Friperiz Privacy Policy

Last updated: 25/10/2026

At Friperiz, we attach great importance to the protection of your privacy. This privacy policy explains how we collect, use, share and protect your personal information when you use our platform.

1. Information we collect

1.1 Information you provide to us:

• Account information: name, email address, password (optional if you sign in via Google or Apple), telephone number
• Profile information: photo, description, preferences
• Transaction information: details of items purchased or sold, delivery and billing addresses
• Payment information: payment data (card number, expiry date) is collected and processed directly by our payment service provider Stripe. Friperiz never stores your bank card data on its servers.
• Communications: messages exchanged with other users or our customer service

1.2 Information collected automatically:

• Usage data: pages visited, time spent on the site, actions performed
• Device information: device type, operating system, unique identifiers
• Location data: approximate location based on the IP address

1.3 Information received from third-party services:

If you choose to create an account or sign in via Sign in with Google or Sign in with Apple, we receive:

• a stable unique identifier provided by Google or Apple;
• your verified email address (or a relay address if you use Apple's "Hide My Email" feature — see below);
• only at first sign-in: your first name and last name, if you authorise their sharing.

We never receive your Google or Apple password.

With Apple's Hide My Email feature, you can choose not to share your real email address. Apple then creates a relay address (in the format xxxx@privaterelay.appleid.com) and forwards our emails to your actual inbox, which Friperiz never sees. You can deactivate this relay at any time from your Apple settings.

You can add a password to your account at any time (Settings → Security) in order to sign in alternatively by email/password, while continuing to use Google or Apple.

2. How we use your information

We use your information to:

• Provide, maintain and improve our service
• Process transactions and payments securely
• Send notifications relating to your orders and transactions
• Personalise your user experience
• Communicate with you about your account or our services
• Detect, prevent and resolve technical or security issues
• Comply with legal obligations

3. Sharing of information

We do not sell your personal information. We may share your information in the following situations:

• With other users in the context of transactions (for example, for delivery)
• With our service providers who help us operate our platform, in particular Stripe for payment processing
• With Apple or Google when you use Apple Pay / Google Pay (payment) or Sign in with Apple / Sign in with Google (authentication) — these services process your data in accordance with their own privacy policies
• To comply with the law, protect our rights or prevent fraud
• In the event of a merger, sale or transfer of company assets

4. Your choices and rights

You have the right to:

• Access your personal data
• Rectify your inaccurate data
• Erase your data in certain circumstances
• Restrict or object to the processing of your data
• Request the portability of your data
• Withdraw your consent at any time

To exercise these rights, contact us at pdo@friperiz.fr.

5. Payments and financial data

5.1 Payment processing

Payments on Friperiz are processed securely by Stripe, a payment service provider certified PCI DSS Level 1. Friperiz never directly stores, processes or transmits your bank card data. All payment information is encrypted and managed exclusively by Stripe.

5.2 Apple Pay

If you use Apple Pay to make a payment, your card information is not shared with Friperiz or stored on our servers. Apple Pay uses a unique Device Account Number and a dynamic security code specific to each transaction. Payment processing is carried out by Stripe via the Apple Pay network. To learn more, see Apple's privacy policy.

5.3 Google Pay

If you use Google Pay, your bank card information is not transmitted to Friperiz. Google Pay uses an encrypted payment token to secure each transaction. Processing is carried out by Stripe via the Google Pay network. To learn more, see Google's privacy policy.

5.4 Sellers' bank details

To enable payouts, sellers enter their bank details (IBAN, account holder's name, address) directly in the Friperiz app. This data is:

• encrypted before storage using the AES-256-GCM algorithm;
• stored on infrastructure located in the European Union;
• decrypted only by the Friperiz team at the time a transfer is executed, and each access is recorded in an audit log;
• transmitted to our bank (in the form of a SEPA pain.001 transfer file) only when a withdrawal is actually carried out;
• retained for as long as the seller account is active, and then deleted upon request or when the account is closed.

Friperiz is the controller of this data. You can exercise your rights (access, rectification, erasure) by contacting pdo@friperiz.fr.

5.5 Buyer protection

Friperiz applies buyer protection fees to each transaction. The seller's funds are held until the buyer confirms proper receipt of the item, or automatically upon expiry of the periods provided for in article 7.2 of our Terms and Conditions. This mechanism is intended to protect buyers against non-conforming items.

6. Data security

We implement appropriate security measures to protect your information against unauthorised access, alteration, disclosure or destruction. Payment data is protected by TLS encryption and Stripe's PCI DSS security standards.

7. Data retention

We retain your personal data for as long as necessary for the purposes described in this policy, unless a longer retention period is required or permitted by law. Transaction data is retained in accordance with applicable legal and tax obligations.

8. International data transfers

Friperiz is established in Guadeloupe and operates in French territories where the GDPR applies. However, some of our technical infrastructure and that of our service providers (in particular Stripe) may be located in other countries, including outside the European Union. By using our service, you consent to the transfer of your information to these countries, which may have data protection laws different from those applicable in France. Stripe ensures the compliance of these transfers through standard contractual clauses and the EU-US Data Privacy Framework.

9. Cookies and similar technologies

We use cookies and similar technologies to improve your experience, understand how our service is used and personalise our advertisements. You can control the use of cookies through your browser settings.

10. Protection of minors

Friperiz is not intended for persons under 18 years of age. We do not knowingly collect personal information from minors. If you are a parent or guardian and you believe that your child has provided us with personal information, please contact us.

11. Links to other sites

Our service may contain links to other sites that are not operated by us. If you click on a third-party link, you will be directed to that third party's site. We strongly recommend that you review the privacy policy of each site you visit.

12. Changes to this privacy policy

We may update our privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and by updating the "last updated" date at the top of this policy.

13. GDPR compliance

As a company operating in the European Union, we comply with the General Data Protection Regulation (GDPR). This includes implementing technical and organisational measures to ensure a level of security appropriate to the risk, maintaining records of processing activities, and appointing a data protection officer where applicable.

14. Your rights under the GDPR

In addition to the rights mentioned above, the GDPR grants you additional rights, including:

• The right to erasure ("right to be forgotten")
• The right to restriction of processing
• The right to object to processing
• The right not to be subject to a decision based solely on automated processing

15. Data protection officer

For any question concerning this privacy policy or our data protection practices, you may contact our data protection officer at:

Crane Kevin
pdo@friperiz.fr

16. Supervisory authority

If you are a resident of the European Union and you believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with your local data protection authority. In France, including in the overseas territories, the competent authority is the Commission Nationale de l'Informatique et des Libertés (CNIL) (French Data Protection Authority) — cnil.fr.

By using Friperiz, you acknowledge that you have read and understood this privacy policy and you agree to the collection, use and disclosure of your information as described herein.