Privacy Policy

1. Who we are

UK Junction Trading Ltd is the data controller for personal data processed through the UK Junction website and app. We are registered in England and Wales, company number 16937235, registered office 71a Rowsley Street, Leicester, LE5 5JP, and registered with the Information Commissioner's Office under reference ZC194063.

2. Information we collect

3. How we use your information

• To create and manage your account and provide the UK Junction service;
• To enable messaging between buyers and sellers;
• To process payments and manage subscriptions;
• To confirm control of your email address, shown as a "Verified" badge;
• To moderate content, investigate reports, and keep the Platform safe;
• To send service-related communications (e.g. security alerts, account notices) and, where you've opted in, marketing communications;
• To comply with legal obligations, including responding to law enforcement requests where legally required;
• To analyse and improve the Platform's performance and features.

4. Our lawful basis

Under UK GDPR, we rely on the following lawful bases depending on the activity:

• Contract: processing needed to provide the account and marketplace services you've signed up for;
• Legitimate interests: for fraud prevention, platform security, and service improvement, balanced against your rights;
• Consent: for marketing communications and non-essential cookies, which you can withdraw at any time;
• Legal obligation: where we must retain or disclose data to comply with the law.

5. Sharing your information

We share the minimum information necessary, including with:

• Other users, where required for a transaction, your display name and messages are visible to the other participant in a conversation;
• Service providers who process data on our behalf under contract: Stripe (payment processing), Resend (transactional and account-related email delivery), Cloudflare R2 (secure storage of images and files you upload), and Neon (our database hosting provider);
• Professional advisers, regulators, or law enforcement, where required by law or to protect rights, safety, or prevent fraud;
• A buyer or successor, in the event of a business sale, merger, or reorganisation, subject to the same protections in this policy and with notice to you.

We do not sell your personal data to third parties.

6. International transfers

Some of our service providers, including Stripe, may process data outside the UK. Where this happens, we ensure appropriate safeguards are in place, such as the UK's International Data Transfer Agreement, an adequacy regulation, or standard contractual clauses, in line with UK GDPR requirements.

7. Data retention

We keep personal data only as long as necessary for the purposes it was collected, including to meet legal, accounting, or reporting requirements. As a general guide:

• Account data is retained while your account is active, and for a limited period afterwards in case you wish to reactivate or to meet legal obligations;
• Transaction and billing records are retained for the period required by UK tax law (generally 6 years);
• Reports and moderation records are retained as needed for safety and legal purposes.

You may request deletion of your account and associated data at any time (see Section 8), subject to data we are legally required to retain.

8. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data in certain circumstances ("right to be forgotten");
• Restrict or object to certain processing, including direct marketing;
• Data portability, receive your data in a portable format;
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, email help@ukjunction.com. We'll respond within one month, as required by law. Some rights are subject to exemptions, we'll explain if one applies to your request.

9. Cookies

We use strictly necessary cookies to run UK Junction (e.g. keeping you signed in), and, with your consent, analytics and preference cookies to understand usage and remember your settings. You can manage cookie preferences at any time via Cookie Preferences, in line with the Privacy and Electronic Communications Regulations (PECR).

10. Children

The Platform is not intended for use by anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and secure third-party infrastructure. No method of transmission or storage is completely secure, but we work to protect your information to an appropriate standard.

12. Changes to this policy

We may update this policy from time to time. We'll notify you of material changes by email or an in-app notice before they take effect, and the "Last updated" date at the top of this page will always reflect the current version.

13. Contact us & complaints

UK Junction Trading Ltd
71a Rowsley Street, Leicester, LE5 5JP
Company number: 16937235
ICO registration reference: ZC194063

Questions or requests: help@ukjunction.com. If you're unhappy with how we've handled your data, you also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113, though we'd appreciate the chance to resolve it directly first.