Privacy Notice | Link 345 Cayman Islands Marketplace

Who We Are

Link345 is operated by Sands Ltd, a Cayman Islands ordinary company licensed and operating in the Cayman Islands. When we refer to “Link345,” “we,” “us,” or “our” in this notice, we mean Sands Ltd.

We process personal data under the Cayman Islands Data Protection Act, which is our primary data protection framework. Where the EU General Data Protection Regulation (GDPR) or the UK GDPR applies to you, we honour the equivalent rights those laws provide — access, correction, erasure, portability, and objection — through the tools and contact details described in this notice.

Data Controller Relationship

Link345 and each user process personal data received under and in connection with our Terms and Conditions as separate and independent controllers. We do not process personal data as joint controllers or in a controller-to-processor relationship. Each party is individually responsible for complying with its obligations under applicable data protection laws, including the laws of the Cayman Islands.

If you sell on Link345, the buyer personal data you receive to fulfil a transaction (names, contact details, delivery addresses) is covered by our Seller Data Protection Addendum, which sets out your duties as an independent controller of that data.

Information We Collect

Information you provide

Account information: name, email address, phone number, password credentials, and account preferences.
Profile and verification data: profile photo, Cayman Islands phone verification status, and business entity details (for business accounts).
Listing content: descriptions, photographs, prices, categories, and location information you include in listings.
Messages: content of messages you send and receive through the Link345 messaging system.
Payment information: card details and banking information you provide for purchases or seller payouts. Card data is processed by our payment service providers and is not stored on Link345 servers.
Support requests: information you provide when contacting our support team or submitting reports.

Information generated by your use of the Services

Transaction data: orders, settlements, refunds, auction bids, event ticket purchases, rental bookings, and appointment bookings.
Usage and device data: IP address, browser type, device identifiers, pages visited, search queries, and interaction timestamps.
Location data: approximate location derived from your IP address; precise location only when you explicitly provide it (e.g. in a listing address or when using the location picker).
Performance and analytics data: listing impressions, conversion rates, sales history, and aggregated performance metrics.
Ratings, reviews, and feedback.

How We Use Your Information

To provide, operate, and improve the Link345 marketplace and all associated services.
To process transactions, settlements, and payouts through our managed payments system.
To facilitate communication between buyers and sellers (transaction-related contact information is shared with the other party involved in a transaction).
To verify your identity and prevent fraud, money laundering, and abuse.
To send transactional notifications (order confirmations, shipping updates, payment receipts, auction reminders) via email, push notifications, or SMS.
To send marketing communications about Link345 services (you can opt out at any time via Notification Settings).
To generate aggregated, de-identified analytics (e.g. category sales statistics, listing performance recommendations).
To enforce our Terms and Conditions and Prohibited Items policy.
To comply with legal obligations, including anti-money laundering, tax reporting, and law enforcement requests.

Third-Party Service Providers

Sands Ltd shares personal data with third parties only where necessary for the provision of our Services or where we are legally or contractually entitled to do so. Our current service providers include:

CyberSource (a Visa company): payment gateway for card transactions, fraud screening, and recurring billing.
Cayman National Bank (CNB): settlement of seller payouts via bank transfer.
Google: OAuth authentication (Google Sign-In), Google Maps (listing location display and location picker), and Google Analytics.
Firebase / Google Cloud Messaging: push notification delivery to web and mobile devices.
Supabase: database hosting and application infrastructure.
Email service providers: transactional and marketing email delivery.
SMS providers: one-time password delivery for phone verification.
WhatsApp (Meta): optional messaging and invoice delivery features initiated by users.
Cloudflare / Hostinger: content delivery network, domain, and hosting services.

We do not sell your personal information to third parties. We do not share your data with advertisers for the purpose of targeted advertising outside of Link345.

