Replica Privacy Policy - 1stDibs

About Us

Privacy Policy

Updated Effective: 23 July 2025

The 1stDibs.com 1stDibs.co.uk website and mobile application (collectively the “Site”) are owned and operated by 1stdibs.com, Inc. 1stdibs.com Ltd., respectively. This Privacy Policy describes how information, including Personal Information, is collected from you (including you and any person acting on your behalf or with your authorization, collectively “you”) and subsequently used, shared, secured and otherwise processed by 1stdibs.com, Inc., 1stdibs.com Ltd., and our affiliated companies (collectively, “1stDibs.com”, “1stDibs”, “us”, “our”, or “we”).

“Personal Information”, is any information that enables us to identify you, directly or indirectly, such as your email address, name, shipping and billing address, telephone number, company name, credit card information, any form of identification number, or one or more factors specific to your physical, physiological, mental, economic, genetic, cultural or social identity.

This Privacy Policy is part of our User Agreement, available here – www.1stDibs.com/about/user-agreement/. Mobile users can navigate to the Settings icon to access our User Agreement and Privacy Policy.

By accessing this website or our mobile application and making use of our services you explicitly agree to the terms of this Privacy Policy and the User Agreement. 

For the purposes of the EU General Data Protection Regulation 2016/679 (the “GDPR”), the 1stDibs company from which you have purchased products and/or services, or with which you have entered into communications, or which has otherwise collected your Personal Information is the controller of your Personal information.

1stDibs.com, Inc.: 300 Park Avenue South, 10th Floor, New York, NY 10010 United States.

1stDibs.com Ltd.:  35 Ballards Lane, London, N3 1XW.

1. Effective date and updates to our Privacy Policy.

You are not obligated to provide us with your Personal Information, however, the performance of several services (including making purchases and sales on the Site) may not be possible if you choose not to provide your Personal Information.

This Privacy Policy is effective as of the date set forth at the top of this Policy. As our services evolve and we perceive the need or desirability of collecting or using information collected in other ways, we may from time to time amend this Privacy Policy and will provide a new effective date on the revised Privacy Policy. We encourage you to check our Site frequently to see the current Privacy Policy and User Agreement in effect and any changes that may have been made to them.

2. Information 1stdibs.com collects from you.

a) Information you give us 

Communicating with us. In general, you can visit the Site without telling us who you are or revealing any information about yourself. However, if you correspond with us through our Contact Us page, by phone, email or otherwise, we will retain the Personal Information that you provide. This includes Personal Information you provide when participating in discussion boards or social media functions on the Site, and when you report a problem with the Site.

Communicating with other users. Users can contact sellers to negotiate a sale or make a purchase by contacting the seller using a telephone number displayed on the Site which is operated by us. When a user connects with a seller by telephone that call may be recorded by us to log transactions and for training and quality assurance purposes.

Creating an account. To take advantage of some of our services you are required to register and create an account via the Sign Up page on our Site. When you open an individual account at 1stDibs, we ask you to provide Personal Information (such as your name, shipping address, billing address, phone number, email address, payment information, profile, preferences, communication preferences, professional and business affiliation where relevant, and contact information). All 1stDibs account holders are required to create a user password that, combined with your login email address, allows access to your account. This Personal Information is used to identify you as a 1stDibs registered user.

Saving an item. Users may save items to their favorites by clicking the heart or folder icon for an item. If you have created an account, your saved items are stored in the favorites folders associated with your account. Items are saved until you remove them.

Facebook log-in. As part of our services, we offer you the option of creating an individual account with 1stDibs using your Facebook profile. If you select this option, we will automatically collect selected Personal Information about you from your Facebook account. The Personal Information we collect depends on your privacy settings for sharing such Personal Information, and may include name, profile picture, age range, gender, language, country and other public information. If you use Facebook to login, you may request that we delete all personal data we receive from Facebook in connection with that login. Email us at privacypolicy@1stDibs.com to make that request.

