Privacy Policy

1. Who We Are

This Privacy Policy explains how Adrenaline Group LLC ("we," "us," "our") collects, uses, stores, and protects your personal data when you use the AdrenalineShop website at adrenalineshop.store (the "Site") or interact with us through any communication channel.

Adrenaline Group LLC is registered in Wyoming, USA (30 N Gould St, STE 4000, Sheridan, WY 82801) and acts as the data controller for all personal data processed in connection with the Site.

2. What Personal Data We Collect

2.1 Data You Provide Directly

Data	When collected	Purpose
First and last name	Registration, listing submission, contact form	Identity, communication
Email address	Registration, newsletter signup, contact form	Communication, account, marketing
Phone number	Registration, listing submission	Transaction communication
City and country	Listing submission, registration	Listing display, shipping calculation
Profile photo	Member registration (optional)	Account identification
Listing photos	Sell form submission	Published with listing
Listing details	Sell form submission	Published with listing
Messages & communications	Contact form, email, WhatsApp, Telegram, Messenger	Customer support, transaction management
Payment confirmation details	Transaction processing	Escrow service, fraud prevention

2.2 Data Collected Automatically

Data	Source	Purpose
IP address	Server logs (Vercel)	Security, fraud prevention
Browser type and version	Server logs	Site optimisation
Pages visited and time spent	Server logs	Site analytics
Cookie data	Browser	See Section 7

We do not collect or store credit card numbers, bank account details, or full payment credentials. All financial transactions are processed through Wise (for European payments) or Mercury (for US payments), which are independent regulated financial institutions subject to their own privacy policies.

3. How We Use Your Personal Data

We use your data only for the following purposes:

• To provide and operate our marketplace service — publishing listings, managing escrow transactions, communicating between buyers and sellers
• To process and manage transactions — collecting payments, releasing funds, issuing confirmations
• To communicate with you — responding to inquiries, providing transaction updates, resolving disputes
• To send newsletters and marketing communications — only if you have explicitly opted in (you may unsubscribe at any time)
• To prevent fraud and maintain security — verifying user identities, detecting suspicious activity, enforcing our Terms & Conditions
• To comply with legal obligations — responding to lawful requests from authorities, maintaining required records
• To improve our service — analysing how the Site is used, identifying and fixing issues

We do not sell your personal data to third parties. We do not use your data for automated profiling that produces legal effects. We do not serve third-party advertising on this Site.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data under the following legal bases as defined by the General Data Protection Regulation (GDPR):

Processing activity	Legal basis
Managing your account and transactions	Performance of a contract (Art. 6(1)(b))
Sending newsletters (opted-in subscribers)	Consent (Art. 6(1)(a))
Fraud prevention and security	Legitimate interests (Art. 6(1)(f))
Responding to legal requests	Legal obligation (Art. 6(1)(c))
Site analytics and improvement	Legitimate interests (Art. 6(1)(f))

5. Who We Share Your Data With

We share personal data only with the following categories of recipients, and only to the extent necessary:

• Supabase Inc. — our database and authentication provider (data stored on secure EU/US servers)
• Vercel Inc. — our website hosting provider (servers in USA/EU)
• Wise Payments Ltd. — payment processing for European transactions
• Mercury Financial Technology Inc. — payment processing for US transactions
• Formspree — contact form processing
• Buyers and sellers — limited contact details (email, phone) shared between transaction parties as necessary to complete a transaction
• Law enforcement or government authorities — when required by applicable law or valid legal process

All third-party service providers are required to handle your data securely and only for the specific purposes for which it is shared.

6. Data Retention

We retain your personal data for no longer than necessary for the purposes stated in this Policy:

Data type	Retention period
Account data (name, email, phone)	Until account deletion request, or 3 years of inactivity
Transaction records	7 years (US tax and accounting requirements)
Listing data (published)	Duration of listing + 1 year after removal
Communication records (emails, messages)	3 years from last communication
Newsletter subscriber data	Until unsubscribe request
Server logs and technical data	90 days
Dispute records	5 years from resolution

Upon expiry of the applicable retention period, data is securely deleted or anonymised.

7. Cookies

We use a small number of cookies that are essential for the operation of this Site. We do not use advertising cookies or third-party tracking cookies.

