1. Scope and who we are

Part2Go (“Part2Go”, “we”, “us” or “our”) operates an online marketplace for engineering equipment, machinery, tools and related advertising. This Privacy Policy applies when you visit our website, create or manage an account, publish or respond to a listing, contact another user, submit a report, use a business advertising feature, or contact support.

Part2Go is the data user responsible for deciding how personal data described in this policy is handled. This policy does not govern the independent privacy practices of sellers, buyers, advertisers, linked websites or other third parties.

2. Personal data we collect

• Account and profile data: name, email address, password credentials handled by our authentication provider, account type and, where provided or required for a business account, company name, contact name and telephone number.
• Marketplace content: listing titles, descriptions, prices, locations, equipment details, photographs, seller information, listing status and any other content you choose to publish.
• Communications and activity: buyer and seller messages, favourites, notifications, listing views, reports, support requests, account changes and advertising submissions.
• Business advertising data: campaign copy, images, destination links, campaign dates, review status, rejection reasons and an administrative audit history.
• Technical and security data: authentication cookies, timestamps, request and device information made available by your browser or hosting infrastructure, and security records used to detect abuse, enforce rate limits and investigate incidents.
• Guest messaging data: a randomly assigned anonymous guest identifier and a hashed technical identifier used to limit abuse. A guest does not need to provide a name, email address or telephone number to send a listing enquiry.

Part2Go does not currently collect or process payment-card or bank-account details for marketplace transactions. Buyers and sellers arrange payment independently and should not send sensitive financial information, passwords or one-time security codes through Part2Go messages.

3. How we collect data

We collect data directly from you when you register, update your profile, create content, communicate, submit a report or contact us. We also generate records through your use of the service, such as favourites, views, status changes and security logs. Other users may provide information about you when they send a message, report content or participate in a transaction.

Where a field is required, the relevant form will indicate this. If required information is not supplied, we may be unable to create an account, publish a listing, deliver a message or provide the requested feature. Optional profile and listing information may be left blank.

4. How and why we use personal data

• To create, authenticate, maintain and secure accounts.
• To publish, search, manage and promote marketplace listings and business advertisements.
• To enable enquiries and communications between buyers, sellers and guests.
• To deliver account verification, password reset, security and service emails.
• To provide favourites, notifications, listing statistics and account-management features.
• To review reports, moderate content, prevent spam and fraud, enforce our Terms of Use and protect users and the service.
• To troubleshoot, maintain and improve the reliability, accessibility and performance of Part2Go.
• To respond to support requests, establish or defend legal claims, comply with applicable law and respond to lawful requests.

We do not currently use personal data for unrelated direct marketing. If we introduce direct marketing, we will provide the notices and choices required by applicable law before doing so.

5. What is public and what is private

Published listings and advertisements are public. Depending on what you submit, they may display a title, description, photographs, district, price, contact name, seller or business type and telephone number. Public information may be viewed, copied, indexed by search engines or shared outside Part2Go, so you should not publish information you wish to keep private.

Your login email address is not displayed as part of a public listing. Private enquiries are available to the participants in the conversation and may be accessible to authorised administrators where reasonably necessary for support, safety, moderation or legal compliance. A seller may see the anonymous identifier associated with a guest conversation, but not a guest’s name or contact details unless the guest voluntarily includes them in a message.

6. When we disclose data

We may disclose relevant data to:

• Other users and the public, as necessary to display content and enable marketplace communications.
• Service providers, including Supabase for authentication, database and file storage; Vercel for website hosting and delivery; and the email-delivery provider configured by Part2Go. These providers process data to supply services to us.
• Professional advisers, authorities or other parties, where reasonably necessary to obtain advice, comply with law or a lawful request, investigate fraud or security issues, protect rights and safety, or establish, exercise or defend legal claims.
• A successor organisation, if all or part of the service is reorganised, transferred or sold, subject to appropriate confidentiality and data-protection arrangements.

We do not sell personal data.

7. Cookies and similar technology

Part2Go and its authentication provider use cookies and comparable browser storage that are necessary to keep you signed in, refresh your session, protect account access and remember essential service state. Blocking these technologies may prevent login and other account features from working correctly. Part2Go does not currently use third-party advertising cookies to track you across unrelated websites.

8. Storage, international processing and retention

Our hosting, authentication, database, storage and email providers may process data in locations outside Hong Kong. Those locations may have different data-protection laws. We select established providers and use available contractual, access-control and security measures appropriate to the service.

We retain personal data only for as long as reasonably needed for the purposes described above, including operation, security, dispute resolution and legal compliance. Retention depends on the data and context:

• Account, listing, member-message and advertising records are generally kept while the account or relevant feature remains active and for a reasonable period afterwards where required for security, moderation, disputes or law.
• An entire anonymous guest conversation is automatically deleted after 30 consecutive days without a new message. This automatic rule does not apply to conversations between registered members.
• Short-lived email-delivery and anti-abuse records are periodically removed when they are no longer needed.
• When an account is deleted, associated listings and stored listing images are removed, except for limited records we must or reasonably need to retain for legal, fraud-prevention, safety or dispute purposes.

Public content copied or indexed by others may remain outside our control after it is removed from Part2Go.

9. Data security

We use reasonable technical and organisational safeguards designed to protect personal data, including authenticated access, role-based permissions, restricted storage, hashing of selected anti-abuse identifiers and administrative controls. No internet service or storage system is completely secure, and we cannot guarantee absolute security. You are responsible for using a strong, unique password and for keeping login links, passwords and one-time codes confidential.

10. Your choices and rights

You can update your name, email address, telephone number and password in account settings; manage or remove your listings; and delete your account through the service. You may also request access to, or correction of, personal data we hold about you, subject to identity verification and any exceptions permitted by applicable law.

To make a privacy request, email kevinc@nextify.space with the subject “Part2Go privacy request”. Please describe your request and the account or listing concerned. We may ask for information reasonably necessary to verify your identity and authority. You may also contact the Office of the Privacy Commissioner for Personal Data, Hong Kong if you have concerns about the handling of your personal data.

11. Third-party content and links

Listings, advertisements and messages may contain links or contact details that take you to third-party services. Part2Go does not control those services or their privacy practices. Review the privacy information of any third party before providing personal data or completing a transaction.

12. Changes to this policy

We may update this Privacy Policy when the service, our providers or applicable requirements change. We will post the revised policy here and update the date below. Where a change is material, we may also provide a notice through the service or by email where appropriate.

13. Contact us

For privacy questions or requests, contact Part2Go at kevinc@nextify.space.