Google Sign-in. As part of our services, we offer you the option of creating an individual account with 1stDibs using your Google profile. If you select this option, we will automatically collect selected Personal Information about you from your Google account. The Personal Information we collect depends on your privacy settings for sharing such Personal Information, and may include name, email address, language preference, and profile picture, and other public information; however, the only information that will be stored will be your name and email address.

Creating a seller account. When you open a seller account with 1stDibs, you will also be required to provide Personal Information such as information about your company and any reseller or trade association information. You will also be asked to provide references which may include Personal Information relating to third parties. Please ensure that those third parties have consented to the use of their Personal Information by 1stDibs for the purposes of confirming your identity or the identity of your company and have been provided with a copy of this Privacy Policy.

Making a purchase. 1stDibs is a marketplace offering a forum for sellers to offer items for sale, and for buyers to browse and make purchases. When you make an offer, we will ask you to provide credit card or other payment details as well as shipping information for orders.

Reviews. Registered users may choose to write reviews and have them posted on the Site; others wishing to post a review must register and provide their name and contact information including email and postal addresses. Reviews will include the first name and last initial and shipping location of the reviewer. Reviews must comply with our Terms of Use. Information posted in reviews becomes public information. The use that any third party makes of this information is beyond our control. Please use caution before disclosing any information in a review that you do not want to become public.

b) Information we collect about you

With regard to each of your visits to the Site we automatically collect the following information:

Technical Information. This includes browser type and version (e.g. Internet Explorer, Firefox, Chrome, Safari), operating system (e.g. Windows, Macintosh), IP address, device type, time zone setting and Internet domain (e.g. AOL, Hotmail).

Information about your visit. This includes the pages you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), methods used to browse away from the page, and any phone number used to call our customer service number.

Location information. 1stDibs asks mobile users whether they will permit us to collect information about their location. We collect location information only from mobile users who have agreed to provide that information.

We do not treat this information as Personal Information, except where the information can identify you when associated with other Personal Information we hold or where we are required to do so under applicable law.

3. Children’s privacy

1stDibs is not designed nor intended to be attractive to use by children under the age of 13. Our Terms of Use require that users must be 18 years old or older in order to register on our Site and use our services. If you are under the age of 18, please do not submit any information to us.

4. 1stdibs.com uses cookies.

The Site uses cookies and similar technologies to distinguish you from other users. This helps us to analyze the use of the Site to customize and improve the content and the layout of the Site. 

When you first access our Site from certain jurisdictions, you may receive a message advising you that cookies and similar technologies are in use.

For detailed information on the cookies and similar technologies we use and the purposes for which we use them, see our Cookie Policy https://support.1stdibs.com/hc/en-us/articles/14542897774875-Cookie-Policy.

5. Uses of your Personal Information

We use your Personal Information according to the terms of the Privacy Policy and User Agreement in effect at the time of our use. We will process your Personal Information where (1) you have provided your consent, which can be withdrawn at any time, (2) where the processing is necessary for the performance of a contract to which you are a party (for example, we will share your Personal Information with sellers with whom you have entered into a transaction), (3) where we are required by law, (4) where processing is required to protect your vital interests or those of another person, or (5) where the processing is necessary for the purposes of our legitimate commercial interests, except where such interest are overridden by your rights and interests. Common examples of processing activities we undertake (and the legal basis for these) are detailed below. Please note, this list is not exhaustive.

a) We may process the Personal Information you provide to us for the following purposes as is necessary for the performance of a contract (e.g. a transaction) to which you are party, or to answer questions or take steps at your request prior to entering into a contract:

  • to administer or otherwise carry out our obligations in relation to any agreement to which we are a party;
  • to provide information on the products or services of our registered sellers with whom you are placed in touch in connection with a prospective purchase;
  • to assist in completing a transaction or order;
  • to allow tracking of shipments;
  • to facilitate the preparation and processing of invoices;
  • to respond to your inquiries and to provide you with the information, products and services that you request from us;
  • to verify that you qualify as a member of the Site;
  • to create and manage our customer accounts; 
  • to notify you about changes to our services and products;
  • to prepare and process invoices;
  • to provide after-sales customer relationship management; and
  • to contact you as necessary.

