Privacy policy

Draft for legal review.To be finalised with the company's legal advisers before public launch. [Company legal name and ICO registration to be inserted.]

What we collect

• Account data: name, email, phone, town and postcode.
• Seller verification data: identity and bank details are collected and held by our payment provider, Stripe — we never see or store your card numbers or full bank details.
• Marketplace activity: listings, bids, purchases, messages, ratings and disputes.
• Technical data: device and usage information used for security (e.g. fraud and shill-bidding prevention).

How we use it

• To run the marketplace: listings, bidding, payments, delivery and disputes (performance of contract).
• To keep the platform safe: verification, fraud prevention, enforcing our rules (legitimate interests).
• To meet legal duties: HMRC digital platform reporting, accounting, responding to lawful requests (legal obligation).
• To send service emails (outbid alerts, order updates, messages). Marketing emails are optional and separate — you can opt out any time.

Who we share it with

• Stripe (payments and identity verification), Supabase (secure hosting of our database, UK/EU region), Vercel (website hosting), and our email delivery provider.
• Your delivery details are shared with the seller of an item you buy, solely to fulfil the order. Your contact details are never shown publicly.
• HMRC, where the law requires platform reporting of seller income.

Retention and your rights

We keep transaction records for 6 years (legal/accounting requirements) and account data while your account is active. You have the usual UK GDPR rights: access, correction, deletion, restriction, portability and objection. To exercise them, contact us via the contact page. You can complain to the ICO (ico.org.uk) if you're unhappy with how we handle your data.

Cookies

We use essential cookies for sign-in and security. We do not use third-party advertising cookies.