Privacy Policy

This Privacy Policy applies to the Durqo website, marketplace, and related services (together, the “Services”). Durqo is a digital-business marketplace that connects Buyers and Sellers. For the purposes of applicable data protection laws, Durqo is the controller of personal information collected through the Services, unless otherwise stated. This Policy applies to Buyers, Sellers, and visitors alike, and should be read together with our Terms and Conditions.

We collect information you provide to us, information related to your use of the Services, and information from third-party sources. The categories we collect include:

We may collect information directly from you (for example, when you create an account or submit a Listing), from your use of the Services (for example, device and usage data), from third-party service providers who help us operate the Platform, and, where permitted, from other sources such as public records.

We use information to:

• Provide, operate, and improve the Services, including creating and securing your account, verifying Seller identity before a first withdrawal, and, where a specific order is flagged for it, verifying Buyer identity or funds.
• Facilitate transactions between Buyers and Sellers, including processing payments through the providers listed in Section 07.
• Communicate with you, including responding to support requests and sending service communications such as order or verification updates.
• Comply with legal obligations, and protect the security and integrity of the Platform.
• With your consent or opt-out, send occasional product updates or promotional content.

Where applicable, we rely on legal bases such as your consent, the performance of a contract with you, our legitimate interests in operating and securing the Platform, and compliance with legal obligations. Which basis applies can depend on where you live and the specific processing activity; you may have the right to withdraw consent at any time where consent is the basis we rely on, without affecting processing already carried out.

We do not sell your personal information. We may share information with:

• Service providers who help us operate the Platform, including the payment, hosting, database, and analytics providers described in Section 07.
• Other Platform users, limited to what's reasonably necessary to complete a transaction you're party to (for example, contact details once a deal is agreed).
• Professional advisers, such as legal, accounting, or insurance advisers, where necessary.
• Regulators and other third parties where required or permitted by law, to enforce our agreements, or to protect the rights and safety of Durqo or our users.

We use the following providers for payments, escrow, payouts, hosting, and analytics. The status shown reflects what is actually operational today:

Durqo itself is not an escrow provider and does not directly hold or control Escrow.com’s funds. Stripe is a payment processor, not an escrow provider. SSLCommerz is a payment gateway/processor, not an escrow provider. We will only describe an integration above as “In use today” once it has actually been implemented and verified in production. See our Terms, Section 05 for the fuller description of today’s real payment flow.

The Platform currently uses a single cookie, described below, to keep you signed in. We do not currently set functional, analytics, or marketing cookies of any kind.

Because we don’t currently set non-essential cookies, there is nothing beyond your browser’s own cookie controls for you to opt out of. If that changes, we will add an in-page cookie-preference control here before any non-essential cookie is set.

Google Analytics: two distinct things

Durqo does not currently run its own site-wide analytics tracking of durqo.com visitors beyond the session cookie above. Separately, a Seller can optionally connect their own Listing to their own Google Analytics 4 property:

• The connection uses Google's OAuth flow with a single, read-only scope (analytics.readonly), so we never request permission to edit your GA4 property.
• We store the resulting access and refresh tokens in our database, accessible only through server-side, administrative code paths, and never returned to any browser.
• We only ever display aggregated, read-only traffic metrics (page views, sessions, bounce rate, and similar) for the connected property, shown publicly on that Listing's page.
• A Seller can disconnect at any time from their listing dashboard; disconnecting revokes the Google token and deletes both the stored connection and the displayed metrics.
• A Seller can also revoke Durqo's access directly from their Google Account's third-party access settings at any time, independently of our own disconnect option.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the Platform, completing transactions, meeting legal and accounting obligations, preventing fraud, resolving disputes, and enforcing our agreements. We then delete or de-identify the information unless continued retention is required or permitted by law. We can’t promise immediate deletion of records we’re legally required to keep.

We use administrative, technical, and organizational safeguards appropriate to the sensitivity of the personal information we handle. Traffic to the Platform is encrypted in transit (HTTPS), and our hosting and database providers encrypt stored data at rest as a standard feature of their infrastructure. Access to sensitive information, such as payment details and connected-analytics credentials, is restricted to what is strictly necessary to operate the Platform. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a security incident affecting your personal information, we will assess it and, where required by applicable law, notify affected individuals and/or the relevant regulator within the timeframe that law requires, and keep an internal record of the incident and our response.

Durqo serves Buyers and Sellers in multiple countries, so your information may be processed and stored in a country other than your own. Different privacy laws may apply there, and foreign courts, regulators, or authorities may lawfully be able to access information in that country. Where this happens, we use reasonable contractual, technical, and organizational safeguards, where appropriate, in addition to relying on our service providers’ own safeguards for cross-border data transfers.

Depending on where you live, you may have some or all of the following rights over your personal information:

We may need to verify your identity before acting on a request, and an authorized representative submitting a request on your behalf may need to provide proof of that authorization. Some requests may be limited by law, and certain transaction or legal records may need to be retained even after a deletion request. We will respond within the timeframe required by applicable law.

The Platform is intended only for individuals who are at least 18 years old, consistent with the eligibility requirement in our Terms and Conditions. Durqo does not knowingly collect personal information from anyone under 18. If you believe a minor has provided personal information, please contact us at support@durqo.com.

We may update this Privacy Policy from time to time to reflect changes to the Platform or applicable law. When we make material changes, we will update the effective date at the top of this page, and where appropriate, notify you directly. If you have concerns about how we’ve handled your information that we haven’t resolved, you may have the right to lodge a complaint with your local data protection authority, in addition to contacting us directly.

If you have any questions about this Policy, please reach out.