b) We may process the Personal Information you provide to us for the following purposes as is necessary for certain legitimate interests, or where you have given your informed consent to such processing if required by applicable law (such consent can be withdrawn at any time):

  • to record, monitor, and log calls for transaction management and quality and training purposes;
  • to send you communications about (1) our own products and services, (2) products and services offered by sellers or advertisers on our Site and (3) products and services of third parties (those not offered by sellers on our Site) that we think you may find of interest, provided you have given your consent;
  • to verify you are eligible for any promotions and/or are a member of any trade rewards program which you participate in;
  • to administer any trade reward program, other loyalty program, promotion, contest, survey, or competition;
  • to offer our products and services in a personalized way, for example, we may provide suggestions based on previous requests to identify suitable products and services more quickly; and
  • to create products or services that may meet your needs.

c) We may process the Personal Information we collect (which we shall endeavour to anonymize where practicable consistent with our business needs) for the following purposes as necessary in our legitimate business interests (provided such interests are not overridden by your interests or fundamental rights):

  • to monitor quality control and ensure compliance with any and all applicable laws, regulations, codes and ordinances, for example, in response to a request from a court or regulatory body, where such request is made in accordance with the law;
  • to resolve any disputes;
  • to ensure the security of your account and our business, preventing or detecting fraud, malicious activity or abuses of our Site, for example, by requesting verification information in order to reset your account password; 
  • to develop and improve our products and services, for example, by reviewing visits to our Site and its various subpages, demand for specific products and services and user comments;
  • to administer the Site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
  • to enforce or apply our User Agreement and other agreements you have entered into; 
  • to improve the Site and to customize the content you see on the Site;
  • as part of our efforts to keep the Site safe and secure;
  • to measure or understand the effectiveness of advertising we serve to you and others, and to deliver relevant advertising to you; and
  • to do internal research on our Site visitors’ interests and behaviors to better understand and serve our members.

We use email as the primary form of communicating transactional and relationship information with registered sellers and registered Site users. We may send mobile users notifications through the application but only if the user has agreed to receive notifications from us in their preferences. Communication preferences can be changed via “Account Information” at any time. We may also use your street addresses and telephone numbers to provide these communications.

When users of the Site wish to negotiate a sale with sellers or make a purchase from a seller they may do so by contacting the seller using a telephone number displayed on the Site which is operated by us. When a user connects with a seller by telephone that call may be recorded by us to log transactions and for training and quality purposes. We may use a carefully selected third party to carry out such call recording, evaluation, and transcription services on our behalf. If a user or seller does not agree to this when notified of this fact by us at the beginning of a call, the call should be terminated. No call recordings are shared with third parties other than as described in this Privacy Policy, and we take steps to eliminate Personal Information from the call recording.

6. Sharing of your Personal Information

1stDibs does not sell, share, trade or give away Personal Information other than as described in this Privacy Policy, or unless you provide prior consent.

1stDibs may share Personal Information between the different 1stDibs entities where necessary to provide our services to you. We reveal your Personal Information to unaffiliated third parties when you request or authorize it, or to help complete a transaction for you which you have requested.

Where you use our Site to enter into a transaction or correspond with another individual or business registered as a seller on our Site, we provide your Personal Information to that other party in order to facilitate the transaction or the correspondence you have requested. Once your offer is submitted, your Personal Information will be delivered by 1stDibs to that seller, and your order will be placed.

When a US user contacts a seller, 1stDibs may share your search terms, or items you have viewed, saved, or purchased with that seller. You can disable sharing this information with sellers by updating the profile preferences in your account.

Third parties who will have access to your Personal Information include (without limitation) sellers selling items on the Site that you have contacted or made a purchase from, shipping companies, and payment processors completing a transaction at your request.

Sellers from whom you purchase items will have their own privacy practices regarding the information they receive. We encourage you to read such applicable privacy policies. We are not responsible for the processing of your Personal Information by such third parties.

