Version 1.0 · Effective: August 31, 2026
1. Purpose and scope
This Privacy Policy explains how Jersium collects, uses, stores, shares, and protects personal data when people access or use Jersium.
It applies to Users, Guests, Buyers, Sellers, Fulfillment Team members, rights holders, reporters, support contacts, visitors, and other people whose personal data is processed in connection with Jersium.
This Privacy Policy is the primary legal home for personal-data processing, privacy rights, privacy requests, personal-data retention criteria, international transfers, and data-sharing transparency. Feature-specific documents may explain the role-specific effect of privacy rules, but they do not replace this Privacy Policy. Mandatory privacy rights always apply.
2. Data controller and contacts
Jersium is operated by:
TimChief Ventures P.S.A. Meteorologów 13/29 40-526 Katowice, Poland Company Number (KRS): 0001077591 · NIP: 9542863191 · VAT No.: PL9542863191
For this Privacy Policy, "Jersium", "we", "us", and "our" refer to TimChief Ventures P.S.A. as the controller of personal data processed for Jersium platform purposes, unless a specific feature, provider, or legal relationship states otherwise.
Privacy requests: [email protected]. Legal notices that are not privacy requests: [email protected].
United Kingdom representative (UK GDPR Article 27): Yahya Barakat 34 Cunnery Rd Manchester, M60 3WG, United Kingdom
UK data subjects may contact the UK representative, in addition to or instead of Jersium, on matters relating to the processing of their personal data under UK data protection law.
3. Key terms
Personal data means information relating to an identified or identifiable person. Processing means any operation involving personal data, including collection, storage, use, disclosure, review, restriction, deletion, or retention. Controller means the party that determines why and how personal data is processed; processor means a service provider that processes personal data for a controller under instructions. Capitalised terms have the meanings given in the Terms of Service or the relevant Platform Policy unless this Privacy Policy states otherwise.
4. When this Privacy Policy applies
This Privacy Policy applies when you browse Jersium, create or use an Account, buy or sell through the marketplace, use Guest checkout or the guest order portal, submit User Content, use community features, use Digital Collection features, submit E-VER materials, claim Digital Rewards, contact support, submit reports, respond to disputes, complete identity verification, or otherwise interact with Jersium.
Third-party websites, payment pages, social platforms, shipping services, identity-verification providers, or other external services may have their own privacy notices, which apply to their own processing where they act as independent controllers.
5. Personal data we collect
Depending on how you use the Platform, Jersium processes:
- account and identity data: name, username, email address, password credentials, age or eligibility confirmation, account type, language, region, settings, security details, Account status;
- buyer legal name: where an Order includes an item sold by a Private Seller, the full legal name of the purchasing person, recorded as part of the Order and used as an identity anchor if identity verification is later required in a contested-return process;
- contact and address data: billing address, shipping address, return address, phone number, delivery information;
- profile and community data: avatar, banner, bio, profile settings and statistics, public posts, comments, reactions, reviews, ratings, photos, videos, friends and social features, visibility settings;
- marketplace and transaction data: cart contents, Orders, Transaction IDs, listings, prices, fees, taxes, refunds, returns, disputes, Buyer Protection records, shipment tracking, seller performance information, transaction history, and the seller identity and contact information recorded as it existed at the time of purchase, including original-language and translated versions of seller information shown to the buyer;
- seller and verification data: seller setup information, business details, identity or business verification information, tax information (including the tax data described in the tax and seller reporting section below), payout details, bank account information, beneficial-owner or representative details, lawful-sourcing materials, and related status records;
- contested-return identity-verification data: the data described in the section on identity verification in contested returns below;
- payment and payout data: payment status, payment-method identifiers, tokens, limited card details such as last digits, payout status, chargeback information, and payment-provider records. Jersium does not store full payment-card details; these are handled by our payment service provider;
- User Content and submitted materials: listing photos, Product comments, proof materials, E-VER materials, Digital Collection materials, Product Data suggestions, support attachments, report evidence, messages, and file metadata;
- dispute evidence: the materials described in the section on messages, support, and disputes below;
- communications data: Marketplace Chats, User Chats, support messages, report messages, return messages, dispute messages, emails, notifications, translated or machine-assisted versions, and survey responses;
- Digital Collection, E-VER, and reward data: collection entries, collection goals, E-VER requests and outcomes, vouchers, badge and quest progress, referral data, and eligibility records;
- technical and usage data: IP address, device and browser information, identifiers, logs, session data, security events, cookie identifiers, preferences, approximate location derived from IP or region settings, pages viewed, feature use, error logs;
- marketing and preference data: cookie choices, communication preferences, consent and opt-out records; and
- legal, compliance, and safety data: reports, notices, rights-holder communications, product-safety reports, sanctions-screening results, fraud signals, moderation records, investigation records, legal requests, and authority correspondence.
