Privacy Policy
Last updated: 11 September 2026
This policy explains what personal data AA Store collects when you use truefind.eu, why we collect it, how long we keep it, and the rights you have over it. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR).
1. Who is responsible for your data
AA Store operates truefind.eu and is the data controller for the personal data described in this policy.
AA Store is a marketplace. Some products are sold by independent sellers. When you buy from an independent seller, that seller receives the data needed to fulfil your order and acts as a data controller for that purpose, under their own privacy policy.
For any privacy question, write to privacy@truefind.eu.
2. What we collect
- Account data — name, email address, password (stored hashed, never in readable form), and your phone number if you give it.
- Order data — billing and delivery address, the items you bought, order value, invoices, and delivery status.
- Payment data — handled by our payment providers. We receive confirmation of payment and the last four digits and card type. We never see or store your full card number.
- Support data — the messages, returns and complaints you send us.
- Technical data — IP address, browser and device type, pages viewed, and referring page.
- Marketing data — your newsletter subscription status and whether you opened our emails.
3. Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, handling returns | Performance of a contract |
| Managing your account | Performance of a contract |
| Keeping invoices and tax records | Legal obligation |
| Preventing fraud and securing the site | Legitimate interest |
| Improving the store and our product range | Legitimate interest |
| Marketing emails and non-essential cookies | Your consent |
4. How long we keep it
- Account data — while your account is open, then 12 months after you close it.
- Order and invoice data — 10 years, as tax law requires.
- Support messages — 3 years after the case is closed.
- Marketing consent — until you withdraw it.
- Technical logs — 12 months.
5. Who we share it with
We share personal data only with parties who need it to run the service:
- Independent sellers, for the orders they fulfil.
- Payment providers, to take payment.
- Delivery carriers, to deliver your parcel.
- Our hosting and email providers.
- Public authorities, where the law requires it.
We do not sell your personal data, and we do not share it for anyone else's advertising.
6. Transfers outside the EU
Where a provider processes data outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision to protect it.
7. Your rights
Under the GDPR you may ask us to:
- give you a copy of the data we hold about you (access);
- correct data that is wrong (rectification);
- delete your data (erasure), where we are not legally required to keep it;
- restrict how we use it, or object to our use of it;
- send your data to another provider in a machine-readable format (portability);
- withdraw consent at any time, including by using the unsubscribe link in any marketing email.
Write to privacy@truefind.eu and we will answer within one month. If you are not satisfied, you may complain to the data protection authority in the EU country where you live.
8. Cookies
We use cookies that are strictly necessary to run the store — keeping you signed in and remembering your basket. These do not need consent. Any analytics or marketing cookies are set only after you accept them in the cookie banner, and you may change your choice at any time.
9. Security
The whole site runs over an encrypted HTTPS connection. Passwords are stored hashed. Access to personal data inside our systems is limited to staff who need it.
10. Children
This store is not intended for children under 16. We do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.
11. Changes
If we change this policy we will update the date at the top. For significant changes we will tell you by email or by a notice on the site.
Company details
The following details must be completed by the store owner before this page is relied on:
- Registered company name: [to be completed]
- Registered address: [to be completed]
- Company registration number: [to be completed]
- VAT number: [to be completed]