We may share your Personal Information with other companies or agents who have been carefully selected and who perform functions on our behalf (e.g., analyzing data, IT and network services, providing marketing assistance, providing customer service, processing orders, shipping or customs agents etc.). Sharing excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We will only transfer your Personal Information to trusted third parties who provide sufficient guarantees in respect of the technical and organizational security measures governing the processing to be carried out and who can demonstrate a commitment to compliance with those measures.

Where third parties are processing Personal Information on our behalf, they will be required to agree, by contractual means or otherwise, to process the Personal Information in accordance with applicable law.  

These companies may then use your information for their own purposes including marketing to you, if you consent to receive notifications relating to their products and services. Where you consent to these companies using your information for their own purposes, their use will be governed by their own privacy policies, which you should review.  

We may also disclose your Personal Information to comply with the law, applicable regulations, governmental and quasi-governmental requests, court orders or subpoenas, to enforce our User Agreement or other agreements, or to protect our rights, property or safety, or the rights, property or safety of our users or others, such as in connection with suspected illegal activity in connection with our Site, products or services (e.g., sharing Personal Information with a consumer reporting agency for fraud protection etc.).  We reserve the right to release Personal Information to law enforcement or other government officials, as we, in our sole discretion, deem necessary or appropriate.

This may also include sharing Personal Information with governmental entities, or third parties in response to subpoenas, court orders, other legal process, or as we believe is necessary to exercise our legal rights, to defend against legal claims that have been brought against us, to defend against possible legal claims that we determine in our sole discretion might be brought against us, to investigate and help prevent security threats, fraud or other malicious activity and to protect the rights or personal safety of 1stDibs employees and third parties (including sellers and buyers).

In the event of a corporate transaction, such as the purchase, sale or other transfer of all or part of our services or assets, we may transfer your Personal Information along with those assets or services to a prospective transferee.  In the event of an insolvency, bankruptcy or receivership, such Personal Information may also be transferred as a business asset.  If another company acquires any of our corporate entities, businesses or assets, that acquiring company may acquire your Personal Information.  We do not guarantee that any entity receiving such Personal Information in connection with one of these transactions will comply with all of the terms of this Privacy Policy following such transaction.  However, it is our practice to seek reasonable protection for Personal Information in these types of transactions.

7. International transfers

You are advised to be aware that the Personal Information we receive from you and about you may be held on our computers and systems in the European Union and in the computers and systems of our offices and data centers in the United States and may be accessed by or given to our staff working outside the European Union.

Your Personal Information may be processed by us in the United States, where laws regarding data protection may be less stringent than the laws in your country. By using this Site and by providing any Personal Information to the Site, all users, including without limitation users in Canada, the UK and the European Union, acknowledge 1stDibs’ collection and processing of such Personal Information in the United States.

In addition, sellers registered on the Site are located around the world. Due to the nature of our business and to enable us to offer goods and services worldwide, your Personal Information may be transferred to and held by merchants or sellers in any country in the world. By using this Site and by providing any Personal Information to the Site, all users, including without limitation users in Canada, the UK and the European Union, acknowledge the transfer of Personal Information to such third parties.

When disclosing Personal Information from the EU and the UK to a third party (e.g. our shipping agents) located in a country  not recognized by the European Commission as ensuring an adequate level of protection (e.g., the United States), we will take appropriate steps to safeguard such Personal Information, such as by implementing the European Commission-approved Standard Contractual Clauses, this includes where 1stDibs.com, Inc. receives Personal Information in the US from 1stDibs.com Ltd. in the UK.

For the avoidance of doubt, 1stDibs does not rely upon the now invalidated U.S. Department of Commerce Privacy Shield Framework in order to receive EU Personal Information in the U.S.  For further details, please contact us at privacypolicy@1stDibs.com.

8. How you can access and amend your Personal Information.

You are required to provide us with accurate and up to date Personal Information. 1stDibs gives you the ability to amend your Personal Information at any time by accessing your account on our Site (by clicking on the “account details” link on the website homepage or the Account icon on the mobile application), modifying the Personal Information on your account page, acknowledging our User Agreement by clicking on the box at the bottom of the page and then clicking on submit.