Cookie	Purpose	Duration
cookie_consent	Stores your cookie consent choice	1 year
supabase-auth-token	Keeps you logged in to your account (admin/members)	Session

You may disable cookies in your browser settings, but this may affect your ability to log in or use certain features of the Site. Our cookie consent banner allows you to accept or decline non-essential cookies on your first visit.

8. Your Rights

Regardless of where you are located, you have the following rights regarding your personal data:

• Right to access — request a copy of the data we hold about you
• Right to rectification — ask us to correct inaccurate data
• Right to erasure — request deletion of your data (subject to legal retention requirements)
• Right to restrict processing — ask us to limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests or for marketing purposes
• Right to withdraw consent — withdraw consent for newsletter or marketing communications at any time

To exercise any of these rights, contact us using the details in Section 17. We will respond within 30 days.

9. GDPR — Rights of EEA Residents

If you are a resident of the European Economic Area, all of the rights in Section 8 apply to you under GDPR. In addition:

• You have the right to lodge a complaint with your national data protection authority if you believe we have processed your data unlawfully
• Where data is transferred outside the EEA (to the USA), we rely on Standard Contractual Clauses or other approved transfer mechanisms to ensure adequate protection
• We do not engage in automated decision-making or profiling that produces legal or similarly significant effects

10. CCPA — Rights of California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following additional rights:

• Right to Know — the categories and specific pieces of personal information we have collected about you, and the purposes for which it is used
• Right to Delete — request deletion of personal information we have collected, subject to certain exceptions
• Right to Opt-Out of Sale — we do not sell personal information to third parties
• Right to Non-Discrimination — we will not discriminate against you for exercising your CCPA rights

To submit a CCPA request, contact us at the address in Section 17. You may designate an authorised agent to submit requests on your behalf by providing written authorisation.

11. Children's Privacy

Our Service is intended exclusively for individuals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it without delay.

12. Data Security

We implement appropriate technical and organisational security measures to protect your personal data, including:

• All data is stored on Supabase infrastructure with row-level security controls and encryption at rest
• The website is served over HTTPS (SSL/TLS encryption) at all times
• Access to user data is restricted to authorised personnel only, on a need-to-know basis
• Payment transactions are processed exclusively through regulated financial institutions (Wise, Mercury) — we do not store payment credentials
• Admin accounts require authenticated login with Supabase Auth

No method of internet transmission or electronic storage is 100% secure. While we use commercially reasonable measures, we cannot guarantee absolute security.

13. Data Breach Notification

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, we will:

• Notify the relevant supervisory authority within 72 hours of becoming aware of the breach (as required by GDPR Article 33), where applicable
• Notify affected individuals without undue delay when the breach is likely to result in high risk to their rights (GDPR Article 34)
• Comply with applicable US state data breach notification laws, which vary by state but generally require notification within 30–90 days

Notifications will be sent to the email address on file. Please ensure your contact information is kept up to date.

14. International Data Transfers

Adrenaline Group LLC is based in the United States. If you are located outside the USA, your data will be transferred to and processed in the USA. For EEA residents, such transfers are subject to appropriate safeguards as required by GDPR. Our service providers (Supabase, Vercel) maintain data processing agreements and standard contractual clauses to ensure compliant international transfers.

15. Marketing Communications

We may send you newsletters and updates about new listings, features, and news related to AdrenalineShop, but only if you have explicitly opted in by ticking the newsletter checkbox during registration or subscribing via the homepage form.

You may unsubscribe from marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email
• Contacting us directly at the address in Section 17

Transactional communications (order confirmations, shipping updates, dispute notifications) are not affected by marketing opt-out, as they are necessary for your use of the Service.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where the changes are material, notify you by email or by prominent notice on the Site. Your continued use of the Service after any changes constitutes acceptance of the updated Policy.

17. Contact & Complaints

For any questions, requests, or complaints regarding this Privacy Policy or your personal data, please contact us:

Adrenaline Group LLC
30 N Gould St, STE 4000
Sheridan, WY 82801, USA
Use our contact form

We aim to respond to all privacy requests within 30 days. If you are not satisfied with our response, you have the right to complain to your local data protection authority.