Seller Buyer-Data and Security Policy

You receive a buyer's name, phone number, delivery address and any gift message so you can fulfil the order. Use them only to deliver, support the order, handle returns and keep records the law requires. Do not sell or share them, add buyers to marketing lists or contact them for marketing unless they have separately agreed, and do not treat a gift recipient as your customer for marketing.

For the marketplace, Searchbox decides how buyer data is collected and used and is responsible for it. When you use buyer data to fulfil an order you are also responsible for using it lawfully. From 1 January 2027 both of us must meet the Personal Data Protection Act, No. 9 of 2022 (as amended in 2025). [SOLICITOR: confirm the controller and processor roles of Searchbox, sellers, couriers and payment providers, and whether a written processing agreement is needed.]

Give your staff only the access they need, each with their own login. Use strong passwords and two-factor sign-in where we require it. Do not keep order exports, ID documents or contracts in shared or public folders, and keep printed slips out of sight. Delete downloaded buyer information when you no longer need it.

If you think buyer information has been lost, stolen or seen by someone who should not have it, tell Searchbox at once through support, and help us respond. We may need to tell the Data Protection Authority and affected buyers.

If a buyer asks to see, correct or delete their information, pass the request to Searchbox and help us respond within the time the law allows.

We collect and use your business and account information as described in our Privacy Notice. Your private documents, such as tax evidence and signed agreements, are visible only to authorised people in your business and to Searchbox staff who need them.