Privacy Policy

Last updated: 23rd March 2026

1. Who we are

Skateboard Stash ("we", "us", "our") is operated by SKATEBOARD STASH PTY LTD, 81696438669, located at PO BOX 608, MIAMI, QUEENSLAND, AUSTRALIA 4220. We are the data controller responsible for your personal information.

Contact: info@skateboardstash.com

2. Information we collect

Information you provide

  • Account details: email address, display name, password (encrypted)
  • Profile information: bio, avatar, currency preference, timezone
  • Collection data: skateboard details, photos, purchase information, valuations, notes
  • Marketplace listings: item descriptions, photos, pricing, location
  • Communications: forum posts, replies, direct messages between members
  • Payment information: processed securely by Stripe — we never see or store your card details

Information collected automatically

  • Usage data: pages visited, features used, time spent (only with your analytics consent)
  • Device information: browser type, operating system, screen size
  • IP address: used for security, fraud prevention, and approximate location for currency defaults
  • Cookies: see our Cookie Policy for details

3. How we use your information

  • To provide and maintain your account and collection catalogue
  • To process your subscription payments via Stripe
  • To enable community features (forum, marketplace, messaging) when activated
  • To send transactional emails (account confirmation, password reset, payment receipts)
  • To improve our service based on usage patterns (only with analytics consent)
  • To prevent fraud and ensure security
  • To comply with legal obligations

We do NOT sell your personal information. We do NOT use your data for advertising. We do NOT share your collection data with other users unless you explicitly enable public sharing in your settings.

4. Legal basis for processing (GDPR)

For users in the EU/UK, we process your data under the following legal bases:

  • Contract: providing the service you subscribed to
  • Consent: analytics cookies, marketing communications
  • Legitimate interest: fraud prevention, service improvement, security
  • Legal obligation: tax records, law enforcement requests

5. Who we share your data with

We share data only with service providers who help us operate the platform:

  • Supabase (database hosting, authentication) — your collection data is stored here
  • Stripe (payment processing) — handles all payment card information
  • Vercel (website hosting) — serves the website
  • Cloudflare (image storage and delivery) — stores your uploaded photos
  • Resend (email delivery) — sends transactional emails
  • [Analytics provider, if applicable] — only with your consent

We require all service providers to protect your data and only process it on our behalf. We do not sell or rent your personal information to any third party.

6. International data transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States and Australia. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) where required by GDPR.

7. Data retention

  • Account data: retained while your account is active, deleted within 30 days of account deletion
  • Collection data: retained while your account is active; exported on request; deleted on account deletion
  • Payment records: retained for 7 years as required by tax law
  • Forum posts and messages: retained while your account is active; deleted on account deletion
  • Server logs: retained for 90 days for security purposes

8. Your rights

All users

  • Access: view all data we hold about you (available in your account settings)
  • Export: download your full collection as CSV at any time
  • Correction: update your profile and collection data at any time
  • Deletion: delete your account and all associated data

EU/UK residents (GDPR)

You additionally have the right to:

  • Restrict processing of your data
  • Object to processing based on legitimate interest
  • Data portability (receive your data in a machine-readable format)
  • Withdraw consent at any time (for analytics/marketing cookies)
  • Lodge a complaint with your local data protection authority

California residents (CCPA/CPRA)

You have the right to:

  • Know what personal information we collect and how it is used
  • Delete your personal information
  • Opt-out of the sale of personal information (we do not sell your data)
  • Non-discrimination for exercising your privacy rights

Australian residents

Under the Australian Privacy Act 1988 and Australian Privacy Principles (APPs), you have the right to access and correct your personal information. Contact us at info@skateboardstash.com to make a request.

9. Cookies

We use cookies for essential site functionality (authentication, security). With your consent, we may use analytics cookies. See our Cookie Policy for full details. You can manage your preferences at any time using the cookie settings in the banner or by contacting us.

10. Children

Skateboard Stash is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encryption at rest, row-level database security, and regular security reviews. However, no method of transmission or storage is 100% secure.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or a prominent notice on our site. Your continued use of the service after changes constitutes acceptance of the updated policy.

13. Contact us

For privacy-related questions, requests, or complaints:

  • Email: info@skateboardstash.com
  • SKATEBOARD STASH PTY LTD
  • PO BOX 608, MIAMI, QUEENSLAND, AUSTRALIA 4220

We aim to respond to all requests within 30 days.