If you do not want to share search terms, or items you have viewed, saved, or purchased history with sellers you contact, you can update your profile preferences on your account page at any time.

Subject to any legislation which might, from time to time, oblige us to store the Personal Information for a certain period of time, we will respect your wishes to correct inaccurate Personal Information. Otherwise, we will hold your Personal Information for no longer than is necessary in connection with our aims as detailed in this Privacy Policy.

You can ask us whether we are keeping Personal Information about you and you can ask to receive a copy of that Personal Information. Before sending you any Personal Information, we will ask you to provide proof of your identity. If you are not able to provide proof of your identity, we reserve the right to refuse to send you any Personal Information. We will respond as quickly as we reasonably can to your requests for details of Personal Information we hold about you.

9. Security.

As a registered user of the Site, you are responsible for maintaining the confidentiality of your username and password. Please keep your user ID and password confidential.

If you share your computer, we recommend that you log-out and close your browser window after visiting the Site in order to protect the confidentiality of your Personal Information including your credit card information, your offer status and buying history.

You agree to accept responsibility for all activities that occur under your account or password. You agree to notify us immediately of any unauthorized use of your account or any other breach of security. We reserve the right to refuse service, terminate accounts, or remove or edit content at our sole discretion.

We use reasonable physical, electronic, and administrative safeguards to help us protect the security, integrity and confidentiality of data stored on our system. The Site encrypts your credit card number and other Personal Information using Transport Layer Security (TLS) technology to provide for the secure transmission of the Personal Information from your PC to our servers.

Except as specified in this Privacy Policy, we use commercially reasonable efforts to limit access to your Personal Information to the employees, officers, third-party contractors, and strategic partners of 1stDibs who need the Personal Information in order to perform their duties.

TLS is an industry-standard protocol for encryption over the Internet. While no system is 100% secure, we believe that the measures we have implemented minimize the risk of a security breach to an appropriate level given the types of Personal Information involved. Please note that any Personal Information you provide us by email is unencrypted.

Please note that transmission of Personal Information via the internet is not completely secure and although we will endeavor to protect your information, we cannot guarantee the security of your information transmitted to our Site; any transmission is therefore at your own risk. However, once we have received your information, we will use procedures and security features to try to prevent unauthorized access.

10. Opt- out

If you do not wish to receive offers or other notices from us in the future, you can “opt-out” by changing your communication preferences in “My Account” or by contacting us at the address indicated at the end of this policy. We will try to complete your request as promptly as possible. You can elect not to receive emails from us either by “unsubscribing” to an email you receive or by contacting us as indicated below. Any changes will affect only future uses of your information.

11. Privacy Rights.

Certain privacy laws around the world, including the GDPR, provide users with rights and choices related to their information. Consistent with those laws, you may have the choice of accessing, editing, or removing certain information. In addition, subject to applicable law, in certain circumstances, you may have rights in relation to your Personal Information – specifically to: 

(a) Request access to your Personal Information.   You may have the right to request access to any Personal Information we hold about you as well as related information, including the purposes for processing the Personal Information, the recipients or categories of recipients with whom the Personal Information has been shared, where possible, the period for which the Personal Information will be stored, the source of the Personal Information, and the existence of any automated decision making.

(b) Request the rectification of any inaccurate Personal Information.  You may have the right to obtain without undue delay the rectification of any inaccurate Personal Information we hold about you.

(c) Request erasure of your Personal Information. You may have the right to request that Personal Information held about you be deleted, provided that such Personal Information is not required by 1stDibs for compliance with a legal obligation under European or Member State law or for the establishment, exercise or defense of a legal claim. 

(d) Request restriction of, or object to, processing of your Personal Information.  You may have the right to prevent or restrict processing of your Personal Information, or object to its processing, in certain circumstances.

(e) Request transfer of your Personal Information. You may have the right to request transfer of your Personal Information directly to a third party where this is technically feasible.

You may have additional rights depending on the specific jurisdiction in which you are based. For example, French users have the right to provide us with instructions on how to process their personal data in the event of their death.