6. Special-category and sensitive information
Jersium does not ask Users to submit special-category personal data, criminal-offence data, biometric data, health information, political opinions, religious beliefs, or similarly sensitive information unless a specific lawful process requires it. Identity verification in contested returns does not involve facial recognition or other biometric matching.
Users should not include sensitive personal data in listings, messages, photos, E-VER materials, reports, support requests, or community content unless the relevant Platform flow specifically requires it. If special-category personal data is processed, Jersium does so only where both a lawful basis and an additional condition required by applicable EU or UK data-protection law apply, such as explicit consent, the establishment, exercise, or defence of legal claims, or another condition permitted by law. Criminal-offence data is processed only where applicable law permits and provides the required safeguards.
7. Sources of personal data
Jersium collects personal data from: you; other Users involved in your transactions, chats, disputes, returns, or reports; service providers and partners (payment, payout, verification, shipping, fraud-prevention, analytics, email, hosting, support, translation); public or third-party sources where relevant for Product Data, rights-holder reports, counterfeit checks, product-safety checks, sanctions screening, fraud prevention, seller verification, or legal compliance; and automatic technical collection (cookies, logs, device information, security signals). Where Jersium receives personal data about a person from someone else, Jersium provides privacy information through this Privacy Policy, the relevant Platform flow, or another appropriate notice where required.
8. Required and optional data
Some personal data is required to use Jersium or a specific feature; if legally required or operationally necessary information is missing, inaccurate, expired, or refused, Jersium may be unable to provide the relevant feature, complete a transaction, verify a Seller, resolve a contested return, process a payout, handle a request, or comply with a legal obligation. Optional data (certain profile fields, public content, marketing preferences, optional community features) affects only the relevant optional feature.
9. Why we use personal data and lawful bases
Jersium processes personal data only where we have a lawful basis: performance of a contract, compliance with a legal obligation, legitimate interests, consent, or another basis permitted by applicable law. The main purposes are:
- providing Accounts, the marketplace, checkout, payments, shipping support, returns, Buyer Protection, disputes, seller tools, digital services, and transaction records — contract performance, legal obligations, legitimate interests;
- seller setup, verification, payout eligibility, and seller compliance (including the related tax and seller-verification data described elsewhere in this Policy) — contract performance, legal obligations, legitimate interests;
- identity verification in contested returns — legitimate interests in dispute integrity, fraud prevention, protecting the parties to a transaction, and enabling the establishment, exercise, or defence of legal claims, as described in the identity-verification section below;
- E-VER, Digital Collection, Digital Rewards, vouchers, badges, referrals — contract performance, consent where required, legitimate interests;
- hosting, displaying, translating, moderating, and managing User Content and community features — contract performance, legitimate interests, legal obligations, consent where required;
- support, reports, complaints, IP notices, counterfeit reports, product-safety reports, privacy requests, legal and authority requests — contract performance, legal obligations, legitimate interests, legal claims;
- fraud prevention, payment security, sanctions screening, chargeback defence, counterfeit detection, and platform integrity — legitimate interests and legal obligations. Where we rely on legitimate interests here, the interests are specific: protecting Buyers and Sellers from payment fraud, return-substitution fraud, counterfeit goods, account takeover, and marketplace manipulation, and protecting Jersium against the resulting financial and legal exposure. The interests of the other party to a transaction — the person who would otherwise bear the fraud — are part of this assessment;
- Product Data, catalogue, search, price and rarity information, and platform integrity — legitimate interests, contract performance;
- service, transaction, security, and legal communications — contract performance, legal obligations, legitimate interests;
- marketing communications and personalisation — consent, or legitimate interests where applicable law permits;
- cookies and similar technologies — legitimate interests for strictly necessary personal-data processing; consent where required for non-essential device storage or access under applicable EEA or UK electronic-communications rules; and applicable US privacy rights and opt-outs, all as described in the Cookie Policy;
- improving, testing, securing, debugging, and developing Jersium — legitimate interests, contract performance, consent where required; and
- accounting, tax, invoicing, DAC7 reporting, sanctions, regulatory, product-safety, and consumer-protection obligations — legal obligations, legitimate interests, legal claims.
