eBay Privacy Notice

This document is eBay's User Privacy Notice, effective April 21, 2025, governing the collection, processing, and sharing of personal data across all eBay services, applications, and tools provided by eBay Inc. and its affiliates globally, with the applicable controller entity varying by user region and service type. The notice states that eBay collects an extensive range of personal data including identifiers, financial information, government-issued IDs, biometric-adjacent data (selfie photos), device and location data, behavioral and inferred data, and communications content; the terms authorize sharing this data with eBay affiliates, third-party service providers, advertising partners, law enforcement, and other users, with the notice asserting broad legitimate interests as a legal basis alongside consent and contractual necessity. Several provisions warrant attention: the notice asserts the right to filter and scan user messages sent through eBay's messaging tools, to process behavioral and inferred data for targeted advertising, and to collect government-issued identification and selfie photos from sellers, which collectively represent a notably comprehensive data profile; the document also reserves the right to share data with 'other companies' for joint marketing and with credit agencies, though the scope of these disclosures may be constrained by applicable law in certain jurisdictions. The notice explicitly engages GDPR (for EU/EEA users), UK GDPR, CCPA/CPRA (for California residents), and references regional disclosures for additional US states, Canada, and Australia; compliance teams should note that the reliance on legitimate interests as a legal basis for behavioral advertising and data sharing may face scrutiny under GDPR, and that seller identity verification data including government IDs may implicate additional regulatory frameworks depending on jurisdiction.