Privacy Policy
This policy explains how MatesMarket collects, uses, and protects your information when you use our student marketplace.
You’re in control. Access, export, or delete your data anytime.
No ads tracking. We don’t sell data or use ad pixels.
1. Information We Collect
Personal, marketplace, and technical data
Personal Information
- HKUST student email address (for account verification)
- Profile information (name, profile picture - optional)
- Account credentials (encrypted passwords)
- Communication messages between users
Marketplace Data
- Product listings (title, description, price, images)
- Interest expressions and inquiries
- Transaction history and communication logs
- Search queries and browsing activity
Technical Information
- Device information and browser type
- IP address and location data
- Login timestamps and session data
- Cookies and local storage data
2. Data Storage and Security
Secure cloud, encryption, and strict access controls
Secure Data Infrastructure
All your data is securely stored using enterprise-grade cloud infrastructure with built-in security protocols, automatic scaling, and real-time monitoring to ensure protection and availability.
We implement industry-standard security measures including:
- End-to-end encryption for data transmission and storage
- Multi-factor authentication and secure authorization protocols
- Regular security audits and vulnerability assessments
- Automated backups and disaster recovery plans
- Role-based access controls and user permission management
- SOC 2 Type II compliant infrastructure and data handling practices
3. How We Use Your Information
Operate the platform, improve service, and keep it safe
Platform Operations
- Account creation and verification
- Product listing and search functionality
- Facilitating buyer-seller communication
- Maintaining marketplace integrity
Service Improvement
- Analytics and usage patterns
- Performance optimization
- Feature development
- User experience enhancement
Security & Safety
- Fraud prevention and detection
- Terms of service enforcement
- Account security monitoring
- Community safety measures
Communication
- Account notifications
- Important updates
- Security alerts
- Platform announcements
4. Data Sharing and Third Parties
No selling data; sharing only when necessary
What We DON'T Do
- Sell, rent or disclose your personal information
- Share your personal information with advertisers or marketers
Third-Party Services We Use
- Cloud Infrastructure Providers: Secure hosting and content delivery networks
- Authentication Services: Industry-standard identity verification systems
- Essential Cookies: Required for platform functionality and user sessions
- Security Monitoring: Fraud detection and platform protection services
We may share information only in limited cases:
- When required by law enforcement or court orders
- To protect our rights, safety, or property
- Between users for legitimate transactions
- To business partners: statistical, non-personal insights only — no identifiers
5. Cookies and Tracking
Essential only; optional analytics are opt‑in
Essential Cookies
Required for authentication, security, and core functionality. Cannot be disabled.
Optional Cookies
Analytics, preferences, and search history. You can opt out in cookie settings.
No Tracking: We do not use third‑party tracking cookies, advertising pixels, or cross‑site tracking technologies.
6. Your Privacy Rights
Access, correct, delete, restrict, object, and export
Access Your Data
Request a complete copy of all personal data we have about you
Correct Information
Update or correct any inaccurate personal information
Delete Your Account
Permanently delete your account and all associated data
Data Portability
Export your data in a machine‑readable format
Restrict Processing
Limit how we use your data for specific purposes
Object to Processing
Object to certain types of data processing activities
7. Data Retention and Deletion
Keep while active; remove on deletion (with legal exceptions)
Retention Periods
- Active accounts: Data retained while account is active
- Deleted accounts: Data permanently removed within 30 days
- Legal requirements: Some data may be kept longer if required by law
- Security logs: Retained for 90 days for fraud prevention
When you delete your account, we will permanently remove:
- Your profile information and personal data
- All product listings and images
- Message history and communication logs
- Search history and preferences
- All cookies and stored session data
8. International Data Transfers
Compliant storage with encryption and safeguards
Your data may be stored and processed in secure data centers in different jurisdictions to ensure performance and redundancy. We ensure any international transfers comply with privacy laws.
- Appropriate technical and organizational safeguards
- Standard contractual clauses and adequacy decisions
- Compliance with GDPR, CCPA, and applicable regulations
- End‑to‑end encryption in transit and at rest
- Regular compliance audits and third‑party certifications
9. Children's Privacy
For students 18+; contact us if this is incorrect
Age Restriction: MatesMarket is designed for university students aged 18 and above. We do not knowingly collect personal information from anyone under 18. If you believe we have, please contact us immediately.
10. Changes to This Policy
We’ll notify you of significant updates
We may update this Privacy Policy to reflect changes in practices, technology, or law. When we make significant changes, we will:
- Email your registered address
- Display a prominent notice on the platform
- Update the “Last updated” date at the top
- Provide a summary of changes
11. Disclaimer and Limitations
A student‑run platform—use discretion
Platform Nature: MatesMarket is a student‑operated marketplace platform that facilitates connections between HKUST students. While we implement robust security measures and follow privacy best practices, users engage at their own discretion. Please exercise caution when sharing personal information and conducting transactions.
Contact Us About Privacy
If you have questions about this Privacy Policy, want to exercise your rights, or need to report a privacy concern, please contact us:
Email: hkustmarketplace@gmail.com
Subject Line: "Privacy Policy Inquiry - [Your Request Type]"
Response Time: We aim to respond within 72 hours