You can exercise any of these rights by emailing us at privacypolicy@1stDibs.com.

In addition, where you believe that 1stDibs has not complied with its obligation under this Privacy Policy or EU or UK law, you have the right to make a complaint to an appropriate Data Protection Authority, such as the UK Information Commissioner’s Office or France’s Commission nationale de l’informatique et des libertés.

12. Privacy Rights (California).

California Consumer Privacy Act (“CCPA”) 

Under the CCPA, effective January 1, 2020, verified California residents have the right to:

  • request and receive disclosure of 1stDibs’ personal information data collection practices during the prior twelve (12) months, including the categories of personal information we collect, the categories of sources of such information, our business purpose* for collecting or sharing such information, and the categories of third parties with whom we share such information;
  • request and receive a copy of the personal information we have collected about them during the prior twelve (12) months;
  • request and receive disclosure of our information sharing practices during the prior twelve (12) months, including a list of the categories of personal information sold with the category of third party recipients and a list of the categories of personal information that we disclosed for a business purpose;
  • request that we not sell personal information about them; and 
  • request that we delete (and direct our service providers to delete) their personal information (subject to certain exceptions).

If you have questions about your CCPA Rights, please call us at +1 877-721-3427 or visit our CCPA Request Page or email us at privacypolicy@1stdibs.com. For purposes of the CCPA personal information means information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.

Making CCPA Requests.  In order to make a request for disclosure, California residents may visit our CCPA Request Page or email us at privacypolicy@1stdibs.com. We will ask you for information that allows us to verify that you are the person about whom we collected personal information, and will use that information only for that purpose. We may request that you submit a signed statement that you are the individual you claim to be.  We cannot respond to your request or provide you with personal information if we cannot verify your identity and confirm that the personal information relates to you. We will acknowledge receipt of your request within ten (10) days and will endeavor to respond within forty-five (45) days of receipt of your request, but if we require more time, we will notify you of our need for additional time and may take up to an additional forty-five (45) days.  We cannot respond to your request or provide you with personal information if we cannot verify your identity and confirm that the personal information relates to you.

You may make a request for disclosure of our information collection practices, the information we collected about you, or our information sharing practices twice within a twelve (12) month period, and may make a deletion request at any time. We will try to respond within forty-five (45) days of receipt of your request, but if we require more time, we will notify you of our need for additional time and may take up to an additional forty-five (45) days.

For requests for a copy of the personal information we have collected during the previous twelve (12) months prior to your request, we will try to provide the information in a format that is readily useable, including by mailing you a paper copy or providing an electronic copy to you.

If you request that we delete your personal information, please note that California law permits us to retain necessary information and under certain circumstances.  By way of example, we are not required to comply with a request to delete information if the information is necessary for us to complete a transaction for you or otherwise perform a contract; to detect, protect against, or prosecute security incidents, fraud or illegal activity; to use the information only internally in ways reasonably aligned with your expectations as our customer (such as maintaining sales records), and to comply with legal obligations.

We will not discriminate against you as a result of your exercise of any of these rights.  

Sale of Information. We do not disclose personal information in exchange for payment of money; however, we may disclose personal information to certain third parties that provide us with services such as helping us with advertising, data analysis and security, which may fall under the definition of “consideration” and be considered a “sale” under the CCPA. This includes Identifiers, Commercial, Electronic Network Activity, and/or Geolocation information, and other information as listed below. If you would like to instruct us not to sell your personal information, and are over the age of 16 years old, please visit our Do-Not-Sell web page. We do not sell personal information of individuals we know are less than 16 years of age. Once we receive your Do-Not-Sell request we will wait at least twelve (12) months before asking you to reauthorize personal information sales.

Using an Authorized Agent. You may submit a request through someone: (1) holding a formal Power of Attorney; (2) who is an authorized agent with written permission to make a request and (3) once you verify your own identity directly with us.  We will require the agent to submit proof to us that they have been authorized to make requests on your behalf.

