Privacy Policy
Last updated 19 October 2026
This explains what personal data Tafly collects, why, and what you can do about it.
What we collect
Account: your email address.
Sellers: shop name, legal name, WhatsApp number, location, and for companies the company name and registration number.
Activity: your reservations, listings, notifications and basic usage statistics (pages visited, without advertising cookies).
Why we use it
To run the marketplace: sign-in, reservations, notifications and seller verification.
To keep Tafly safe and prevent fraud.
To improve the service using aggregated statistics.
Who sees it
Buyers see a seller's shop name, area and WhatsApp number. A seller's legal name and company registration are only visible to Tafly.
Sellers see the booking code and deposit of reservations on their items.
Service providers that host Tafly: Supabase (database, EU – Ireland), Vercel (website), Resend (email). We do not sell personal data.
Your rights
You can ask us for a copy of your data, to correct it, or to delete your account by writing to hello@tafly.co.
If you are in the EU/EEA you can also complain to your data protection authority (in Norway: Datatilsynet).
Retention
We keep reservation records for as long as needed for accounting and dispute handling, and delete inactive accounts on request.