacy notice format, taking effect Nov 25, 2026 eBay rewrote and reorganized its privacy notice. The version shown now will take effect on November 25, 2026. Until then, the older notice (dated April 2025) still applies and is included in full below for comparison. | ||
| 140 | ||
| 141 | ## 1\. Scope and updates of this User Privacy Notice | |
| 142 | ||
| 143 | This User Privacy Notice applies to your use of this website and all eBay applications, services (including payment services), products and tools (collectively the "Services") provided by eBay Inc. or its affiliates (eBay Inc. and the companies it directly or indirectly controls are referred to as "eBay Affiliates"). This User Privacy Notice applies regardless of how you access or use these Services, including access via mobile devices and apps. For additional regional and state disclosures, please see section [13\. Regional and State Privacy Disclosures]() below. | |
| 144 | ||
| 145 | ### Learn more about section 1 | |
| 146 | ||
| 147 | This User Privacy Notice also applies if reference is made to it via a link or in a similar manner, e.g. on websites of partners on which Services from eBay are offered. | |
| 148 | ||
| 149 | We may change this User Privacy Notice at any time by posting the revised User Privacy Notice on this website and indicating the effective date of the revised User Privacy Notice. As a registered user, you will be notified of any material changes to this User Privacy Notice via My Messages in My eBay and/or by email. | |
| 150 | ||
| 151 | ## 2\. Controller | |
| 152 | ||
| 153 | Which eBay Affiliate is responsible for the collection and processing of your personal data in connection with the provision of the Services depends on how you use our Services. | |
| 154 | ||
| 155 | ### 2.1 Use of the Services (except payment services for sellers) | |
| 156 | ||
| 157 | Depending on the region in which you reside, one of the following eBay Affiliates is responsible for the collection and processing of your personal data in connection with the provision of our Services (except payment services for sellers). Your region of residence is determined based on your account registration address (where available) or your location (in all other cases): | |
| 158 | ||
| 159 | - **USA**: eBay Inc., 2025 Hamilton Avenue, San Jose, CA 95125, USA | |
| 160 | - **Canada**: eBay Canada Limited, 155 Queens Quay East, 6th floor, Toronto ON M5A 0W4, Canada | |
| 161 | - **EU**: eBay GmbH, Albert-Einstein-Ring 26, 14532 Kleinmachnow, Germany | |
| 162 | - **United Kingdom**: eBay (UK) Limited, 1 More London Place, London, SE1 2AF, United Kingdom | |
| 163 | - **India**: eBay Singapore Services Private Limited, 1 Raffles Quay, #18- 00, Singapore 048583 | |
| 164 | - **For all other countries**: eBay Marketplaces GmbH, Helvetiastrasse 15/17, 3005 Bern, Switzerland | |
| 165 | ||
| 166 | ### 2.2 Use of the payment services for sellers | |
| 167 | ||
| 168 | Depending on the region in which you reside or where your payments are processed, the following eBay Affiliates are responsible for the collection and processing of your personal data in connection with the provision of our payment services to you as a seller: | |
| 169 | ||
| 170 | - **USA**: eBay Commerce Inc., 2065 Hamilton Ave., San Jose, CA 95125, USA | |
| 171 | - **EEA/CH**: eBay S.à r.l., 22-24 Boulevard Royal, L-2449 Luxembourg | |
| 172 | - **UK:** eBay Commerce UK Ltd., 1 More London Place, London SE1 2AF, United Kingdom | |
| 173 | - **Canada:** eBay Commerce Canada Limited, 44 Chipman Hill, Suite 1000, Saint John NB E2L 2A9, Canada | |
| 174 | - **Australia:** eBay Commerce Australia Pty. Ltd., Level 18, 1 York Street, Sydney NSW 2000, Australia | |
| 175 | - **For all other countries:** eBay Commerce Inc., 2065 Hamilton Ave., San Jose, CA 95125, USA | |
| 176 | ||
| 177 | As described in our [Payments Terms of Use - opens in new window or tab](https://pages.ebay.co.uk/payment/2.0/terms.html), your personal data may be processed by one or more of these entities depending on your location and the eBay website on which a user completes a transaction with you. | |
| 178 | ||
| 179 | ## 3\. Data protection officer and contact | |
| 180 | ||
| 181 | We have appointed data protection officers in several countries to oversee the protection of your personal data. You will find the contact details of your data protection officer in the [list of our data protection officers - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/privacy-notice/data-protection-officer-contacts/) as well as further information on the [Privacy Contact page - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/privacy-contact/) in our [eBay Privacy Centre - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/). | |
| 182 | ||
| 183 | Furthermore, if you have any questions or complaints regarding this User Privacy Notice, our global data protection principles (see section **6.1 Data transfers to eBay Affiliates** under section [6\. Cross-border data transfers]() below) or our handling of personal data, you can contact the eBay Privacy Team or the controller who is responsible for the processing of your personal data at any time (for further information, see section [2\. Controller]() above). This applies regardless of whether we have appointed a data protection officer in your country. You can find all necessary information and [contact details - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/privacy-contact/) in our [eBay Privacy Centre - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/). | |
| 184 | ||
| 185 | ## 4\. What personal data we collect and process | |
| 186 | ||
| 187 | We collect your personal data when you use our Services, create a new eBay account, provide us with information via a web form, add or update information in your eBay account, participate in online community discussions or otherwise interact with us. We also collect personal data from other sources (such as other eBay Affiliates, credit agencies or bureaus, and data providers). | |
| 188 | ||
| 189 | ### Learn more about section 4 | |
| 190 | ||
| 191 | In total, we collect the following personal data: | |
| 192 | ||
| 193 | ### 4.1 Personal data you provide when using our Services or creating an eBay account | |
| 194 | ||
| 195 | - Data that identifies you, such as your name, address, telephone numbers, email addresses, username or tax identification number that you provide when setting up your eBay account or at a later date. | |
| 196 | - If you use our Services as a seller, additional identification data, such as, government-issued ID (e.g. social security number), date of birth, tax identification numbers (such as VAT identification number), business registration numbers, identification documents and information contained on IDs, selfie photos, and other information (such as bank account number) that you provide when using our payment and other services as a seller. | |
| 197 | - Data regarding bids, purchases, or sales that you provide in a transaction. | |
| 198 | - Content that you share with other users through our messaging tools (see **Filtering of messages sent via our messaging tools** under section [11\. Other important information regarding data protection]() for more information). | |
| 199 | - Financial information (e.g. credit card and account numbers, transaction details, and form of payment). | |
| 200 | - Delivery, billing, and other information you provide, as well as information required for customs clearance (such as tax identification numbers or other identification numbers) and relevant delivery information (such as shipment numbers and tracking information) if sent through one of our programmes. | |
| 201 | - In some cases: age, gender, country of birth, nationality, country of residence, employment status, family status, interests and preferences. | |
| 202 | - When you submit a report to eBay: Data that identifies you, such as your name and email address, and additional information that you provide with your report. | |