You may object to processing based on legitimate interests where applicable law gives that right.
10. Marketplace, payments, shipping, returns, and taxes
Jersium processes marketplace and transaction data to enable Buyers and Sellers to use the marketplace, complete checkout, process payments through our payment service provider, calculate fees and taxes, arrange shipping and tracking, manage returns and refunds, support Buyer Protection, handle disputes, manage payouts, create invoices, receipts, and corrective invoices, and maintain records required by law.
Jersium records the seller identity, contact details, and additional seller information shown for a transaction as they existed at the time of purchase. Where seller information is translated for the buyer, Jersium stores both the original-language version and the translated version presented to the buyer, so the information relevant to the contract can be reproduced later.
11. Guest buyers
Guests may purchase without an Account and may use order-related messaging, dispute communication, Buyer Protection tools, and, where applicable, identity verification, through the guest order portal. Access may require secure verification through the email address or order details connected to the purchase. Guest data is processed in the same way as the equivalent Account data.
12. Sellers as independent recipients of buyer data
To fulfil an order, a Seller receives the Buyer's name, delivery address, and order details, and may receive return-related information. The Seller is an independent controller of that data. The Seller Terms restrict the Seller's use of it to order fulfilment, delivery, returns, and statutory obligations (such as tax and accounting); Sellers must not use Buyer data for marketing, must not retain it beyond necessity, and are responsible for their own compliance with data-protection law. Breach of these restrictions is grounds for suspension. Commercial Sellers may have their own legal duties to Buyers in respect of that data.
13. Seller verification, payouts, and compliance checks
Jersium processes seller verification, identity, business, tax, bank, payout, ownership, representative, lawful-sourcing, product-safety, and compliance data to set up sellers, verify eligibility, support payouts, prevent fraud, comply with payment-provider requirements, meet tax and regulatory duties (including the DAC7 and INFORM reporting described elsewhere in this Policy), perform sanctions screening, and protect marketplace integrity. Verification may involve our payment service provider, verification providers, and fraud-prevention tools; depending on the flow, Jersium receives documents, extracts, verification status, risk indicators, or confirmation records.
14. Identity verification in contested returns
When it may apply. Jersium does not collect identity documents at return initiation or for ordinary, uncontested returns. Jersium may require identity verification when resolving a contested return, including where Jersium is issuing a full or partial refund to the Buyer over the Seller's objection. The request is initiated by a Jersium Admin as part of the dispute-resolution process, not by an automatic return trigger.
Why. Returned-goods disputes can leave one party exposed to loss or an independent legal claim. Jersium uses identity verification as a limited recourse and fraud-control measure where it is necessary to support a contested return outcome, protect the parties to the transaction, and enable a legitimate legal claim to be established, exercised, or defended. Jersium's legitimate-interest assessment reflects that dispute adjudication is the primary control and identity verification is used only in the narrower cases where the additional recourse is justified.
