Privacy
Draft text, waiting for legal review
Who is responsible
The controller of the personal data processed on this website is the company operating Express.Market, named on the contact page together with its registration details.
What we process
Account data (name, email address and password in hashed form), the contents of the cart and orders, the delivery address, correspondence with support, and technical data from the visit, such as the language of the page and the device used.
Why, and on what legal basis
To perform the contract: the account, the cart, the order, delivery and support. On legitimate interest: the security of the service, prevention of abuse and the improvement of the catalogue. On consent: analytics and marketing cookies, which are only used after the decision made in the cookie banner.
Who receives the data
The seller of the product receives what is needed to fulfil and ship the order. The logistics partner receives the delivery address, the payment provider receives the payment data. Nobody receives personal data for their own advertising.
How long we keep it
Account data are kept while the account exists. Order documents are kept for the period required by accounting and tax law. Analytics events are kept in aggregated form and are deleted when the consent that allowed them is withdrawn.
Your rights
Access, correction, erasure, restriction, portability and objection, and withdrawal of consent at any time without affecting what was lawful before. A request is made from the account or through the contact page and is answered within one month.
Complaints
A complaint may be lodged with the data protection authority of the country of residence, or with the authority supervising the controller.
Last updated 2026-09-19