| 203 | - You may provide us with additional information through a web form or by updating or adding information to your eBay account, by participating in community discussions, member chats, surveys, enquiries, dispute resolution, customer service calls recorded with your consent, or if you contact us for any other reason regarding our Services. | |
| 204 | - Other data that we are required or entitled by applicable law to collect and process and that we need for your authentication or identification, or for the verification of the data we collect. | |
| 205 | ||
| 206 | ### 4.2 Personal data we collect automatically when you use our Services or create an eBay account | |
| 207 | ||
| 208 | - Data that is generated as part of one of your transactions (e.g. as relating to bids, purchases, sales, fees) or that is linked to your eBay account as a result of a transaction in which you are involved, such as transaction amounts, time and location of transactions and form of payment or payout method. | |
| 209 | - Data that is generated through your other actions when you use our Services and which is linked to your eBay account (e.g. eBay account numbers, your currency preference, when you place items in your shopping cart, place items on the watchlist, request an eBay Authenticity Certificate, save sellers, searches or interests, follow users, or seek to use the services of third-party partners for payments or otherwise). | |
| 210 | - Data regarding all other interactions with our Services, your advertising preferences, and your communications with us. | |
| 211 | - Location data, including your general location data (e.g. IP address) and, with your permission, the precise location data of your mobile device. Please note that for most mobile devices, you can manage or disable the use of precise location services for all applications in the settings menu of your mobile device. | |
| 212 | - Certain metadata recording the settings of your camera included in images of items you upload for sale. | |
| 213 | - Computer and connection information, such as statistics regarding your use of our Services, information on data traffic to and from websites, referral URL, information on advertisements, your IP address, your access times including accessed pages within our Services, your language settings and your weblog information. | |
| 214 | ||
| 215 | ### 4.3 Personal data we collect in connection with the use of cookies and similar technologies | |
| 216 | ||
| 217 | - Data about the pages you visit, the access time, frequency and duration of visits, the links on which you click and other actions you take as part of your use of our Services and in advertising and email content. | |
| 218 | - Data about your activities and interactions with our advertising partners including data about the advertisements you were shown, how often they were shown, when and where they were shown, and whether you took any action, such as clicking on an advertisement or making a purchase. | |
| 219 | - The user segment or category into which you as a user fall, for example: female, 20-49 years old, interested in sneakers. | |
| 220 | - Model or device type, operating system and version, browser type and settings, device ID or individual device identifier, advertisement ID, individual device token, and cookie-related data (e.g. cookie ID). | |
| 221 | - The IP address from which your device accesses our Services. | |
| 222 | - Location data, including your general location data (e.g. IP address) and, with your permission, the precise location data of your mobile device. Please note that most mobile devices allow you to manage or disable the use of precise location services for all applications in the settings menu. | |
| 223 | ||
| 224 | For more information about our use of these technologies and your choices, see section [9\. Cookies & similar technologies](). | |
| 225 | ||
| 226 | ### 4.4 Personal data from other sources | |
| 227 | ||
| 228 | We also collect personal data about you from other sources and from third parties to the extent permitted by applicable law. In particular, this includes the following data: | |
| 229 | ||
| 230 | - Data from public sources (e.g. public sanctions lists) or that is publicly available online. | |
| 231 | - Data from credit agencies or bureaus (e.g. credit reports/checks, identity confirmation, data for risk modelling and setting of credit limits). For additional regional and state-specific information, please see section [13\. Regional and State Privacy Disclosures]() below. | |
| 232 | - Data from data providers (e.g. "Know Your Customer"/identity verification, demographic, interest-based and online advertising related data). | |
| 233 | - With regard to our payment services for sellers: data from government or other sources concerning any previous convictions of the respective seller. | |
| 234 | ||
| 235 | We combine or connect the personal data we collect from you with data from these other sources. Where personal data is disclosed to us by third parties, we take steps to ensure that these third parties are legally permitted to disclose your personal data to us. We also receive access to personal data about you from eBay Affiliates. | |
| 236 | ||
| 237 | ### 4.5 Social network data you share with us | |
| 238 | ||
| 239 | - We allow you to use providers of single sign-on services (such as Google, Facebook, or Apple) with whom you already have an account to create an eBay account or to link your eBay account to such single sign-on services. You can determine the personal data that we can access when authorising the connection with the single sign-on service. | |
| 240 | - We allow you to share personal data with social networks (such as Facebook) or to link your eBay account to a social network. These social networks may automatically provide us with access to certain personal data they have stored about you (e.g. content you have viewed or enjoyed, information about the advertisements you have been shown or clicked on, etc.). You can determine the personal data that we can access through the privacy settings of each social network. | |
| 241 | - We may also use plug-ins or other technologies from various social networks. If you click on a link displayed through a social network plug-in, you voluntarily connect to that social network. | |
| 242 | ||
| 243 | ## 5\. Purposes and legal bases for data processing and categories of recipients | |
| 244 | ||
| 245 | We process your personal data for various purposes and based on several different legal bases that allow this processing. For example, we process your personal data to provide and improve our Services, to provide you with a personalised user experience on this website, to contact you about your eBay account and our Services, to provide customer service, to provide you with personalised advertising and marketing communications, and to detect, prevent, mitigate and investigate fraudulent or illegal activity. We also share your information with third parties, including service providers acting on our behalf, for these purposes. In addition, we may share your personal data among eBay Affiliates in order to fulfil our contract with you under the [User Agreement](https://www.ebay.co.uk/help/policies/member-behavior-policies/user-agreement) and, if applicable, the [Payments Terms of Use - opens in new window or tab](https://pages.ebay.co.uk/payment/2.0/terms.html). | |
| 246 | ||
| 247 | ### Learn more about section 5 | |
| 248 | ||
| 249 | Below you will find a summary of the purposes for which we process your personal data, including the categories of recipients to whom we transmit personal data for the purposes stated, sorted by our legal basis for this processing: | |
| 250 | ||
| 251 | ### 5.1 We process your personal data in order to fulfil our contract with you and to provide you with our Services as well as for the execution of the transaction between seller and buyer. This includes the following purposes: | |
| 252 | ||
