Privacy Policy

Uniformly Ltd is the data controller responsible for your personal data under the UK GDPR and Data Protection Act 2018. Uniformly is a trading name of Uniformly Ltd, a company registered in England and Wales (company number 17520887). Registered office: 4 Redhouse Close, Solihull, B93 8AR, United Kingdom.

Contact us at info@uniformly.app for any privacy questions or data requests.

We collect the following personal data:

• Account data - your name, email address, and username when you register or sign in.
• Listing data - details and images of items you list or buy.
• Message data - the content of messages exchanged between buyers and sellers about an order, through in-app chat only.
• Payment data - processed by Stripe on our behalf; we do not store your full card details.
• Organisation data - contact details for schools, PTAs, sports clubs, scout groups, dance academies, and community organisations registering a portal.
• Wanted alert data - the school, item type, size and email address you choose when setting a wanted alert. We use this to email you when a matching item is listed. Alerts are deleted when your account is deleted.
• Delivery details - for posted orders, the buyer's name and delivery address.
• IP addresses - we record IP addresses briefly to prevent abuse and fraud, and delete them within 24 hours.
• Usage and cookie data - collected only with your consent, as set out in our Cookie Policy.

We rely on the following lawful bases under the UK GDPR:

• Contract (Article 6(1)(b)) - to fulfil your orders, process payouts, and deliver the marketplace service you requested.
• Legal obligation (Article 6(1)(c)) - to retain records for tax and accounting purposes.
• Legitimate interests (Article 6(1)(f)) - to prevent fraud, keep the platform safe, and communicate with you about your orders.
• Consent (Article 6(1)(a)) - for analytics and marketing cookies, and for mailing list sign-ups. You can withdraw consent at any time.

We use your data to create and manage your account, list and sell items, process payments and payouts, facilitate buyer-seller communication through in-app chat, run organisation partner portals, and (with consent) improve the service and send relevant updates.

We use the following third-party service providers to operate the platform:

• Stripe - payment processing and seller payouts via Stripe Connect. Sellers' payout and identity details (bank account, verification documents, tax information) are collected and held by Stripe under Stripe's Connected Account Agreement, not by Uniformly.
• Google - optional sign-in with your Google account.
• Resend - sends account verification and order emails on our behalf.
• Base44 - website hosting and data storage.

Each provider only receives the data necessary to perform their service and is bound by their own data protection obligations.

We share data only where necessary:

• Stripe - our payment provider, to process checkout and seller payouts via Stripe Connect.
• Sellers - for posted orders, the seller receives the buyer's name and delivery address only, to post the item.
• Schools, PTAs, sports clubs and community organisations - so partner organisations can manage listings and receive donated proceeds and own-stock sales.

Email addresses and phone numbers are never shared. For posted orders, only the buyer's name and delivery address are shared with the seller. All buyer-seller communication happens through in-app chat on the platform.

We never sell your personal data.

We keep your data for as long as your account is active and for as long afterwards as needed to meet legal, tax, or accounting obligations. Order and payment records are typically retained for seven years.

You have the right to:

• Be informed about how we use your data (this policy).
• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erasure of your data (the right to be forgotten), subject to legal retention duties.
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time where processing relies on it.

To exercise any right, contact us using the details above. If you are unhappy with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

Some processors (for example Stripe) may transfer data outside the UK. We only do so with appropriate safeguards, such as UK International Data Transfer Agreements or recognised adequacy decisions.

For privacy questions or to make a request, contact the data controller using the details in the "Who we are" section above. We aim to respond within one month.