Privacy Policy

• Account basics. Email address and a salted password hash (argon2id). We never store your plain password.
• Things you save. Your watchlist, garage cars, bookings, quote requests, importer profiles — the product data you create.
• Searches. Search terms are logged in aggregate to power demand analytics for importers — reports like "buyers searched for R32 driveshafts 40 times this month and nobody stocks them." These reports are aggregate counts of terms; they don't identify you. Where you've allowed analytics, your own recent searches also help pick the recommended listings in your digest; nobody else sees them.
• Sessions and devices. Signed-in sessions with a coarse device label ("Chrome on Windows") so you can see and revoke them from your account page. We don't store raw browser fingerprints.

Necessary cookies keep you signed in and remember your cookie choices — the site can't work without them. Preference, analytics, and marketing cookies are used only with your consent, which you can change any time via Cookie settings in the footer. Your consent choice is versioned: if the policy materially changes, we ask again.

We send email you asked for: account verification and password resets, watchlist alerts you set up, and updates and messages on bookings you're a party to. Every verified account also gets a digest every three days — your watchlist matches, then listings picked from your watchlist, saved listings, garage, and searches — written in the language you use the site in; switch it off on your account page. Product news is off unless you switch it on. Every optional email carries a one-click unsubscribe, and each kind can be turned off separately on your account page — verification and password-reset email is the exception, because it is how you get back into your account. Watchlist emails stop when you delete the alert, and we never email an address that hasn't been verified — except for the verification message itself.

• Sell or rent your personal data. To anyone.
• Show other users your email, searches, watchlist, or garage.
• Give importers anything about you beyond a quote request you explicitly sent them (which includes your email so they can reply).

We use infrastructure providers to run the service: hosting, an email delivery provider (for the transactional email above), and AI providers that process listing text and photos — not your account data — to grade condition and power search. Payment processing, when it goes live, will be handled by a payment provider; card numbers will never touch Portside's servers.

Account data is kept while your account exists. Delete your account by contacting us and we remove your personal data within 30 days, except records we must keep (e.g. completed booking/transaction records where law requires). Aggregate, de-identified data (like demand statistics) may be retained.

Depending on where you live (GDPR, UK GDPR, CCPA and similar), you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email us and we'll honor them: support@portside.direct.

Material changes to this policy will be announced on the site, and the cookie banner will re-request consent where required. See also the Terms of Service.