| 253 | - Processing of data relating to you for the purpose of entering into a contract with you and executing it. | |
| 254 | - Provision of our Services, including but not limited to enabling and performing transactions with other users (including the display and transmission of your personal data to other users where necessary to perform the transaction, including in cases of terminated, failed or subsequently voided transactions, e.g. by sharing your return address so a buyer may return an item), displaying your transaction and feedback history to you, providing and enhancing features such as payment processing, ratings, authentication services and eBay account management, providing other services you may use (as described in connection with such services), and ensuring the functionality of our Services. In connection with the provision of our Services, we will send you notifications relating to the execution of transactions and the use of our Services in accordance with the communication preferences in your eBay account. | |
| 255 | - Enabling the delivery of purchased items by logistics/delivery service providers including notifications in connection with the delivery (such as tracking information), the latter to the extent permitted by applicable law without your consent. | |
| 256 | - Provision of our payment services in accordance with the [Payments Terms of Use - opens in new window or tab](https://pages.ebay.co.uk/payment/2.0/terms.html). | |
| 257 | - Providing general customer support including the solution of problems with your eBay account, arbitration of disputes, providing other services within the scope of customer service as well as enforcement of fee claims. For these purposes, we may contact you via notification in My eBay, email, telephone, SMS, push notification on your mobile device or by mail. If we contact you by telephone, in order to ensure efficiency, we may use automatically dialled calls with tape announcements or automated text messages in accordance with our [User Agreement](https://www.ebay.co.uk/help/policies/member-behavior-policies/user-agreement) and [Payments Terms of Use - opens in new window or tab](https://pages.ebay.co.uk/payment/2.0/terms.html), to the extent permitted by applicable law. | |
| 258 | - Processing of general location data (such as IP address or postal code) in order to provide you with location-based services (such as radius search and other content that is personalised on the basis of your general location data). | |
| 259 | - Enforcement of our User Agreement, [Payments Terms of Use - opens in new window or tab](https://pages.ebay.co.uk/payment/2.0/terms.html), this User Privacy Notice and other rules and policies. | |
| 260 | - Publication and promotion of your listings and related content on the websites or in the applications, services and tools of eBay Affiliates or cooperating third-party operators of websites, applications, services and tools. When we share the content of your listings and any related personal data with third parties, their processing of such data is subject to applicable data protection laws (including statutory security measures) at all times. | |
| 261 | - Enabling events for which you register (including handling the registration process and sending necessary information in the context of the event). | |
| 262 | ||
| 263 | **Where necessary, we transmit your personal data to processors and the following recipients for one or several of the purposes described above:** | |
| 264 | ||
| 265 | - Other eBay users | |
| 266 | - eBay Affiliates | |
| 267 | - External service providers, authentication partners, physical storage service partners, delivery companies (such as DHL, UPS, etc.), and event agencies | |
| 268 | - Government agencies or public authorities (including customs and tax authorities) | |
| 269 | - Payment service providers | |
| 270 | - External operators of websites, applications, services and tools | |
| 271 | ||
| 272 | ### 5.2 We process your personal data in order to comply with legal obligations to which we are subject. This includes the following purposes: | |
| 273 | ||
| 274 | - Participation in investigations and proceedings (including judicial proceedings) conducted by public authorities or government agencies, in particular, for the purpose of detecting, investigating and prosecuting illegal acts. | |
| 275 | - Prevention, detection and mitigation (including compliance with reporting requirements and ensuring the efficacy of compliance processes and solutions) of illegal activities (e.g. fraud, money laundering, terrorist financing, child abuse and violations of sanctions legislation). | |
| 276 | - Complying with information requests from third parties based on any statutory information rights they have against us (e.g. in the event of an intellectual property infringement, product piracy, or other unlawful activity). | |
| 277 | - Complying with information collection, verification, disclosure, reporting and other requirements under consumer protection, anti-fraud, online platform and tax legislation. | |
| 278 | - Complying with data access requirements under payment services legislation (e.g. under the EU Payment Services Directive as implemented into EU Member State law) as a provider of payment services. | |
| 279 | - Ensuring the security of our Services. | |
| 280 | - Retention and storage of your personal data to comply with specific legal retention requirements (for more information on eBay's storage of your data, see section [7\. Storage duration and erasure]()). | |
| 281 | ||
| 282 | **Where necessary, we transmit your personal data to processors and the following recipients for one or several of the purposes described above:** | |
| 283 | ||
| 284 | - Law enforcement agencies, courts, government agencies or public authorities (including tax and financial authorities), intergovernmental or supranational bodies (in connection with our payment services provided in the EU for sellers in particular with regard to compliance with Luxembourg laws concerning FATCA dated 7 July 2015 and concerning the OECD Common Reporting Standard dated 18 December 2015). | |
| 285 | - Third parties based on statutory information claims against us, including participants in the [eBay VeRO programme - opens in new window or tab](https://pages.ebay.com/seller-center/listing-and-marketing/verified-rights-owner-program.html) and the PROACT programme. | |
| 286 | - Third-party service providers and partners. | |
| 287 | - Other third-party service providers you select to access your data under payment services legislation and as authorised in each case by you. | |
| 288 | - Third parties who are involved in judicial proceedings, in particular, if they submit a legal order, court order or equivalent legal order to us. | |
| 289 | - Credit agencies, bureaus, or associations, if required by applicable law (e.g. information on payment delays, payment defaults or other irregularities that may be relevant to your credit report). | |
| 290 | - eBay Affiliates. | |
| 291 | - Other eBay users | |
| 292 | ||
| 293 | ### 5.3 We process your personal data in order to protect your vital interests or the vital interests of another natural person. This includes the following purposes: | |
| 294 | ||
| 295 | - Prevention, detection, mitigation and investigation of activities that may result in impairment of your vital interests or the vital interests of another natural person, unless there is a statutory obligation to this effect. | |
| 296 | ||
| 297 | **Where necessary, we transmit your personal data to processors and the following recipients for one or several of the purposes described above:** | |
| 298 | ||
| 299 | - Law enforcement agencies, courts, government agencies or public authorities, intergovernmental or supranational bodies | |
| 300 | - Third parties who are involved in judicial proceedings | |
| 301 | - eBay Affiliates | |
| 302 | - External service providers | |
| 303 | ||