What we check. Where identity verification is required, Jersium checks an accepted identity document showing the Buyer's legal name and date of birth and confirms that it corresponds to the purchasing person or Order information available to Jersium. For Orders containing a Private-Seller item, the Buyer provides the purchasing person's full legal name at checkout and that name is used as the identity anchor. The delivery recipient may be a different person.
How the check is carried out. A Jersium Admin initiates the verification. The check may use trained staff, automated tools, a specialist identity-verification provider, or a combination. Where automated tools assist the check, a decision to reject a verification is always reviewed by a member of our staff before it takes effect, and the Buyer can contact Jersium to correct an error or provide further information. Jersium does not use facial recognition or other biometric matching as part of this check.
What we keep — and what we never keep. Jersium does not retain the identity-document image. It is kept only for the short period needed to complete the verification and is deleted as part of the verification decision. Jersium retains only the verified legal name, date of birth, verification status, the time and method of verification, and internal records showing that verification was completed. Jersium does not retain the document number, address, signature, national identification number, issuing authority, nationality, or other unrelated details appearing on the document. Uploads that are never completed are deleted automatically after a short period.
Re-use. Where a previous successful verification remains suitable for a later contested-return process and corresponds to the same verified legal name, Jersium may re-use the existing verification record rather than request the document again.
If verification cannot be completed. In a non-statutory Platform dispute, inability to complete a required identity check may affect the Platform remedy Jersium can issue. Mandatory statutory refund rights remain unaffected.
Disclosure. Identity-document images are never provided to Sellers. Where Jersium resolves a contested return by issuing a refund to a Buyer over a Seller's objection, and where reasonably necessary and permitted by law, Jersium may disclose to that Seller the minimum verified Buyer information needed to establish, exercise, or defend a legal claim arising from the transaction or return. Jersium may also provide information to competent authorities on an appropriate request. Every request and disclosure is logged, disclosure is limited to the permitted purpose, and the information may not be used for anything else.
15. Messages, support, disputes, and dispute evidence
Jersium processes chats, support messages, reports, return and dispute records, and related communications to provide support, enforce Platform Policies, resolve transactions, protect users, comply with law, and handle legal claims. Private Communications are not public but may be reviewed where necessary for support, dispute handling, fraud prevention, safety, legal compliance, moderation, translation, security, or enforcement.
Dispute evidence — photographs, videos, documents, packaging and label images, and related materials submitted in a return, Buyer Protection, authenticity, or chargeback process — is used for that dispute, the related transaction, fraud prevention, the establishment, exercise, or defence of legal claims, and payment-dispute defence. Where a Platform process requires evidence to be shared with the other party to the transaction, the flow indicates this before submission; some evidence is reviewed by Jersium only, and the other party receives the outcome and reasons instead. Authenticity case files are retained for 24 months for appeals and rights-holder cooperation. Dispute evidence may be provided to payment providers, card issuers, and dispute processors in connection with a payment dispute.
16. Tax and seller reporting (DAC7 and US INFORM Consumers Act)
Jersium is a reporting platform operator under the Polish implementation of Council Directive (EU) 2021/514 ("DAC7"). Where the rules apply, Jersium is legally required to collect, verify, and report to the Polish tax administration (Krajowa Administracja Skarbowa) information about Sellers and their transactions, which is exchanged with the tax authorities of other EU member states.
The reported data may include the Seller's legal name, primary address, tax identification number and issuing state, VAT identification number, business registration number, date of birth (individuals), financial account identifier and account-holder name, and quarterly transaction totals (consideration, fees and commissions, and number of transactions). The legal basis is compliance with a legal obligation. Jersium may freeze payouts or restrict an account where required tax data is missing, incomplete, or unverifiable, as set out in the Seller Terms.
