Privacy Policy (UK)

Effective Date: 01/01/2026
Last Updated: 01/01/2026
GOLDFINCH (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our marketplace website [your website URL] (the “Website”). This policy applies to all users, including buyers, sellers, and visitors in the United Kingdom.
By using our Website, you agree to the practices described in this Privacy Policy.

1. Information We Collect

a. Information you provide:

Name, email address, phone number, and postal address
Account login credentials
Payment information (processed securely via our payment providers)
Listings or product details you upload as a seller
Communication history with other users or our support team

b. Information we collect automatically:

IP address and device information
Browser type and operating system
Pages visited and actions performed on our Website
Cookies and similar technologies (see our Cookie Policy for details)

c. Information from third parties:

Social media profiles or authentication services you choose to link
Data from our partners or public sources relevant to your activity on the marketplace

2. How We Use Your Information

We use your personal data for the following purposes:

To provide, operate, and improve our Website
To facilitate transactions between buyers and sellers
To communicate with you about your account, transactions, or customer support inquiries
To send marketing communications (where you have consented)
To detect, prevent, and address fraud, security, or legal issues
To comply with legal obligations under UK law

3. Legal Basis for Processing (UK GDPR)

We rely on the following legal bases for processing your personal data:

Contractual necessity: To fulfil agreements with users, e.g., processing orders
Legitimate interests: To operate and improve the marketplace, prevent fraud, and ensure security
Consent: Where you have provided consent for marketing or other optional uses
Legal obligation: To comply with applicable laws and regulations

4. Sharing Your Information

We do not sell your personal data. We may share your information with:

Service providers (e.g., payment processors, IT and hosting providers)
Law enforcement, regulators, or other authorities when legally required
Other users, as necessary for marketplace transactions (e.g., buyer and seller contact info for delivery)

We ensure that any third-party service providers comply with data protection laws.

5. Data Retention

We will retain your personal data only as long as necessary for the purposes described in this Privacy Policy, or as required by law. For example:

Account information is retained until you close your account, plus a reasonable period for legal and accounting obligations
Transaction records are retained for at least 6 years for tax and legal purposes

6. Your Rights

Under the UK GDPR, you have the right to:

Access your personal data and receive a copy
Correct inaccurate or incomplete information
Request erasure of your data where no legal obligation prevents it
Object to or restrict processing of your data
Withdraw consent at any time (for marketing communications)
Request data portability

To exercise these rights, please contact us at [contact email]. We will respond within 1 month, unless a legal exception applies.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyse website usage, and provide targeted advertising. You can manage your cookie preferences through your browser settings. For more details, please see our Cookie Policy.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the Internet or electronic storage is 100% secure.

9. International Transfers

We may transfer your personal data to countries outside the UK for operational purposes. Where this occurs, we ensure adequate protection through standard contractual clauses or other legally approved mechanisms.

10. Children’s Privacy

Our Website is not intended for children or under the age of 18 years old. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. We encourage you to review this page periodically.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact:

GOLDFINCH
Address: [Company Address]
Email: [Contact Email]
Phone: [Contact Phone Number]