Skip to main content

GDPR & Data Rights

Last updated: March 24, 2026

1. Scope

This page provides additional information for users in the European Economic Area (EEA), United Kingdom, and other jurisdictions with data protection laws that grant specific rights regarding personal data. If you are located in these jurisdictions, the following applies in addition to our Privacy Policy.

2. Legal Basis for Processing

EBLIT processes your personal data on the following legal bases: (a) Contract Performance: processing necessary to perform the contract with you, including account creation, transaction processing, and dispute resolution; (b) Legitimate Interests: processing necessary for our legitimate interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights; (c) Legal Obligation: processing necessary to comply with applicable law, including financial record retention and law enforcement requests; (d) Consent: where you have given specific consent, such as for optional communications.

3. Your Rights Under GDPR

If you are located in the EEA or UK, you have the following rights: (a) Right of Access (Article 15): you have the right to obtain confirmation of whether we process your personal data and to receive a copy of that data; (b) Right to Rectification (Article 16): you have the right to request correction of inaccurate or incomplete personal data; (c) Right to Erasure (Article 17): you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations for financial and transaction records; (d) Right to Restriction of Processing (Article 18): you have the right to request restriction of processing in certain circumstances; (e) Right to Data Portability (Article 20): you have the right to receive your personal data in a structured, commonly used, machine-readable format; (f) Right to Object (Article 21): you have the right to object to processing based on legitimate interests; (g) Rights Related to Automated Decision-Making (Article 22): you have the right not to be subject to solely automated decisions that significantly affect you.

4. Data Retention Under GDPR

We retain personal data only for as long as necessary. Financial and transaction records are retained for seven years to comply with financial regulations. After seven years, we anonymize personal identifiers while retaining financial records for compliance purposes. Identity verification data is handled by Stripe and subject to Stripe's data retention policies. Identity photos taken during meetup transactions are deleted within 72 hours of transaction completion.

5. International Data Transfers

EBLIT is based in the United States. When we transfer personal data from the EEA or UK to the United States, we rely on Standard Contractual Clauses approved by the European Commission, or other appropriate safeguards as required by applicable law.

6. Data Protection Officer

EBLIT is currently a sole-founder platform and does not have a designated Data Protection Officer. Privacy inquiries should be submitted through the Support section of the Platform.

7. Right to Lodge a Complaint

If you believe we have processed your personal data in violation of applicable data protection law, you have the right to lodge a complaint with your local data protection supervisory authority. In the UK, this is the Information Commissioner's Office (ICO). In the EEA, this is the supervisory authority in your member state.

8. Exercising Your Rights

To exercise any of your data rights, please submit a request through the Support section of the Platform. We will respond within 30 days. We may need to verify your identity before processing your request. Requests are free of charge unless they are manifestly unfounded or excessive.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA): the right to know what personal information we collect, use, disclose, and sell; the right to request deletion of your personal information; the right to opt out of the sale of your personal information (note: EBLIT does not sell personal information); the right to non-discrimination for exercising your CCPA rights. To exercise your CCPA rights, contact us through the Support section of the Platform.