Privacy policy

A summary in plain English. The full legal text is below.

The short version

We collect what we need to run the marketplace — email, listings, messages, payment confirmation.
We don't sell your data to advertisers.
We store data in the UK / EU.
You can download your data and delete your account from your dashboard.
If law enforcement asks, we cooperate with valid UK requests only.

When you register: email, password (hashed, never stored in plain text), display name, optional phone.
When you post: the listing content, photos, location, price.
When you message: message content (encrypted in transit, stored on UK servers).
When you pay: Stripe handles the card details directly — we only store payment status and the last 4 digits.
Server logs: IP address, user agent, request path, retained for 30 days for security purposes.

Access — download everything we hold via Dashboard → Privacy → Export.
Correction — edit profile and listings yourself; email us for anything else.
Erasure — delete your account from Dashboard → Privacy. Active payments and tax records may be retained for 7 years per HMRC rules.
Restriction / objection — email privacy@spotbly.co.uk.
Complaint — to the Information Commissioner's Office.

Data controller: Spotbly Marketplace, UK. Email privacy@spotbly.co.uk.

Last updated: 22 May 2026.