| 304 | ### 5.4 We process your personal data where necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms. In order to reconcile our legitimate interests with your rights, we have introduced appropriate control mechanisms. On this basis, we process your data for the following purposes: | |
| 305 | ||
| 306 | - Participation in investigations and proceedings (including judicial proceedings) conducted by courts, law enforcement agencies, government agencies or public authorities, intergovernmental or supranational bodies, in particular for the purpose of detecting, investigating and prosecuting illegal acts, unless there is a statutory obligation to this effect, and we may legitimately assume that the disclosure of the data is necessary to avert imminent disadvantages or to report a suspicion of an illegal act. In such cases, we will only disclose what we believe is necessary, and to the extent permitted by applicable laws, such as your name, city, postcode, telephone number, email address, (previous) usernames, IP address, fraud complaints, bidding and listing history. | |
| 307 | - Protection of the legitimate interests of third parties (including participants of the [VeRO programme - opens in new window or tab](https://pages.ebay.com/seller-center/listing-and-marketing/verified-rights-owner-program.html) and the PROACT programme) in connection with civil law disputes, including the investigation of such disputes, unless there is a statutory obligation to this effect, if we may legitimately assume that it is necessary to disclose the data to such third parties in order to avert imminent disadvantages. In such cases, we will only disclose what we believe is necessary, and to the extent permitted by applicable laws, such as the seller's name, address, city, postcode, country, telephone number, email address and company name to the third party and bind the third party by a worldwide non-disclosure agreement to treat the data as confidential. | |
| 308 | - Prevention, detection, mitigation and investigation of fraud, financial crimes and harms, violation of international sanctions legislation, security incidents and other prohibited or unlawful activities, including the assessment of corresponding risks (e.g. through the use of captchas, a port enumeration technology to identify user sessions using remote desktop tools, metadata or the telephone number stored in your eBay account for risk assessments and two-factor authentication), ensuring the efficacy of compliance processes and solutions, and the implementation of corresponding measures (e.g. disabling or declining certain forms of payment based upon the risk associated with the underlying transaction), unless there is a statutory obligation to this effect. | |
| 309 | - Verifying that reports submitted to eBay (incl. unnamed reports) are not fraudulent or malicious. | |
| 310 | - Monitoring and improvement of the security of our Services, unless there is a statutory obligation to this effect. | |
| 311 | - Performance of identity checks, creditworthiness and other financial standing checks (including such checks by payment service providers with which we cooperate to offer certain payment methods), evaluation of applications and comparison of information for accuracy and verification purposes. | |
| 312 | - Automatic filtering and, where necessary, manual review of messages sent through our messaging tools (including chat messages and emails sent to eBay alias email addresses) to prevent fraudulent or suspicious activity or violations of our [User Agreement](https://www.ebay.co.uk/help/policies/member-behavior-policies/user-agreement) or other [rules and policies](https://www.ebay.co.uk/help/policies/default/ebay-rules-policies), including enforcing the [prohibition of purchases and sales outside of eBay](https://www.ebay.co.uk/help/policies/payment-policies/offers-buy-sell-outside-ebay-policy), as further explained below under **Filtering of messages sent via our messaging tools** (see section [11\. Other important information regarding data protection]()). | |
| 313 | - Provision of functions for users or activities that make the processing of transactions easier, more cost-effective or more convenient (e.g. administration of several delivery addresses, updating stored payment information from time to time or retrying declined card details with updates provided by your bank or other payments services providers, reducing overall cost of payments) or provide users with more information about their transactions (e.g., calculating CO₂ emissions from eBay purchases). | |
| 314 | - Analysis and improvement of the Services from eBay Affiliates, e.g. by reviewing site usage data or information from users about blocked or crashed pages in order to identify and solve problems and to provide you with an improved user experience, including as part of product development. | |
| 315 | - Analysis of telephone conversations with our customer service that we recorded with your consent. | |
| 316 | - Advertisements by mail (according to your communication preferences in your eBay account). | |
| 317 | - To the extent permitted by applicable law without your consent, communications with you via electronic mail (e.g. email or text message) or telephone to offer you vouchers, discounts and special offers, to conduct opinion polls and surveys, and to inform you about our Services (according to your communication preferences in your eBay account). If you no longer wish to receive marketing emails from us, you can also unsubscribe by clicking on the link in the footer of the email you received. For technical reasons, the implementation may take a few days. | |
| 318 | - For users outside the European Economic Area (EEA), Switzerland and the United Kingdom: Advertising and content personalisation, measurement and analytics, on and off our sites, as explained in our [AdChoice page - opens in new window or tab](https://www.ebay.co.uk/adchoice). | |
| 319 | - Customisation of page content to display the items and services you may like based on the actions you take. | |
| 320 | - Evaluation of the quality and success of our email marketing campaigns (e.g. through analysis of opening and click rates). | |
| 321 | - Assessment of the service status (e.g. on the basis of tracking information if sellers use postage labels from delivery providers via eBay or provide tracking numbers). | |
| 322 | - Offering or facilitating the offering of partner and bonus programmes and other co-branded marketing efforts (e.g. product warranties, seller financing offers or co-branded credit cards in collaboration with a third-party lender, partner, or credit card issuer) and assessment of the quality and success of related initiatives, to the extent permitted by applicable law. | |
| 323 | - Provision of shared content and services (such as registration for services, transaction processing and customer service) with eBay Affiliates or cooperating payment service providers. | |
| 324 | - Development and improvement of AI models and technology. You will find more information on AI and your corresponding rights below under section [12\. eBay and AI](). | |
| 325 | - Initiation, preparation and execution of a company acquisition, e.g. in the event of a merger with another company or takeover by another company. If such an event occurs, we will require the merged entity to comply with this User Privacy Notice with respect to your personal data. Should your personal data be processed for any purpose not specified in this User Privacy Notice, you will be informed in advance of the processing of your data for this new purpose. | |
| 326 | - Assertion of or defence against legal claims, including those asserted by one eBay user against another eBay user. | |
| 327 | - Enabling eBay Affiliates to comply with legal obligations they are subject to, including information collection, verification, disclosure, reporting and other requirements under consumer protection, anti-fraud, online platform and tax legislation. | |
| 328 | - To comply with an impending legal obligation. | |
