Data Privacy & Consumer Rights

GDPR applies whenever you process personal data of EU/EEA residents, regardless of where your business is based. This includes names, addresses, payment details, and browsing data. You need lawful basis for processing, must provide privacy notices, and allow data subject rights (access, deletion). Swap stores and manages data in full compliance with GDPR, with all servers in Europe and signed DPAs.

Swap's Compliance product helps brands stay compliant wherever they sell, covering GPSR, tax obligations, customs requirements, and other regulatory needs. The platform automates compliance workflows so brands don't need to manage them manually.

Prevent disputes through transparency: clear pricing, accurate delivery estimates, and easy returns. If a chargeback occurs, respond within the card network's timeframe with evidence (tracking proof, delivery confirmation, communication records). International chargebacks are more complex due to currency conversion and cross-border documentation. Clear DDP pricing prevents most duty-related disputes.

Rights vary by market: EU consumers have 14-day withdrawal right, right to repair/replace faulty goods, and protection against misleading advertising. US rights vary by state. Australia has strong consumer guarantees for faulty goods. Understanding local rights prevents legal disputes and builds trust.

Key laws: US CCPA/CPRA (California consumer privacy), Canada's PIPEDA, Brazil's LGPD, Australia's Privacy Act, UK GDPR. Each has different requirements for consent, data access rights, and breach notification. Operating in multiple markets means complying with each jurisdiction's rules simultaneously.

Key areas: consumer protection (return rights, advertising standards), data protection (GDPR, CCPA), product safety (GPSR, CE), payment regulations (PSD2 in EU), and digital services (EU DSA for platforms). Laws are becoming stricter globally. Staying compliant across markets requires either deep expertise or an automated compliance platform.