FareAll from your community

Privacy Policy

Last updated: [11.08.2026]

1. Data controller

Fare, operated by [LEGAL ENTITY NAME], [ADDRESS], is the data controller for personal data processed through the Platform. This policy explains what data we collect, why, and your rights under the EU General Data Protection Regulation (GDPR) and applicable national law.

Contact: [EMAIL]. [If applicable: Data Protection Officer contact: [EMAIL].]

2. What we collect

  • Account data: name, email, phone number, password (stored as a salted hash).
  • Seller/trader verification data: trading name, business registration number, VAT number (where applicable), food-business registration or approval number (where applicable), and any supporting documentation provided during onboarding or spot-checks.
  • Listing data: descriptions, photos, prices, product category and, where applicable, sourcing/provenance information.
  • Location and address data: used for pickup, delivery, and displaying relevant listings.
  • Driver verification data: identity document details, personal identification code, licence and vehicle information.
  • Transaction data: orders, order lines, delivery addresses, delivery notes, payment status (payment card details are processed by our payment provider, not stored by us. See Section 4).
  • Reports and moderation data: content of reports made about listings or accounts, and records of actions taken.
  • Technical data: usage and error logs needed to operate and secure the Platform.

3. Why we process data

  • To provide and operate the Platform, and to perform the contract between you and Fare (contract performance).
  • To verify Seller trader status and registration/approval numbers, and Driver identity, and to comply with our legal obligations, including under the Digital Services Act and applicable food law (legal obligation).
  • To review and act on reports of illegal or non-compliant listings, and to cooperate with competent authorities where required (legal obligation / legitimate interest).
  • To prevent fraud and misuse and to maintain the safety and integrity of the Platform (legitimate interest).
  • To send service communications such as order and delivery updates (legitimate interest / contract performance).
  • Where you consent, to send marketing communications (consent, you may withdraw this at any time).

4. Who we share data with

We share personal data only as needed:

  • Other users, for example, a Seller sees the delivery address and order details of a Buyer who ordered from them; where legally required, a Seller's trader information (name, and where applicable registration number) is shown to Buyers before they order.
  • Payment providers, to process payments; we do not store full payment card details.
  • Hosting and infrastructure providers, acting as our processors under data processing agreements.
  • Competent public authorities (e.g. food safety, tax, or consumer-protection authorities) where required by law or in response to a valid legal request.
  • We do not sell personal data.

5. International transfers

Where personal data is transferred outside the EU/EEA (for example, to a hosting or service provider), we ensure this is done on the basis of an adequacy decision, standard contractual clauses, or another valid transfer mechanism under GDPR.

6. How long we keep data

We keep account and transaction data for as long as your account is active and for the periods required by law thereafter (for example, accounting and food-traceability record-keeping periods, which may require Sellers' transaction records to be kept for a set number of years under national law). Verification and moderation records relating to reported listings are kept for as long as necessary to demonstrate compliance with our obligations. You may request deletion as described below, subject to our legal retention obligations.

7. Your rights

You have the right to access, rectify, erase, and restrict or object to the processing of your personal data, and to data portability, subject to the exceptions provided by law. You have the right to lodge a complaint with your national data protection authority (for example, the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon).

8. Cookies and similar technologies

[To be completed based on actual cookies/analytics used. Include a cookie table and consent mechanism if any non-essential cookies are used.]

9. Contact

To exercise your rights or ask questions about this policy, contact us at [EMAIL / ADDRESS].

Privacy Policy — Fare