If you use Poshmark from outside the US, your personal data will be transferred to and processed in the United States, and using the platform is treated as consent to that transfer.
This analysis describes what Poshmark's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
For users in the EU, UK, and other jurisdictions with strict data transfer rules, relying on implied consent from platform use as the legal basis for international data transfers may not satisfy applicable legal requirements.
Interpretive note: The policy does not specify the transfer mechanisms relied upon for EU and UK data, and reliance on implied consent from platform use may not satisfy GDPR Chapter V requirements; adequacy of transfer protections is asserted but not detailed.
The updated policy establishes new restrictions on product categories previously allowed or unregulated, including prohibitions on used socks and underwear, mystery boxes with specific disclosure requirements, and strict conditions for cosmetics and electronics. Sellers who list prohibited items may face temporary or permanent account suspension, payment withholding, and item removal at Poshmark's discretion. The policy explicitly reserves the right to dispose or destroy prohibited items sent to authentication centers. You can report suspected violations to Poshmark, but enforcement decisions remain within the company's sole discretion.
View change record →Poshmark's updated Privacy Policy provides significantly more transparent disclosure about what personal data the company collects, how it uses that data, and how you can exercise your privacy rights. The policy now explicitly itemizes data collection points, including photos, videos, payment information, social media accounts, and user interaction data, and provides a dedicated section on consumer rights and choices. The policy also includes a dedicated California Privacy Notice supplement, indicating enhanced compliance with California privacy laws. You can review the full updated policy and California Privacy Notice to understand Poshmark's specific data practices and identify which privacy rights and choices are available to you.
View change record →Poshmark's updated privacy policy provides more explicit detail about what categories of personal data the company collects through the platform, including user-generated content (photos, videos, listings), interaction data (likes, comments, offers), and payment information. The expanded disclosure does not necessarily indicate new data collection practices, but gives users clearer visibility into what information Poshmark holds. You can review the full policy at Poshmark's website to understand which data collection practices apply to your account activity and, if you are a California resident, consult the supplementary California Privacy Notice referenced in the policy.
View change record →Removal of international data transfer disclosure eliminates transparency about cross-border data flows and associated privacy risks for international users.
View full change record →This new provision discloses mandatory U.S. data transfers for non-U.S. users with broad consent mechanism, addressing regulatory requirements for international privacy compliance.
View full change record →Users outside the US, particularly in the EU and UK, should be aware that their personal data is processed in the United States, and the adequacy of legal transfer mechanisms protecting that data should be independently evaluated.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
Further, you may take legal actions in relation to any potential breach of your rights regarding the processing of your Personal Information, as well as to lodge complaints before the competent data prot...
"If you are located outside of the United States, please be aware that information we collect may be transferred to, and processed in, the United States. By using our services, you consent to this transfer. We take steps to ensure that your personal information receives adequate protection when transferred internationally.Excerpt from Poshmark's Privacy Policy
REGULATORY LANDSCAPE: International data transfers from the EU and EEA to the United States are governed by GDPR Chapter V, which requires an adequacy decision, standard contractual clauses, binding corporate rules, or another approved transfer …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
For users in the EU, UK, and other jurisdictions with strict data transfer rules, relying on implied consent from platform use as the legal basis for international data transfers may not satisfy applicable legal requirements.
Users outside the US, particularly in the EU and UK, should be aware that their personal data is processed in the United States, and the adequacy of legal transfer mechanisms protecting that data should be independently evaluated.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Poshmark.