Last updated: 14 July 2026
The short version: we collect what’s needed to run a marketplace, your account, listings, messages, reviews and technical data. We don’t sell personal data. Other users see what you publish and what you send them. You can access, correct or delete your data by emailing [email protected]. The details, including your legal rights, are below.
1. Who is responsible for your data
Dapperlance (“we”, “us”) is an independently operated online platform based in Malta, and is the data controller for personal data processed on dapperlance.com and the Dapperlance app (the “Platform”). For anything related to your data, contact [email protected].
2. What we collect
- Account data, username, email address, password (stored encrypted), and any profile details you add (name, photo, phone number, company details).
- Listings, everything you put in a listing: descriptions, categories, photos, rates, location. Listings are public by design.
- Messages, the messages, offers and project steps (begin, price, complete) you exchange with other users through the Platform’s chat.
- Reviews and deal history, reviews you write and receive, and the self-reported prices attached to completed projects.
- Purchase data, if you buy listing featuring: what you bought, when, and billing details. Card details go directly to our payment provider; we never see or store full card numbers.
- Technical and usage data, IP address, browser and device information, pages visited, and log data generated by using any website; push-notification tokens if you enable notifications.
3. Why we use it, and on what legal basis
- To run the Platform (accounts, listings, search, chat, reviews, featuring purchases), necessary to perform our contract with you (GDPR Art. 6(1)(b)).
- To keep the Platform safe, investigating scam reports, preventing fraud, spam and abuse, enforcing our Terms, our legitimate interest in a trustworthy marketplace (Art. 6(1)(f)).
- To understand and improve the Platform, usage statistics, diagnosing errors, improving features, our legitimate interest (Art. 6(1)(f)); where an analytics tool requires consent under EU cookie rules, we ask for it first.
- To send you notifications, push notifications only with your consent (Art. 6(1)(a)), which you can withdraw anytime in your browser or device settings; transactional emails (new message, account and order emails) as part of running the Platform.
- Marketing emails, if any, only with your separate consent, with an unsubscribe link in every message.
- To meet legal obligations, accounting and tax records for paid services (Art. 6(1)(c)).
We do not use automated decision-making that produces legal or similarly significant effects about you.
4. Businesses listed from public sources
To make the directory useful, we may create listings for businesses using publicly available business information (business name, services offered, publicly published contact details), on the basis of our legitimate interest in operating a complete local directory. These listings are marked as unclaimed directory entries. If your business is listed and you want to claim it or have it removed, email [email protected], removal is immediate, and we keep a suppression record only to make sure you are not listed again.
5. Cookies
We use cookies that are necessary for the Platform to work, most importantly the login cookie that keeps you signed in (up to 1 year, so the app works like an app). Embedded maps are part of the service, they show where listings are located and power location search, and the map provider may set cookies when they load. Non-essential cookies (such as analytics), where used, are subject to your consent via the cookie settings in the footer. We also use Cloudflare Web Analytics, a privacy-friendly measurement tool: it sets no cookies, stores no personal data and does not track you across sites, so it runs without a consent request.
6. Who we share data with
Other users. Your listings, public profile and reviews are visible to everyone; your messages are visible to the person you send them to. Never share in chat what you wouldn’t want the other party to have.
Service providers (processors) who handle data for us under contract, each limited to what their role requires:
- our hosting provider, the servers running the Platform and its database, located in the EU
- server-management and network-security services
- an email delivery service (EU-based), sending the Platform’s transactional emails
- a push-notification delivery service, only if you enable notifications
- embedded map services on listing pages
- our payment provider, processing payments for listing featuring; card details go to them directly, never to us
We can provide the current list of these providers on request, email [email protected].
Authorities, where the law requires it or to protect users from serious harm, we may disclose data to competent authorities.
We do not sell personal data, and we do not give advertisers access to it.
7. Where data goes (international transfers)
The Platform is hosted in the EU. Some of our service providers may process data in the United States; these transfers rely on the EU-US Data Privacy Framework and/or EU Standard Contractual Clauses.
8. How long we keep it, and what happens when you delete things
Your data is kept for as long as your account exists.
If you delete a listing, it is removed from the Platform. Reviews connected to it may remain in anonymised form (see below).
If you delete your account (or ask us to), the following happens:
- your account, profile details and listings are deleted immediately;
- the messages you sent are erased from our live systems automatically, normally within minutes of deletion. The other person keeps the messages they wrote, but the content of yours is removed;
- reviews you wrote may remain visible in anonymised form, no longer linked to you, so other users’ review histories stay honest;
- records we must keep by law (e.g. accounting records for paid services) are kept for the legally required period, and data needed for an ongoing dispute or abuse investigation may be retained until the matter is resolved.
Deleted data can persist for a limited time in server backups (currently about 7 days), which roll over on a fixed schedule and expire automatically; backups are kept only for disaster recovery and legal-claims purposes and are not used to restore deleted accounts.
9. Your rights
Under the GDPR you can, at any time and free of charge:
- access the data we hold about you and get a copy;
- correct inaccurate data (most of it you can edit directly in your account);
- delete your data (“right to be forgotten”);
- restrict or object to processing based on legitimate interest;
- receive your data in a portable format;
- withdraw consent (e.g. push notifications) without affecting past processing.
Email [email protected] and we will respond within one month. If you are unhappy with our answer, you have the right to complain to the Information and Data Protection Commissioner (IDPC), Malta, idpc.org.mt, or your local EU data-protection authority.
10. Statistics from anonymised data
We create statistics and market insights from Platform activity in aggregated or anonymised form, data that can no longer be linked to any person, and may use and publish these for any lawful business purpose. Anonymised data is not personal data.
11. Security
The Platform runs over HTTPS everywhere; passwords are stored hashed; access to production systems is restricted and key-based. No internet service can promise absolute security, which is one more reason to keep sensitive details out of chat messages.
12. Age
The Platform is for adults: you must be 18 or older to use it. We do not knowingly process children’s data; if you believe a minor has created an account, contact us and we will remove it.
13. Changes to this policy
If we change this policy in a way that matters (new processors, new purposes), we will update this page and, for significant changes, notify you by email or a notice on the Platform. The “last updated” date at the top always tells you the current version.
14. Contact
Dapperlance, Malta, [email protected]