Categories of Information. During the past twelve (12) months, we have or may have collected the following categories of information from the listed sources, used it for the listed business purposes and shared it with the listed categories of third parties.  The categories of information include information we collect from our website visitors, registered users, employees, vendors, suppliers and any other person that interacts with us either online or offline. Not all information is collected about all individuals.  For instance, we may collect different information from applicants for employment or from vendors or from customers.

Category of Information collected Source            Business Purpose(s)* for collection/use Categories of Third-Parties receiving information
Identifiers (name, alias, postal address, email address, phone number, account name, Social Security number, driver’s license number, passport number, IP address) Individuals submitting information to us; 

Information we automatically collect from site visitors; 

Information we may receive from third-party marketing and data partners.

 Auditing relating to transactions; 

Security detection, protection and enforcement;

Functionality, error repair;

Ad customization;

Performing services;

Internal research and development;

Quality control.

 Service providers (such as payment processors, marketing partners, shipping partners, employee benefits partners);

Affiliated companies; 

Government regulators;

Law enforcement;

Strategically aligned businesses.
Sensitive Information (name with financial account, medical, health, and health insurance information, username and password) Individuals submitting information;

Employment applications; 

Employees.

 Auditing relating to transactions; 

Security detection, protection and enforcement;

Functionality /error repair;

Performing services;

Internal research and development;

Quality control.

 Service providers (such as payment processors, marketing partners, shipping partners, employee benefits partners);

Government regulators;

Law enforcement.
Protected Classification Information (race, gender, ethnicity) Individuals submitting information. Auditing relating to transactions; 

Security detection, protection and enforcement;

functionality debugging/error repair;

Ad customization;

Performing services;

Internal research and development;

Quality control.

 Service providers (such as payment processors, marketing partners, shipping partners);

Government regulators.
Commercial Information (transaction history, products/services purchased, obtained or considered, product preference) Individuals submitting information; 

Information we automatically collect from site visitors;

Information we may receive from third-party marketing or data partners.

 Auditing relating to transactions; 

Security detection, protection and enforcement;

Functionality /error repair;

Ad customization;

Performing services;

Internal research and development;

Quality control.

 Service providers (such as payment processors, mail houses, marketing partners, shipping partners);

 

Affiliated companies; 

Government regulators;

Law enforcement;

Strategically aligned businesses.
Electronic Network Activity (browsing or search history, website interactions, advertisement interactions) Information automatically collected from site visitors. Auditing relating to transactions; 

Security detection, protection and enforcement;

Functionality debugging/error repair;

Ad customization;

Performing services;

Internal research and development;

Quality control.

 Service providers (such as payment processors, marketing partners); 

Affiliated companies; 

Government regulators;

Law enforcement;

Strategically aligned businesses.
Audio, Video or Similar Information (customer service calls, emails, security monitoring) Individuals submitting information;

Information we collect for security purposes.

 Auditing relating to transactions; 

Security detection, protection and enforcement;

Functionality /error repair;

Ad customization;

Performing services;

Internal research and development;

Quality control.

 Service providers (such as payment processors, marketing partners, shipping partners);

Affiliated companies; 

Government regulators;

Law enforcement;

Strategically aligned businesses.
Geolocation Information we automatically collect from site visitors. Auditing relating to transactions; 

Security detection, protection and enforcement;

Functionality /error repair;

Ad customization;

Performing services;

Internal research and development;

Quality control.

 Service providers (such as payment processors, marketing partners, shipping partners, employee benefits partners);

Affiliated companies; 

Government regulators;

Law enforcement;

Strategically aligned businesses.
Professional, Educational, or Employment-related Information Information submitted by individuals;

Information received from third parties in connection with vendor or employment status or applications;

Information we observe related to vendor or employment oversight.

 Employee management and vendor oversight. Service providers (such as payment processors, employee benefits partners);

Government regulators.
Inference from the above (preferences, characteristics, behavior, attitudes, abilities, etc.) Internal analytics Auditing relating to transactions; 

Security detection, protection and enforcement;

Functionality /error repair;

Ad customization;

Performing services;

Internal research and development;

Quality control.