| 329 | - For users in the United States: investigating and communicating the outcome of disputes with the affected users (e.g. sharing information about eBay's investigation of a complaint of a user's violation of a policy with the reporting user). | |
| 330 | ||
| 331 | **Where necessary, we transmit your personal data to processors and the following recipients for one or several of the purposes described above:** | |
| 332 | ||
| 333 | - eBay Affiliates | |
| 334 | - External service providers | |
| 335 | - Other eBay users | |
| 336 | - Law enforcement agencies, courts, government agencies or public authorities, intergovernmental or supranational bodies | |
| 337 | - Third parties who are involved in judicial proceedings | |
| 338 | - Participants in the [eBay VeRO programme - opens in new window or tab](https://pages.ebay.com/seller-center/listing-and-marketing/verified-rights-owner-program.html), PROACT programme, and other third parties in the event of an investigation for fraud, intellectual property infringement, retail crime, stolen goods, product piracy or other unlawful activity | |
| 339 | - Payment service providers and partners | |
| 340 | - Third-party partners in furtherance of offering commercial financing opportunities | |
| 341 | - Credit agencies or bureaus, data verification services, risk assessment vendors and collections agencies (e.g. information about payment delays, payment defaults, or other irregularities that may be relevant to your credit report, or that we use to confirm your identity, model risk, establish credit limits, or collect unpaid debts) | |
| 342 | - Other companies in the context of a company acquisition | |
| 343 | ||
| 344 | Information about your right to object to processing based on our legitimate interests can be found below under [8\. Rights as a data subject]() and, with regard to the use of cookies and similar technologies, below under [9\. Cookies & similar technologies](). | |
| 345 | ||
| 346 | ### 5.5 With your consent, we process your personal data for the following purposes: | |
| 347 | ||
| 348 | - For users within the European Economic Area (EEA), Switzerland and the United Kingdom: Advertising and content personalisation, measurement and analytics, on and off our sites, as explained on our [Advertising and related preferences page - opens in new window or tab](https://www.ebay.co.uk/gdpr). | |
| 349 | - Communications with you via electronic mail (such as email or text message) or telephone, including communications by eBay Affiliates or by third parties, to offer you vouchers, discounts and special offers, unless these communications are permitted without your consent under applicable law. We may engage third parties to send marketing communications on our behalf. | |
| 350 | - Processing of your precise location data to provide location-based services. Please note that most mobile devices allow you to manage or disable the use of precise location services for all applications in the settings menu. | |
| 351 | - For users within the European Economic Area (EEA): Storing your financial information (e.g. credit card and account numbers) for future transactions. | |
| 352 | - Provision of a single sign-on service allowing you to register or log in to third-party services using your eBay sign-in credentials. | |
| 353 | - For sellers, processing of your biometric data to identify you and further prevent fraud and reduce other risks on our platform, and in connection with Know Your Customer and similar compliance requirements. | |
| 354 | - Processing of your personal data on the basis of your consent, which you have given so that we or third parties can enable you to use certain services or make them available to you. | |
| 355 | ||
| 356 | You can find information about your right to withdraw your consent below under section [8\. Rights as a data subject]() and information with regard to the use of cookies and similar technologies below under section [9\. Cookies & similar technologies](). | |
| 357 | ||
| 358 | **Where necessary, we transmit your personal data to processors and the following recipients for one or several of the purposes described above:** | |
| 359 | ||
| 360 | - eBay Affiliates | |
| 361 | - External service providers | |
| 362 | - Third parties using our single sign-on service (as authorised by you in each single case) | |
| 363 | - Other third parties with whom we partner to offer you specific services (as described at the collection of the respective user consent) | |
| 364 | - Third-party advertising partners such as Google, Meta, Microsoft, Pinterest, and TikTok, as listed on our [Advertising and related preferences page - opens in new window or tab](https://www.ebay.co.uk/gdpr) | |
| 365 | ||
| 366 | ### 5.6 Data Sharing between eBay Affiliates | |
| 367 | ||
| 368 | As set out above under "Personal data from other sources", we also receive access to personal data about you from other eBay Affiliates. This enables us, in particular, to provide you, with your consent as legally required, with information about products and services, which we believe might interest you, and improve our products, services, content, and advertising by analysing your use of the services of eBay Affiliates, in particular through the matching of certain data (e.g. cookie IDs). Furthermore, this allows us to better prevent, detect, mitigate and investigate fraud, security incidents and other prohibited or unlawful activities, including the assessment of corresponding risks. We will also grant access to personal data about you to other eBay Affiliates for the aforementioned purposes. To the extent that other eBay Affiliates have access to your personal data, they will follow practices that are at least as restrictive as the practices described in this User Privacy Notice. | |
| 369 | ||
| 370 | ### 5.7 Additional information regarding our payment services for sellers | |
| 371 | ||
| 372 | With regard to our payment services for sellers in the EEA and Switzerland, we additionally point out that eBay S.à r.l. is subject to professional secrecy, which requires special transparency with regard to the processing and, in particular, the transmission of your personal data. We therefore expressly draw your attention to the fact that eBay S.à r.l. may pass on your personal data to trustworthy third parties and business partners where necessary to provide our payment services for sellers, as described above in this Section 5 of the User Privacy Notice. This includes in particular the following third parties and business partners: | |
| 373 | ||
| 374 | - Other payment service providers, including financial institutions | |
| 375 | - Companies offering financial products, analyses and scoring (e.g. credit agencies or bureaus) | |
| 376 | - Authorities, agencies and other governmental bodies (e.g. to combat fraud) | |
| 377 | - Auditors and other professional advisors | |
| 378 | ||
| 379 | ### 5.8 Automated decision-making | |
| 380 | ||
| 381 | We use technologies that are considered automated decision making or profiling. We will not make any automated decisions about you that would significantly affect you unless such a decision is necessary for entering into, or the performance of, a contract with you, we have obtained your consent, or we are required by applicable law to use such technology. You will find information on your right to object to this processing of your data below under section [8\. Rights as a data subject](). | |
| 382 | ||
| 383 | ## 6\. Cross-border data transfers | |
| 384 | ||
| 385 | Some recipients of your personal data are located outside your jurisdiction or have offices in jurisdictions where data protection laws may provide a different level of protection than the laws in your jurisdiction. When transferring personal data to such recipients, we provide appropriate safeguards. | |
| 386 | ||
| 387 | ### Learn more about section 6 | |
| 388 | ||
| 389 | ### 6.1 Data transfers to eBay Affiliates | |
| 390 | ||
