Privacy Policy

We collect the following personal data:

• Account data - your name, email address, and username when you register or sign in.
• Listing data - details and images of items you list or buy, including seller and buyer email addresses.
• Message data - the content of messages exchanged between buyers and sellers about an order.
• Payment data - processed by Stripe on our behalf; we do not store your full card details.
• Organisation data - contact details for schools, PTAs, sports clubs, scout groups, dance academies, and community organisations registering a portal.
• Usage and cookie data - collected only with your consent, as set out in our Cookie Policy.

We rely on the following lawful bases under the UK GDPR:

• Contract (Article 6(1)(b)) - to fulfil your orders, process payouts, and deliver the marketplace service you requested.
• Legal obligation (Article 6(1)(c)) - to retain records for tax and accounting purposes.
• Legitimate interests (Article 6(1)(f)) - to prevent fraud, keep the platform safe, and communicate with you about your orders.
• Consent (Article 6(1)(a)) - for analytics and marketing cookies, and for mailing list sign-ups. You can withdraw consent at any time.

We use your data to create and manage your account, list and sell items, process payments and payouts, facilitate buyer-seller communication, run organisation partner portals, and (with consent) improve the service and send relevant updates.

We share data only where necessary:

• Stripe - our payment provider, to process checkout and seller payouts via Stripe Connect.
• Schools, PTAs, sports clubs and community organisations - so partner organisations can manage listings and receive their fee share.
• Charity partners - aggregate donation figures only, where you choose to donate your proceeds.
• Buyers and sellers - email addresses are shared to enable collection and order messaging.

We never sell your personal data.

We keep your data for as long as your account is active and for as long afterwards as needed to meet legal, tax, or accounting obligations. Order and payment records are typically retained for seven years.

You have the right to:

• Be informed about how we use your data (this policy).
• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erasure of your data (the right to be forgotten), subject to legal retention duties.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time where processing relies on it.

To exercise any right, contact us using the details below. If you are unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Some processors (for example Stripe) may transfer data outside the UK. We only do so with appropriate safeguards, such as UK International Data Transfer Agreements or recognised adequacy decisions.

For privacy questions or to make a request, contact the data controller via the support channels on our site. We aim to respond within one month.