Privacy Policy
Last updated: 1 April 2026
1. Who We Are
DrivenMarket Ltd ("DrivenMarket", "we", "us", or "our") operates the marketplace at drivenmark9994.builtwithrocket.new. We are registered in England and Wales. For data protection enquiries, contact us at privacy@drivenmarket.co.uk.
2. Data We Collect
- Account data: name, email address, password (hashed), profile photo
- Listing data: item descriptions, photos, prices, location
- Transaction data: payment information processed via Stripe (we do not store card numbers)
- Communications: messages sent between buyers and sellers on the platform
- Usage data: pages visited, search queries, device type, IP address
- Cookies: see our Cookie Policy
3. How We Use Your Data
- To provide and operate the marketplace
- To process payments and prevent fraud
- To send transactional emails (order confirmations, messages, dispute updates)
- To comply with legal obligations including UK tax law
- To improve the platform through analytics
4. Legal Basis (UK GDPR)
We process your data under the following legal bases:
- Contract: to fulfil our service to you as a buyer or seller
- Legitimate interests: fraud prevention, platform security, analytics
- Legal obligation: tax records, dispute resolution
- Consent: marketing emails (you can withdraw at any time)
5. Data Sharing
We share data only with:
- Stripe: payment processing (subject to Stripe's privacy policy)
- Supabase: database and authentication hosting
- Resend: transactional email delivery
- Law enforcement when legally required
We do not sell your personal data to third parties.
6. Your Rights
Under UK GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion ("right to be forgotten")
- Object to processing
- Data portability
- Withdraw consent at any time
To exercise any right, email privacy@drivenmarket.co.uk. You may also lodge a complaint with the ICO.
7. Data Retention
We retain account data for as long as your account is active. Transaction records are kept for 7 years to comply with UK tax law. You may request deletion of your account at any time; we will delete personal data within 30 days except where retention is required by law.
8. Security
We use industry-standard security measures including TLS encryption, row-level security on our database, and regular security reviews. Passwords are hashed and never stored in plain text.
9. Contact
DrivenMarket Ltd, England & Wales
Email: privacy@drivenmarket.co.uk