| 391 | The transmission of personal data between eBay Affiliates (e.g. to enable cross border transactions and for other legally permitted purposes) is based on our worldwide data protection principles, which are binding internal data protection regulations (Binding Corporate Rules, BCRs), or on the basis of other appropriate safeguards (e.g. standard data protection clauses issued or approved by the European Commission (2021/914/EU for transfers from the EEA). Through our Binding Corporate Rules, eBay Affiliates undertake to protect your personal data and to comply with data protection obligations. Further information on our binding company-wide guidelines and our worldwide data protection principles can be found in the [eBay Privacy Centre - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/). | |
| 392 | ||
| 393 | ### 6.2 Other data transfers (from the EEA, UK or Switzerland to third countries) | |
| 394 | ||
| 395 | We may transfer your personal data to recipients (see section [5\. Purposes and legal bases for data processing and categories of recipients]()) who may be located anywhere in the world. We will only transfer your personal data from the European Economic Area (EEA), United Kingdom or Switzerland to third countries, i.e. countries outside the EEA, on the basis of appropriate safeguards or if otherwise authorised by applicable law. Third countries providing an adequate level of data protection according to the European Commission currently include Andorra, Argentina, Canada (for companies covered by the Personal Information Protection and Electronic Documents Act), Switzerland (for transfers out of the EEA), the Faroe Islands, Guernsey, the State of Israel, the Isle of Man, Japan, Jersey, New Zealand, South Korea, the United Kingdom, the United States (Data Privacy Framework) and Uruguay. In other cases, eBay provides the necessary safeguards, e.g. through the conclusion of data protection contracts adopted by the European Commission (e.g. standard data protection clauses (2021/914/EU) with the recipients, or through other measures provided for by law. Additional information regarding the measures taken by us is available [on request](). We regularly re-evaluate the measures taken to assess requirements deriving from new regulatory guidance and case law. | |
| 396 | ||
| 397 | ## 7\. Storage duration and erasure | |
| 398 | ||
| 399 | Your personal data will be stored by us and our service providers in accordance with applicable data protection laws to the extent necessary for the processing purposes set out in this User Privacy Notice (see section [5\. Purposes and legal bases for data processing and categories of recipients]() for more information on the processing purposes). Subsequently, we will delete your personal data in accordance with our data retention and deletion policy or take steps to properly render the data anonymous, unless we are legally obliged or permitted to keep your personal data longer (e.g. for legal compliance, tax, accounting or auditing purposes, or to detect and prevent fraudulent or illegal activity on eBay). In Europe, the retention periods are generally between 6 and 10 years (e.g. for contracts, notifications and business letters). As far as legally permissible or required, we restrict the processing of your data instead of deleting it (e.g. by restricting access to it). This applies in particular to cases where we may still need the data for the execution of the contract or for the assertion of or defence against legal claims, or where such retention is otherwise required or permitted by law. In these cases, the duration of the restriction of processing depends on the respective statutory limitation or retention periods. The data will be deleted after the relevant limitation or retention periods have expired. | |
| 400 | ||
| 401 | ### Learn more about section 7 | |
| 402 | ||
| 403 | The specific retention periods for personal data are documented in our regional data retention guidelines. How long we retain personal data may vary depending on the Services we provide and our legal obligations under applicable national law. The following factors typically affect the retention period: | |
| 404 | ||
| 405 | - **Necessity for the provision of our Services** | |
| 406 | This includes such things as executing the [User Agreement](https://www.ebay.co.uk/help/policies/member-behavior-policies/user-agreement) and [Payments Terms of Use - opens in new window or tab](https://pages.ebay.co.uk/payment/2.0/terms.html) with you, maintaining and improving the performance of our products, keeping our systems secure, and maintaining appropriate business and financial records. Most of our retention periods are determined on the basis of this general rule. | |
| 407 | - **Consent-based processing of personal data** | |
| 408 | If we process personal data on the basis of consent (including consent to the extended storage), we store the data for as long as necessary in order to process it according to your consent. | |
| 409 | - **Statutory, contractual or other similar obligations** | |
| 410 | Corresponding storage obligations may arise, for example, from laws or official orders. It may also be necessary to store personal data with regard to pending or future legal disputes. Personal data contained in contracts, notifications and business letters may be subject to statutory storage obligations depending on national law. | |
| 411 | ||
| 412 | ## 8\. Rights as a data subject | |
| 413 | ||
| 414 | Subject to possible restrictions under national law, as a data subject, you have the right to access, rectification, erasure, restriction of processing and data portability with regard to your personal data. In addition, you can withdraw your consent and **object** to our processing of your personal data on the basis of our legitimate interests. You can also lodge a complaint with a supervisory authority. | |
| 415 | ||
| 416 | ### Learn more about section 8 | |
| 417 | ||
| 418 | Your rights in detail: | |
| 419 | ||
| 420 | - Where we rely on consent you can **withdraw your consent** to the processing of your personal data by us at any time. As a result, we may no longer process your personal data based on this consent in the future. The withdrawal of consent has no effect on the lawfulness of processing based on consent before its withdrawal. | |
| 421 | - You have the right to obtain **access** to your personal data that is being processed by us. In particular, you may request information on the purposes of the processing, the categories of personal data concerned, the categories of recipients to whom the personal data have been or will be disclosed, where possible the envisaged period for which the personal data will be stored or the criteria used to determine that period, the existence of the right to request rectification or erasure of personal data or restriction of processing of personal data or to object to such processing, the right to lodge a complaint with a supervisory authority, any available information as to the personal data's source (where they are not collected from you), the existence of automated decision-making, including profiling and, where appropriate, meaningful information on its details. Your right to access shall not adversely affect the rights and freedoms of others. Your right to access may be limited by national law. | |
| 422 | - You have the right to obtain from us without undue delay the **rectification** of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. | |
| 423 | - You have the right to obtain from us the **erasure** of personal data concerning you under certain conditions (e.g. when the personal data are no longer necessary in relation to the purposes for which they were processed or when they are no longer required for overriding legitimate grounds, such as the detection/prevention of fraud), unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims. The right to erasure may be limited by national law. Please note that it is not possible to erase data from the blockchain. Please see section [11\. Other important information regarding data protection]() for further information. | |
