CYFRA.

Privacy Policy

1. Who handles your data

Roman Arce Bran, a sole trader registered for business activity in Costa Rica, operating under the trade name Cyfra Tech Solutions. He is the seller of the items listed on eBay and the person responsible for how this data is handled. For any question: [email protected].

2. What data I receive

When you buy one of my items, eBay passes me the data needed to complete the sale:

• The buyer's full name.
• The shipping address, and the billing address if it is different.
• Order details: item, quantity, price and eBay order number.
• The contact email address eBay provides for the transaction.

I never receive or see card or payment data: eBay processes that payment directly.

3. What I use it for

• Shipping your order: giving your name and address to the carrier so the package reaches you.
• Meeting my tax obligations in Costa Rica: for every sale I have to issue an electronic invoice and file it with the Ministry of Finance. That invoice includes your name and, where applicable, your identification details.
• Answering questions, claims or returns related to your order.

I don't use your data for advertising or for anything unrelated to that sale.

4. Who I share it with

• The Costa Rican Ministry of Finance (Ministerio de Hacienda): as an issuer of electronic invoices I am required to file each invoice with them, and it contains the buyer's data.
• The carrier that ships the package: it receives the name and the shipping address.
• eBay already has your data, since it is the platform you bought on. This policy covers what I do with what eBay passes me; what eBay itself does is governed by its own privacy policy.

Beyond that I don't share, sell or rent your data to third parties.

5. How long I keep it

• Electronic invoices are kept for five years from the date they are issued, which is the retention period Costa Rican tax rules impose on electronic invoice issuers.
• Shipping data is kept while the shipment is in progress and through the order's warranty or return window. After that it is deleted, except for whatever forms part of the tax invoice.

6. Your rights

You can ask me what data of yours I hold, ask me to correct it if it's wrong, or ask me to delete it. The only exception is the information contained in the tax invoice, which I am legally required to keep for the five years stated above. Write to [email protected] and I'll answer from that same address.

7. Security

Order data is stored encrypted, on systems with restricted access, and travels over encrypted connections. This is a one-person business: I apply reasonable protection measures, without promising guarantees I can't back up.

8. Changes to this policy

If the way I handle this data changes, I'll update this page and the "Last updated" date above.