Privacy policy

Who we are

ShamAuto (shamauto.ie) is an electric-vehicle marketplace for the Republic of Ireland, operated by Ihar Baikou trading as ShamAuto, based in Ireland. Ihar Baikou trading as ShamAuto is the data controller for the personal data described here. For any privacy question or to exercise your rights, contact privacy@shamauto.ie.

What we collect, why, and our legal basis

• Account data - your email, name, password (stored hashed by our authentication provider), and account type (private seller or dealer; dealers also provide a business name, page slug and optional blurb). Purpose: to create and run your account. Legal basis: performance of a contract (our terms with you).
• Listing data - the details you enter to advertise a car (make/model/variant or your manual entry, year, mileage, price, county, optional battery State-of-Health and an optional battery-diagnostic screenshot, photos, and your chosen contact preferences). Purpose: to publish your advert. Legal basis: performance of a contract. Your phone number is shown to buyers only if you enable phone contact, and only when a buyer clicks to reveal it.
• Buyer enquiries - when you message a seller through a listing, we relay your name, email and message to that seller by email so they can reply to you. We do NOT store the content of your message or your email in our database; it is sent by email only (data minimisation). Legal basis: legitimate interest (connecting buyers and sellers, which is the purpose of the site).
• Contact events - we record that a "phone reveal" or "message sent" happened on a listing, as an anonymous count, to measure how well the marketplace works. These records contain no personal data (no buyer identity). Legal basis: legitimate interest (operating and improving the service).
• Feature suggestions - if you use our "Suggest a feature" form, we store what you send (who you are - dealer, private seller or buyer - a title and a description), plus your account id if you are logged in. We collect this only to improve the product, keep it to a minimum, and never show it publicly. If you delete your account, your suggestions are anonymised (your account link is removed). Legal basis: legitimate interest (improving the service).
• Analytics - if you consent, Google Analytics helps us understand site usage (see our Cookie Policy). Legal basis: consent. No analytics runs until you accept.

Who processes your data (our providers)

We use trusted providers ("processors") to run the service: Supabase (database and authentication, hosted in the EU/Ireland region), Vercel (website hosting), Resend (sending our emails), and Sentry (error monitoring, EU region, to detect and fix faults). Where a provider processes data outside the EU/EEA, that transfer is covered by appropriate safeguards (such as the European Commission's Standard Contractual Clauses). We do not sell your personal data, and we do not show third-party ads.

How long we keep it

• Listings follow a 60-day life; sold listings stay visible for 30 days, then are hidden. Expired/old listings are removed from public view automatically.
• Account data is kept while your account is open. If you delete your account, your profile, your listings, their photos and the related contact-event records are deleted (cascade).
• Anonymous contact-event counts may be kept for service analytics.

Your rights (GDPR)

You have the right to access, correct, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. You can edit your profile and listings, and delete your account (which erases your data) from your account settings. To make any other request, email privacy@shamauto.ie. You also have the right to lodge a complaint with the Irish Data Protection Commission (dataprotection.ie).

Changes

We may update this policy; the "last updated" date shows when. Material changes will be made clear on the site.