| 424 | - You have the right to request that we **restrict the processing of your personal data** to the extent that | |
| 425 | - the accuracy of the data is disputed by you, | |
| 426 | - the processing is unlawful, but you oppose the erasure of the personal data, | |
| 427 | - we no longer need the data, but you need it to assert, exercise or defend legal claims or | |
| 428 | - you have objected to the processing. | |
| 429 | - You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller ("**right to data portability**"). | |
| 430 | - You have the right to lodge a complaint with a **supervisory authority**. For example, you can contact the supervisory authority of your usual place of residence, your place of work or the registered office of the [controller](). | |
| 431 | ||
| 432 | If your personal data is processed on the basis of our legitimate interests, you have the **right to object** to the processing of your personal data on grounds relating to your particular situation. This also applies to profiling. If your personal data is processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. | |
| 433 | ||
| 434 | ### Exercising your rights and managing your settings | |
| 435 | ||
| 436 | You can exercise your rights as a data subject via our [Privacy Contact page - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/privacy-contact/). In addition, you are of course free to contact the eBay Privacy Team or the controller who is responsible for the processing of your personal data at any time (for further information, see section [2\. Controller]() above). You can find all necessary information and [contact details - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/privacy-contact/) in our [eBay Privacy Centre - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/). | |
| 437 | ||
| 438 | The exercise of the above data subjects' rights (e.g. right to access or erasure) is generally free of charge. Where requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may charge an appropriate fee (at most our actual costs), in accordance with the applicable statutory regulations, or refuse to process the application. | |
| 439 | ||
| 440 | #### Managing your communication and other preferences | |
| 441 | ||
| 442 | If you would like to change your preferences regarding eBay communications (including marketing communications), you can do so at any time through your account in My eBay under "Communication Preferences". If you no longer wish to receive email marketing communications from us, you can also unsubscribe by clicking on the link in the footer of the email you received. For technical reasons, the implementation may take a few days. For information on how to manage your cookies and similar technologies preferences, see the next section [9\. Cookies & similar technologies](). | |
| 443 | ||
| 444 | ## 9\. Cookies & similar technologies | |
| 445 | ||
| 446 | When you use our Services, we and authorised third parties make use of cookies and similar technologies (which we will refer to collectively as "cookies") to provide you with a better, faster and safer user experience or to show you personalised advertising. You can find detailed information about the use of cookies and similar technologies and your choices in our [User Cookie Notice](https://www.ebay.co.uk/help/policies/member-behaviour-policies/user-cookie-notice). | |
| 447 | ||
| 448 | ### Learn more about section 9 | |
| 449 | ||
| 450 | The cookies and similar technologies used in connection with the Services have different functions: | |
| 451 | ||
| 452 | - They may be technically necessary for the provision of our Services | |
| 453 | - They help us optimise our Services technically (e.g. monitoring of error messages and loading times) | |
| 454 | - They help us improve your user experience (e.g. save font size and form data entered) | |
| 455 | - They allow us to show you more relevant advertisements | |
| 456 | ||
| 457 | ### Your choices regarding cookies and similar technologies | |
| 458 | ||
| 459 | Please see our [User Cookie Notice](https://www.ebay.co.uk/help/policies/member-behaviour-policies/user-cookie-notice) for more information and your choices with respect to cookies and similar technologies, or go directly to [Advertising and related preferences - opens in new window or tab](https://www.ebay.co.uk/gdpr) (users in the EEA, Switzerland and the United Kingdom) or [AdChoice - eBay Advertising Preferences - opens in new window or tab](https://www.ebay.co.uk/adchoice) (all users) to manage your preferences. | |
| 460 | ||
| 461 | You are also free to disable the use of cookies and similar technologies if this is supported by your device. You can manage your cookie settings in your browser or device settings. | |
| 462 | ||
| 463 | If you decide not to allow third parties to process your personal data for advertising purposes via cookies (and similar technologies), this does not mean that we will not show you advertisements. It simply means that these advertisements will not be personalised for you using cookies or similar technologies. | |
| 464 | ||
| 465 | ## 10\. Data security | |
| 466 | ||
| 467 | We protect your personal data through technical and organisational security measures to minimise risks associated with data loss, misuse, unauthorised access and unauthorised disclosure and alteration. To this end we use network security services and data encryption, for example, as well as physical access restrictions for our data centres and logical access controls for data and systems access. You can find further information on our data security in our [Security Centre - opens in new window or tab](https://pages.ebay.com/securitycenter/index.html). | |
| 468 | ||
| 469 | ## 11\. Other important information regarding data protection | |
| 470 | ||
| 471 | This section contains important additional information about the protection of personal data in connection with the use of our Services, including whether you are required to provide personal data. | |
| 472 | ||
| 473 | ### Learn more about section 11 | |
| 474 | ||
| 475 | ### What happens when you share your personal data on our sites or applications? | |
| 476 | ||
| 3 | 477 | Other users have access to the information you share on eBay or disclose to other users. For example, other users can see your bids, purchases, items for sale, saved interests, sellers and searches, shopfronts, feedback, ratings, product reviews and associated comments. Other users can also see any information you choose to share in your profile. |
| 4 | 478 | |
| 5 | 479 | When you use our Services, your public username may be displayed and available to the public and associated with all of your public eBay activity. Notices sent to other users about suspicious activity and notice violations on our sites may refer to your public username and specific items. Accordingly, if you use a username that allows others to identify you, these others may be able to identify your eBay activities. |
| 6 | 480 | |
| 7 | 481 | To help protect your personal data, we allow only limited access to other users' contact, delivery and financial information as necessary to facilitate your transactions and collect payments. However, when users are involved in a transaction, they have access to each other's name, username, (alias) email address and other contact and delivery information. For example, we may allow users to exchange telephone numbers in order to contact each other prior to completing a transaction (e.g. a seller may opt to share their telephone number with a buyer so that the buyer may call with questions about a listed item). In this case, sellers are prohibited from using a buyer's telephone number for other purposes (e.g. completing a transaction off eBay or adding the buyer to a marketing list). |
| 8 | 482 | |
| 57 | 531 | ### Blockchain and Controllership |
| 58 | 532 | |
