Privacy Policy

Who we are

Uni Marketplace (company details to follow) is the data controller for the personal data described here.

What we collect and why

• Account: your name and university email from Microsoft sign-in — to run your account and confirm you are a Reading student. We never see or store your password.
• Listings and messages: what you post and send — to run the marketplace and, if needed, to review disputes or reports.
• Orders: what you bought or sold, amounts, timestamps, handover codes — to process payments and resolve disputes.
• Photos: listing photos (public) and handover/dispute photos (private to the two parties and administrators).
• Payment: card details go directly to Stripe; we store only a reference. Sellers give Stripe their date of birth, address and bank details for identity checks required by law.
• Technical: login cookies and basic server logs — to keep the site secure.

Legal bases

Performance of our contract with you (running the marketplace); legal obligation (payment regulation, HMRC digital-platform reporting for sellers above the reporting threshold); and our legitimate interests in preventing fraud and keeping users safe.

Who we share it with

Stripe (payments), Supabase (database and storage hosting), Vercel (website hosting), Resend (emails) and, where required, HMRC. We do not sell personal data or use it for advertising.

How long we keep it

Account data while your account exists; order, dispute and handover records for 6 years for tax and dispute purposes; handover and dispute photos for 90 days after the order completes unless a dispute is open; messages for 12 months after the last message.

Your rights

You can see, correct, export or delete your data from your account settings, or by contacting us. Some records must be kept where the law requires (for example completed-order records). You can complain to the Information Commissioner's Office (ico.org.uk).

Cookies

We use only strictly necessary cookies to keep you signed in. No advertising or tracking cookies.