Privacy policy

The operator of Preloved is the data controller for the personal data described in this policy. If you have any question about how your data is handled, contact us via the Contact us page.

[To be reviewed by counsel] Insert the controller’s legal identity, ICO registration number, and the contact details of the Data Protection Officer (or confirm one is not required).

We collect the information you give us directly: your screen name, email address and password when you register; your town and postcode when you place an advert; the content of your listings, reviews and messages to other members; and payment details when you buy a membership (card payments are processed by our payment provider — we never see or store your full card number).

We also collect some information automatically: technical data such as your IP address, device and browser type, and how you use the site (pages viewed, searches made). Cookies and similar technologies are covered in our cookie policy.

We use your data to run the marketplace: showing your adverts to buyers, delivering messages between members, processing membership payments, and providing support. We rely on the performance of our contract with you for this.

We also use data to keep the community safe (detecting scams, enforcing our rules, moderating listings, messages and reviews) and to improve the service — we rely on our legitimate interests for this. Where we send you marketing, we ask for your consent first and you can withdraw it at any time.

We never sell your personal data.

Your screen name and general location (town) appear on your adverts and profile. Your email address and phone number are never shown publicly. Messages you send are visible only to you, the member you’re talking to, and our moderation team where a conversation is reported or screened for safety.

We share data with service providers who help us run Preloved — hosting and infrastructure, payment processing, email delivery and analytics — under contracts that restrict what they can do with it. We may disclose data where the law requires it, for example to law enforcement investigating fraud, or to protect the safety of our members.

[To be reviewed by counsel] List the current processors (hosting, payments, identity verification, email/analytics suppliers) and confirm the international-transfer safeguards for any outside the UK.

We keep your data while your account is open. When you close your account we remove your adverts and personal details within a reasonable period, keeping only what we must for legal, tax or fraud-prevention purposes.

[To be reviewed by counsel] Confirm concrete retention periods per data category.

You have the right to access the personal data we hold about you, correct it, delete it, restrict or object to how we use it, and receive a copy in a portable format. Most of your details can be viewed and edited directly in your account settings; for anything else, contact us and we’ll respond within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office (ico.org.uk) — though we’d welcome the chance to sort it out first.

We’ll update this policy as the service or the law changes, and note the date at the top. If a change significantly affects how we use your data we’ll tell you directly before it takes effect.