| 59 | 533 | Certain features in our marketplace may enable tokens, smart contracts and/or other digital assets (e.g. immutable tokens for eBay Authenticity Certificates) to be deployed to a public blockchain with your separate agreement to certain terms and conditions. Please note that notwithstanding other provisions in this User Privacy Notice addressing data controllership, the blockchain is an inherently public and decentralised infrastructure that cannot be controlled by any one person or group and is therefore outside of our ability to control. For example, details of blockchain-based transactions are immutable and cannot be deleted by any one person or group. |
| 60 | 534 | |
| 61 | 535 | To the extent that certain Services involve personal data processed on eBay websites or applications such as through account or wallet registration, customer service interactions or marketing activities, one of the eBay Affiliates is responsible for the processing of your personal data depending on the region in which you reside (see section [2\. Controller]() above). Such eBay Affiliate is also the controller for its independent activities involving your personal data on the blockchain to verify and manage risk involving digital wallets or to enable features for brands, collectors, sellers, traders or such eBay Affiliate for user engagement or marketing purposes. By contrast, neither eBay Inc. nor an eBay Affiliate is the controller for activities you choose to conduct via the blockchain, publicly visible digital wallets or other decentralised networks (e.g. which allow you to engage in transactions on public blockchains and which inherently involve personal data placed on the public blockchain ledger). In addition, we may engage third-party partners who may act as independent data controllers to assist to facilitate transactions you request, and your interactions with that third-party partner as an independent data controller are governed by the applicable terms of service and privacy policy of that third party. |
| 62 | 536 | |
| 537 | ## 12\. eBay and AI | |
| 538 | ||
| 539 | ### Responsible AI | |
| 540 | ||
| 63 | 541 | We are committed to developing and using artificial intelligence (AI) responsibly, ensuring that we use AI to enhance the eBay experience and respect the needs of the entire eBay community. To achieve this, we have invested in a robust Responsible AI (RAI) approach at eBay which leverages the RAI principles set out in our [RAI Policy - opens in new window or tab](https://static.ebayinc.com/assets/Uploads/Documents/Responsible-AI-Policy.pdf). These principles direct the development, deployment, and use of AI at eBay. |
| 64 | 542 | |
| 543 | ### Use of AI | |
| 544 | ||
| 545 | We may use AI-powered tools and products for various purposes, including: | |
| 546 | ||
| 547 | - To improve and enhance our Services. | |
| 548 | - To offer you new or enhanced features and products (such as AI-powered listing generation, image background enhancement and AI assistants). | |
| 549 | - To make information about listings and services more accessible, such as by offering AI-generated summaries of product reviews. | |
| 550 | - To offer you a more customised and personalised experience. | |
| 551 | - To provide you with enhanced customer service, for example, to bring real-time answers to chat, to analyse customer service interactions to improve their quality or to better understand customer pain points, and to help respond to customer queries. | |
| 552 | - To support fraud detection and compliance checks, and to detect suspicious activity on our properties. | |
| 553 | - To analyse data for specific patterns (e.g. for market research purposes). | |
| 554 | - To support us in our day-to-day work (e.g. to create summaries, to translate text or to generate images). | |
| 555 | ||
| 65 | 556 | AI-powered tools and products may involve personal data processing, but this is not necessarily the case. We use both our own AI models and third-party AI models and systems to deliver AI-powered tools and products. If our use of AI involves the processing of personal data, we rely on the legal bases set out in Section [5\. Purposes and legal bases for data processing and categories of recipients]() above for the purposes mentioned therein. If we use any AI system that interacts directly with you, we will let you know. |
| 66 | 557 | |
| 558 | ### AI development and training | |
| 559 | ||
| 67 | 560 | Where permitted under applicable law, we use personal data collected from our users to train, test, validate, and align our own AI models as well as third-party AI models and systems that we use for the purposes outlined in this User Privacy Notice. This may include the personal data set out in Section [4\. What personal data we collect and process](). We may combine personal data from our users with data from external sources (e.g. from publicly available sources). The use of personal data for AI development and training is based on our legitimate interest to achieve the objectives outlined under "Use of AI" above. |
| 68 | 561 | |
| 69 | 562 | When training, testing, validating, and aligning AI models, we take appropriate steps to mitigate potential privacy impacts (e.g. through filtering, data masking, differential privacy techniques). Where applicable, our steps are based on data protection impact assessments and the legitimate interest assessment that we carry out. These take into account the purpose of the model, the need and suitability of certain training data, as well as measures that can be reasonably taken during training and thereafter. |
| 70 | 563 | |
| 564 | ### AI-related individual rights | |
| 565 | ||
| 71 | 566 | You have rights with regard to your personal data. See Section [8\. Rights as a data subject]() above for more details. Your rights also include the [right to object - opens in new window or tab](https://accountsettings.ebay.co.uk/ai-preferences) to our processing of your personal data for AI development and training purposes. |
| 567 | ||
| 568 | ## 13\. Regional and State Privacy Disclosures | |
| 569 | ||
| 570 | For additional regional disclosures for residents of certain U.S. states, including California, please review our [State Privacy Disclosures - opens in new window or tab](https://www.ebayinc.com/state-privacy-disclosures/) page. For U.S. sellers (including those in California, Nevada, North Dakota, and Vermont), please follow the link to eBay Commerce Inc.'s [U.S. Consumer Privacy Notice - opens in new window or tab](https://pages.ebay.com/payments/member-behaviour-policies/paymentsprivacy). For additional disclosures for specific regions or countries, including Brazil, mainland of People's Republic of China, and the United Kingdom, please review our [Regional Privacy Disclosures - opens in new window or tab](https://www.ebayinc.com/company/privacy-center/privacy-notice/regional-privacy-disclosures/) page. | |
ALSO IN THIS CHANGE, NOT TIED TO ONE LINE
- ± CHANGEDShorter, vaguer description of how eBay uses AI
The notice used to list specific ways eBay uses AI (writing listings, enhancing photos, summarizing reviews, fraud detection, etc.) and promised to tell you whenever an AI system talks to you directly. The new version drops that list and drops the notification promise, replacing both with one general chatbot example.
If we use any AI system that interacts directly with you, we will let you know.
Processing of personal data in these instances is done for the purposes and on the legal bases described in section 3.
- − REMOVEDLink to eBay's Responsible AI policy document removed
The old notice linked to eBay's detailed Responsible AI Policy document. That link and reference are gone from the new AI section.
the RAI principles set out in our [RAI Policy - opens in new window or tab]
- ± CHANGEDData security and AI given their own, earlier sections
The notice now has dedicated, numbered sections for data security and AI, moved earlier in the document to make them easier to find.
## 8. Data security