Privacy policy

1. Data controller

The data controller is Mehumi Estate sp. z o.o..

For data processing and data subject rights, write to support@mehumi.local or use support chat from your account.

2. Data we process

• Registration data: name, email, phone, password (hashed).
• Profile and listing data: descriptions, photos, address, property details, seller contacts.
• Chat messages, support requests, and content reports.
• Technical data: IP address, device type, activity logs, cookies, and local settings (city, language, currency).
• Payment metadata when paying for services (full card data is not stored on our side when an external provider is used).

3. Purposes and legal bases

• Providing Platform features — contract performance (registration, publishing, chat).
• Moderation, security, and abuse prevention — legitimate interest of the controller.
• User support — contract performance and legitimate interest.
• Analytics and service improvement — legitimate interest, with anonymization where applicable.
• Legal obligations — when required by law.

4. Sharing data with third parties

We may use contractors for hosting, email, maps, and payments. They process data only on our instructions and under contractual safeguards.

Data may be disclosed to public authorities when required by law.

Seller contacts in listings are visible to other users to the extent you specify when publishing.

5. Retention

Account data is kept while the account is active and for a reasonable period after deletion — to resolve disputes and meet legal obligations.

Chat messages and security logs are kept for a limited time needed to operate the service and investigate incidents.

6. Your rights

• Right of access and to obtain a copy.
• Right to rectify inaccurate data.
• Right to erasure ("right to be forgotten") where GDPR allows.
• Right to restrict processing and to object.
• Right to data portability in a structured format.
• Right to lodge a complaint with the Polish data protection authority (UODO).

7. Security

We use organizational and technical measures: secure sessions, password hashing, access control, and logging of admin actions.

No internet transmission method is perfectly secure, but we regularly review our safeguards.

8. Cookies

Details on cookies and how to manage them are on the Cookie policy page.