Privacy Policy

Squinted ("we", "us", or "our") is committed to protecting the privacy of our UK-based buyers and sellers. This policy sets out how we collect and manage your personal data in accordance with the UK GDPR.

1. The Controller

Squinted is the "data controller" for the personal information collected through our marketplace. This means we are responsible for deciding how we hold and use personal information about you.

2. Information We Collect

We collect and process personal data to facilitate the marketplace:

• Identity Data: Full name and username
• Contact Data: Email address, telephone number, and delivery/billing addresses.
• Financial Data: Bank account and payment card details (processed securely via PCI-compliant partners).
• Transaction Data: Details about payments to and from you and products you have purchased or sold.
• Technical Data: IP address, login data, and browser type

3. Our Legal Basis for Processing

Under UK GDPR, we only use your data when the law allows us to. Most commonly:

• Performance of a Contract: To fulfill the buy/sell agreement between users.
• Legal Obligation: To comply with UK tax laws (HMRC) and anti-money laundering regulations.
• Legitimate Interests: To prevent fraud and improve our marketplace security.
• Consent: Where you have opted-in to receive our marketing newsletters.

4. How Data is Shared Between Buyers & Sellers

To ensure orders are fulfilled, we facilitate the exchange of information:

• Seller to Buyer: Buyers will see the Seller's name.
• Buyer to Seller: Sellers are provided with the Buyer’s name and delivery address solely for the purpose of shipping the order.

Important: Under UK GDPR, Sellers are "independent controllers" of the Buyer data they receive and must not use it for marketing purposes without separate consent

5. Data Retentions

We retain your data for as long as necessary to provide our services and comply with legal obligations:

• Financial Records: We are required by UK law to keep transaction and tax data for 6 years plus the current tax year.
• Account Data: Kept as long as your account is active

6. Your Legal Rights

As a UK resident, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request that inaccurate personal data be corrected.
• Right to Erasure: Request that your personal data be deleted.
• Right to Restrict Processing: Request that we limit how we process your personal data.
• Right to Data Portability: Request a copy of your personal data in a structured, machine-readable format.
• Right to Complain: You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK regulator for data protection (www.ico.org.uk).

7. International Transfers

If we transfer your data outside of the UK (for example, to a server located in the US), we ensure a similar degree of protection is afforded to it by using specific contracts approved by the UK government.