Data Retention and Account Closure

Upon expiry or closure of your account, we delete or anonymise the personal data you provided or that was generated through your use of the Services. Specifically:

Account data (name, email, phone, profile): anonymised or deleted upon account closure.
Listings, storefronts, ad accounts: deactivated; personal identifiers nulled.
Active subscriptions and obligations: cancelled at account closure (external processor subscriptions are cancelled before account deletion).
Transaction records: retained in anonymised or aggregate form where we have a legitimate interest or legal obligation (e.g. financial record-keeping, tax compliance). We generally retain financial records for 7 years.
Aggregated analytics: maintained after account closure in de-identified form (e.g. category-level sales statistics).
First-party usage analytics: page and listing impression records are automatically purged after 24 months; after account closure they are no longer linked to you.
Uploaded files: your profile photo, media-library uploads, storefront branding, and delivery-proof photos are deleted from storage at account closure. Images attached to listings involved in completed transactions are retained with the anonymised transaction record; images of listings that were never part of a transaction are deleted after a 90-day retention window.
Anti-abuse identifiers: trial usage history linked to email/phone is retained to prevent trial abuse, even after account deletion; this data does not include browsable personal information.

You can close your account at any time through the account deletion feature in your Profile settings.

Data held by our service providers

Some personal data is processed by third parties under their own retention policies, and we cannot delete it directly:

Payment processors (CyberSource): at account closure we cancel recurring billing and request deletion of your stored payment tokens. CyberSource and the card networks retain transaction records independently for fraud prevention and financial compliance, typically for the periods required by financial regulation.
Cayman National Bank: payout and settlement records are retained by the bank under financial record-keeping requirements (generally around 7 years). We cannot shorten this period.
Email and SMS providers: delivery logs (recipient address or number, timestamps, delivery status) are retained by the provider for a limited operational period under the provider's own policy; we do not control these logs.
Firebase Cloud Messaging: push delivery infrastructure logs are retained by Google under its own policy. We delete your device tokens from our systems at account closure.
Analytics services (Google Analytics, Microsoft Clarity, Ahrefs): these load only with your consent and receive no account identifiers from us (no name, email, or user id). Data they hold is pseudonymous and governed by their retention settings; ours are configured to the shortest available windows.

Cookies and Tracking Technologies

Essential cookies: required for authentication, session management, your shopping cart, and platform functionality. These are always active.
Analytics cookies (consent required): Google Analytics (GA4), Microsoft Clarity, and Ahrefs Analytics help us understand usage patterns and improve the platform. These load only after you accept analytics cookies in our consent banner — if you choose “Essential only,” they are not loaded at all.
Preference cookies: remember your settings (e.g. theme, currency, language).

You can change your choice at any time via (also available in the site footer), or block cookies through your browser settings.

Children’s Privacy

Link345 is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a person under 18, please contact us immediately.

Your Rights

Subject to applicable data protection law, you have the right to:

Access the personal data we hold about you.
Correct inaccurate personal data.
Request deletion of your personal data (subject to legal retention obligations).
Object to or restrict processing of your personal data.
Request portability of your personal data.
Opt out of marketing communications at any time.

You can exercise the main rights directly in the product:

Download my data: get a machine-readable JSON copy of the personal data you provided and the key records generated by your use of the Services (profile, saved items, your listings and storefronts, your orders, messages you sent, bids, tickets, and bookings) from Profile → Security & Privacy.
Delete my account: self-service account closure, also under Profile → Security & Privacy, which removes your login and personal information as described in “Data Retention and Account Closure” above.
Correct my data: edit your profile, contact, and address details in your Profile settings.

For anything not covered by those tools, contact us at the address below. We will respond within 30 days.

International Data Transfers

Your data may be processed in jurisdictions outside the Cayman Islands where our service providers operate. We take appropriate safeguards to ensure your data is protected in accordance with applicable data protection laws.

Changes to This Notice

We may update this Privacy Notice from time to time. Significant changes will be communicated via email or platform notification. Continued use of the Services after changes take effect constitutes acceptance of the updated notice.

Contact Us

For questions about this Privacy Notice or to exercise your data rights, contact us at:

Email: privacy@link345.ky
Address: Sands Ltd, George Town, Grand Cayman, Cayman Islands

We aim to respond within 48 hours.

This Privacy Notice is referenced by and supplements our Terms and Conditions.