For US marketplace activity, Jersium is also subject to the US INFORM Consumers Act. Where a Seller meets the Act's thresholds, Jersium is legally required to collect, verify, and keep current the Seller's bank account information, government-issued identification, tax identification, and contact information, and, above the Act's disclosure threshold, to disclose the Seller's identity and contact information on listings or order pages as the Act requires. The legal basis is compliance with a legal obligation.
DAC7, INFORM, and related compliance records are retained for the periods required by the applicable laws.
17. Cookies, analytics, personalisation, and marketing
Jersium uses cookies and similar technologies as described in the Cookie Policy and the cookie choices on the Platform. In the EEA and UK, non-essential device storage or access is used only with the required consent unless an exemption applies. In the United States, Jersium provides applicable state-law privacy opt-outs and honours recognised universal opt-out signals where required. Marketing communications are sent where you consent, where you request them, or where applicable law allows contact about similar services; you can opt out at any time. Personalisation and recommendations use Account, marketplace, collection, and preference data; adjust these through the available settings.
18. Automated tools and human review
Jersium uses automated tools for security, payment risk, fraud checks, sanctions screening, content and product-data matching, search ranking, translation, and platform integrity. Some tools affect feature visibility, eligibility checks, or whether manual review is required. Jersium is not required to disclose fraud rules or risk logic where disclosure would compromise security or enforcement. Where applicable law gives a right not to be subject to a solely automated decision with legal or similarly significant effects, Jersium provides the required information, human review, and contestation route; identity-verification rejections are always reviewed by a person, and account restrictions and moderation reviews involve human decisions as described in the User Content Rules.
19. Sharing personal data
Jersium shares personal data where necessary for the purposes in this Privacy Policy. Recipients include:
- the other party to your transaction — Sellers receive Buyer order data as described above; Buyers see seller identity and contact information; parties to a dispute may receive relevant evidence as described above;
- our payment service provider, Ryft Pay Ltd, which processes payment, payout, verification, chargeback, and related personal data to provide regulated payment services for Jersium transactions, together with the card networks, banks, acquirers, and settlement partners it uses. Depending on the transaction, payment data may be processed by settlement partners outside your country; transfers are protected as described below;
- identity, business, KYC/KYB, sanctions-screening, fraud-prevention, and verification providers;
- shipping carriers, tracking providers, and delivery-related services;
- hosting, storage, analytics, email, notification, support, translation, logging, monitoring, and technical providers;
- tax, accounting, invoicing (including KSeF where applicable), audit, legal, insurance, and professional advisers;
- rights holders, reporters, and affected parties where needed for IP, counterfeit, product-safety, or legal processes;
- tax authorities (including KAS, other EU tax authorities via DAC7 exchange, and US federal and state tax authorities), law enforcement, courts, regulators, customs, consumer-protection, product-safety, and supervisory authorities where legally required or appropriate; and
- potential or actual acquirers, investors, or successors in connection with a business transaction, subject to appropriate safeguards.
Jersium does not sell personal data. Jersium does not share personal data for cross-context behavioural advertising or process personal data for targeted advertising, as those terms are defined by applicable privacy law.
20. International transfers
Jersium is based in Poland and processes personal data primarily in the European Economic Area. Where providers or recipients are located outside the EEA or the UK — including payment settlement partners, hosting, analytics, or support providers — Jersium uses a lawful transfer mechanism where required: an adequacy decision, the EU Standard Contractual Clauses, the UK International Data Transfer Agreement or UK Addendum, the EU-US Data Privacy Framework and its UK Extension, or another mechanism permitted by law, selected per provider in line with Jersium's processor inventory.
21. How long we keep personal data
Jersium keeps personal data only as long as necessary for the purposes in this Privacy Policy, unless a longer period is required or permitted by law. Retention criteria include: account data while the Account exists plus a limited period after closure; transaction, payment, invoice, corrective-invoice, tax, and accounting records for statutory periods; seller verification, DAC7, INFORM, and compliance records for the periods required by the relevant laws; contested-return identity-verification records (verified name, date of birth, status, and metadata) for as long as reasonably necessary for the transaction, platform security, and legal claims — the document image itself is never retained; authenticity case files for 24 months; dispute, Buyer Protection, chargeback, and evidence records while needed for the dispute, fraud prevention, and legal claims; User Content per Platform settings and legal limits; logs and analytics per operational and security need; and backups for a limited period after deletion from active systems. Where a specific Platform area states an exact period, that period applies.