 Service providers (such as payment processors, mail houses, marketing partners, shipping partners, employee benefits partners);

Affiliated companies; 

Government regulators;

Law enforcement;

Strategically aligned businesses.

*For your reference, ‘Business Purposes’ include:

  1. Performing services for clients.
    • To administer or otherwise carry out our obligations in relation to any agreement to which we are a party;
    • To assist in completing a transaction or order;
    • To allow tracking of shipments; 
    • To prepare and process invoices;
    • To respond to queries or requests and to provide services and support;
    • To provide after-sales customer relationship management;
    • To create and manage customer accounts; 
    • To notify about changes to our services and products; 
    • To administer any promotion, sweepstakes, contest, survey, or competition;
    • To provide information regarding our products and services; 
    • To offer our products and services in a personalized way, for example, we may provide suggestions based on previous requests to identify suitable products and services more quickly;
    • To be able to verify your identity;
    • To comply with applicable laws and regulations.
  2. Advertising customization.
    • For marketing and promotions we believe of interest and to provide, or allow selected third parties to provide, information about products and services of interest.
  3. Auditing relating to transactions, internal research and development.
    • To provide for internal business administration and operations, including troubleshooting, website customization, enhancement or development, testing, research, administration and operation of our website and data analytics;
    • To create products or services that may meet client needs;
    • To measure performance of marketing initiatives, ads, and websites “powered by” another company on our behalf.
  4. Security detection, protection and enforcement; functionality debugging, error repair.
    • As part of our efforts to keep our website safe and secure; 
    • To ensure the security of client accounts and our business, preventing or detecting fraud, malicious activity or abuses of our website, for example, by requesting verification information in order to reset account passwords;
    • To ensure the physical security of our premises through the monitoring of surveillance images;
    • To resolve disputes, to protect the rights, safety and interests ourselves, our users or others, and to comply with our legal obligations.
  5. Quality control.
    • To monitor quality control and ensure compliance with our legal obligations, codes and ordinances, policies and procedures;
    • To develop and improve our products and services, for example, by reviewing visits to the website and various subpages, demand for specific products and services and user comments.

13. Links to third-party sites

When you use the Site or our service, you may be directed to other websites that are beyond our control. These may include merchant sites where you select items for purchase or payment sites where you pay for your purchases.

Please note that our payment processors are independent from 1stDibs  and require us to inform you of the following: (i) where engaged as a payment processor, PayPal is an independent Controller of Personal Information processed; (ii) this is a link to the Hyperwallet Privacy Policy (https://www.hyperwallet.com/privacy-policy/), and you should also review the Hyperwallet terms and conditions available from Hyperwallet; and (iii) you may exercise your data subject rights in connection with the payment processing services provided by Hyperwallet (the “Hyperwallet Services”) directly with PayPal according to the instructions described in the Hyperwallet Privacy Policy (link is in this paragraph, above).  For the purposes of this paragraph only: (a) “Controller” means an entity that determines the purposes and means of the processing of Personal Information, or, if such term (or terms addressing similar data protection and privacy roles) is defined in Data Protection Law, “Controller” shall have the meaning as defined in the applicable Data Protection Law including a “Business” as defined in the CCPA; and (b)  “Data Protection Law(s)” means any applicable data protection laws, regulations, directives, regulatory requirements and codes of practice applicable to the provision of the Hyperwallet Services including any amendments thereto and any associated regulations or instruments. 

We may also allow third party sites or applications to link to the Site. We are not responsible for the privacy practices of any third parties or the content of linked sites, but we do encourage you to read the applicable privacy policies and terms and conditions of such parties or websites.

This Privacy Policy only applies to our Sites.

14. Contact 1stDibs

If you have any questions or suggestions with respect to this Privacy Policy or if you wish for a copy of, to ask us to update, or to correct or show you your Personal Information as provided above, you can write to us at 1stDibs.com, Privacy Policy, 300 Park Avenue South, 10th Floor, New York, NY 10010, or you can simply click on Contact Us to send us an email to privacypolicy@1stDibs.com.