Privacy Policy

This template explains how HobbyTrade UK handles personal data under UK GDPR. It should be reviewed by a data-protection specialist before commercial use.

What we collect

  • Account data: display name, email address, password hash, optional username, bio and profile photo.
  • Location data: the postcode you provide, which we convert to an approximate district and coordinates. Only the district and nearest town are shown publicly.
  • Listing data: your photos, descriptions, prices and delivery options.
  • Activity data: messages, offers, favourites, saved searches, reviews and reports.
  • Technical data: IP address, device and browser information, and error logs.

Why we use it

  • To operate your account and show your listings (performance of a contract).
  • To keep the marketplace safe, screen prohibited items and investigate reports (legitimate interests).
  • To send service notifications about your listings, messages and offers (performance of a contract).
  • To send optional marketing updates (consent, which you can withdraw at any time in settings).

Who we share it with

We use service providers to host the site, store images, send email and process optional promotion payments. They act on our instructions. We share data with the police or other authorities where we are legally required to, or where it is necessary to investigate serious harm. We never sell your personal data.

How long we keep it

Account and listing data is kept while your account is open. When you close your account we hide your profile and withdraw your listings, then delete or anonymise personal data after a retention period that lets us handle disputes, fraud investigations and legal obligations.

Your rights

  • Access a copy of your data, and ask us to correct it.
  • Ask us to delete it, or restrict how we use it.
  • Object to processing based on legitimate interests.
  • Withdraw consent for marketing at any time.
  • Complain to the Information Commissioner's Office (ICO).

Contacting us

Use the contact form on this site for any privacy request, including data access and deletion. We aim to respond within one month, as UK GDPR requires.