22. Account deletion and deletion requests
Use My Account → Delete Account to request deletion of your Account. Jersium may require re-authentication or another security step before the request is accepted. If you cannot access your Account, use Jersium's login-recovery or login-support process. The privacy contact remains available for data-protection rights and questions, but ordinary Account deletion is completed through the Account-deletion flow where you have access to it.
Deletion may be delayed or limited by outstanding Orders, open disputes, active investigations, unpaid amounts, open payouts, chargebacks, legal obligations, tax and accounting rules, fraud-prevention needs, or legal claims, and does not automatically remove records Jersium must or may retain under applicable law.
23. Your privacy rights
Jersium provides all Users with a common set of privacy rights. You may request access to your personal data, correction of inaccurate personal data, deletion of personal data, restriction of certain processing, and a portable copy of eligible personal data. You may also object to certain processing, withdraw consent where processing is based on consent, request information about the categories of third parties to which Jersium has disclosed personal data about you, and contest certain automated decisions where applicable.
If Jersium refuses or limits a privacy-rights request, you may ask Jersium to review that decision. Jersium may need to verify your identity or clarify the scope of your request before acting on it.
These rights are subject to applicable legal requirements and exceptions. For example, Jersium may need to keep certain records after a deletion request, as described in the retention and Account-deletion sections above.
Applicable law may give you additional privacy rights or impose different conditions, response periods, appeal rights, or remedies. Nothing in this section limits those mandatory rights.
Privacy requests and appeals may be submitted to [email protected]. Where an Account-based tool is available for a request, such as Account deletion, you may also use that tool.
24. Consent and withdrawing consent
Where processing is based on consent, you may withdraw it at any time through the relevant settings, unsubscribe link, cookie settings, or privacy channel. Withdrawal does not affect processing before withdrawal or processing based on another lawful basis.
25. Security
Jersium uses technical and organisational measures appropriate to the risk, including access controls, authentication, encryption where appropriate, logging, monitoring, provider controls, staff access limits, dedicated short-lived encrypted storage for identity-verification uploads, and security review processes. No online service is completely secure; keep your login details safe and tell us if you suspect unauthorised access. Where a personal-data breach requires notification under applicable law, Jersium will notify the authority and affected people as required.
26. Children
Jersium is not intended for children. You must be at least 18 to create an Account or use transactional features. If Jersium believes an underage person is using restricted features, Jersium may restrict access, close the Account, delete data where appropriate, or request verification. If you believe a child has provided personal data to Jersium, contact [email protected].
27. Data about other people
Do not provide another person's personal data unless you have the right to do so and the flow requires or allows it (for example, a delivery recipient or a business representative). You are responsible for the accuracy of, and your authority to provide, that information. Doxxing and misuse of others' data are prohibited under the User Content Rules.
28. Regional rights and complaints
The common privacy-request and review process described above is available to all Users. Applicable law may also provide specific complaint, enforcement, or regulatory routes. In the EEA, you may complain to the competent data-protection supervisory authority; in Poland, this is the President of the Personal Data Protection Office (Prezes UODO). UK users may contact the Information Commissioner's Office. US users may contact the competent state attorney general or the Federal Trade Commission where applicable. Where local law requires additional notices or mechanisms, Jersium provides them through regional notices or Platform information.
29. Changes to this Privacy Policy
Jersium may update this Privacy Policy to reflect legal requirements, Platform development, provider changes, or operational changes. Where required by law, Jersium will provide notice of material changes or request consent where consent is required; an updated Privacy Policy applies to processing after its effective date. Jersium will not treat continued use as consent where valid consent is legally required.
