The policy states that users have jurisdiction-dependent rights including access, portability, correction, deletion, processing restriction, objection, post-death instructions, and targeted advertising opt-out, and that StockX makes efforts to honor access, portability, deletion, and correction requests from all users regardless of jurisdiction.
This analysis describes what StockX's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes a unified Personal Data Access Request portal for exercising data rights and commits to honoring access, portability, deletion, and correction requests globally, which extends certain rights beyond jurisdictions where they are legally mandated. The inclusion of post-death data instructions is a disclosure not universally present in comparable platform privacy policies.
The updated policy authorizes StockX to share and sell personal information to a broader range of recipients than previously disclosed. Specifically, the policy now explicitly permits sharing or selling personal data, including identifiers, transaction data, and browsing behavior, to Live Sellers on the Live Shopping Platform, Sellers on the Listings Marketplace, and third-party data brokers. The prior version limited disclosures to 'sharing' with 'StockX Verified Sellers' without explicit reference to data sales or data brokers. Under the revised terms, data sale and sharing is now standard practice for analytics, advertising, and marketplace partners. The policy does not describe a consumer opt-out mechanism for this data sharing or selling.
View change record →The agreement states that data rights including access, deletion, correction, and portability are available to all StockX users through the Personal Data Access Request portal, regardless of jurisdiction. Under these terms, users may also submit appeals for decisions made regarding their data rights requests.
Cross-platform context
See how other platforms handle User Rights and Personal Data Access Request Mechanism and similar clauses.
Compare across platforms →"Depending on your jurisdiction and under certain circumstances, you may have the following rights with respect to your Personal Information: to be provided with a copy of your Personal Information (right of access), including the right to have your Personal Information provided in a commonly used and machine-readable format (right of portability); to request the correction of your Personal Information; to request the deletion of your Personal Information; to request that we restrict the processing of your Personal Information; to object to the further processing of your Personal Information, including the right to object to marketing communications; to provide instructions about your Personal Information after death; and to opt-out of sharing your Personal Information with third parties for some purposes, notably targeted advertising, which may be defined as a sale under applicable laws. You may also have the right to appeal a decision we make regarding your rights. These rights vary depending on where you reside, but we make efforts to honor requests for access/portability, deletion, and correction from all StockX users, regardless of where they live.Excerpt from StockX's Privacy Policy
1) REGULATORY LANDSCAPE: This provision engages GDPR Articles 15 through 21 governing data subject rights for EEA users, UK GDPR equivalent provisions, CCPA consumer rights provisions for California residents, and analogous frameworks for Mexico, South …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes a unified Personal Data Access Request portal for exercising data rights and commits to honoring access, portability, deletion, and correction requests globally, which extends certain rights beyond jurisdictions where they are legally mandated. The inclusion of post-death data instructions is a disclosure not universally present in comparable platform privacy policies.
The agreement states that data rights including access, deletion, correction, and portability are available to all StockX users through the Personal Data Access Request portal, regardless of jurisdiction. Under these terms, users may also submit appeals for decisions made regarding their data rights requests.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by StockX.