Legal — UK
Privacy policy
This notice describes how we process personal data when you use Letsallbuy. It is designed for UK users and references the UK GDPR and Data Protection Act 2018. It remains a draft — not legal advice.
1 Information we collect
Depending on how you use the site, this may include:
- Identity & account — username, email, password hash, profile fields you provide.
- Listings & transactions — titles, descriptions, photos, bids, end times, invoices and order-related data visible in messages.
- Messages — content you send through the messaging system.
- Preferences — saved searches, watchlist (where stored), alert settings.
- Android app — optional saved sign-in (encrypted on your device), biometric unlock, push notification tokens (Firebase Cloud Messaging), and activity linked to your account. We do not collect precise device GPS for “Near me”; that uses the postcode on your profile.
- Technical & security — IP address, browser type, timestamps, logs for security and debugging.
- Cookies & storage — as described in our Cookie policy.
2 Who is responsible
The data controller is the legal entity operating Letsallbuy. Insert the registered name, company number (if applicable), and UK contact details for privacy and data protection enquiries (postal address and email). A dedicated privacy@ inbox is recommended.
3 Why we use your data
We process data on the following bases (UK GDPR Article 6), as applicable:
| Purpose | Typical lawful basis |
|---|---|
| Running accounts, listings, bids, and messaging | Performance of a contract; steps at your request before a contract |
| Security, abuse prevention, and enforcing our terms | Legitimate interests (and legal obligations where required) |
| Service emails (e.g. alerts you have asked for) | Contract / legitimate interests; marketing only with consent where required |
| Optional analytics (if enabled) | Consent (via cookie banner) |
| Legal claims and regulatory requests | Legal obligation / legitimate interests |
4 Your rights
You may lodge a complaint with the Information Commissioner’s Office (ICO).
| Your right | What it means |
|---|---|
| Access | Ask for a copy of the personal data we hold about you. |
| Correction | Ask us to fix inaccurate or incomplete data. |
| Erasure | Ask us to delete your data in certain circumstances. |
| Restriction | Ask us to limit how we use your data in certain cases. |
| Objection | Object to processing based on legitimate interests in some cases. |
| Portability | Receive your data in a portable format where the law applies. |
To exercise rights, contact us via Help & Contact (signed-in messaging). We may need to verify your identity before responding, usually within one calendar month.
You can request deletion of your account in the Letsallbuy Android app under My Lab → App settings → Delete my account, or by messaging us via Help & Contact. Deletion is permanent and removes your listings, bids, messages, and related account data, subject to any legal retention we must keep.
5 Sharing & processors
We may share data with hosting and email providers that process it on our instructions (processors), and with other users where the service requires it (e.g. seller and buyer on an order). We never sell your personal data to advertisers, data brokers, or other third parties for their marketing.
If we use subprocessors outside the UK, we rely on appropriate safeguards (e.g. UK IDTA / Addendum) as required — list them in an internal register.
6 How long we keep data
We retain information only as long as necessary for the purposes above, including resolving disputes and meeting tax, accounting, or regulatory requirements. Define concrete schedules (e.g. closed accounts after X months) in your internal retention policy and keep this page aligned.
7 Cookies & similar tech
We use cookies and similar technologies as described in our Cookie policy. Optional analytics cookies are only set if you choose Accept all in the banner.
Manage cookie preferences8 Contact us
For privacy questions, contact us via Help & Contact when signed in, or email privacy@letsallbuy.co.uk once your dedicated inbox is live.