Legal
Privacy Policy
How UK Junction collects, uses, stores and protects your personal data.
1. Who we are
UK Junction Trading Ltd is the data controller for personal data processed through the UK Junction website. We are registered in England and Wales, company number 16937235, registered office 71a Rowsley Street, Leicester, LE5 5JP, and registered with the Information Commissioner's Office under reference ZC194063.
2. Information we collect
| Category | Examples |
|---|---|
| Account data | Name, email address, password (stored only in scrambled, hashed form), and an optional phone number and profile photo. If you sign in with Google, we receive your name, email address and profile photo from Google. |
| Listings and messages | Listings you post, prices, messages with other users, saved searches and saved listings. |
| Verification data | Confirmation that you control the email address on your account. Only you can see this, in your dashboard and account settings. |
| Payment data | Handled by our payment provider, Stripe. We keep limited billing details, such as your plan and invoice history, but never your full card number. |
| Contact form | Your name, email address and message when you contact us. |
| Technical data | Your IP address, browser and device type and the pages you request, which our hosting provider records in server logs to run and protect the site; and anonymous visit counts (see Section 9). |
| Location data | The postcode or town you give for listings and searches, and your approximate location if you choose Use my location in search. |
3. How we use your information
- To create and manage your account and provide the UK Junction service;
- To let buyers and sellers message each other;
- To process payments and manage subscriptions;
- To confirm you control the email address on your account;
- To moderate content, investigate reports and keep the site safe, including checking that contact form messages come from a person;
- To send emails about your account, such as sign-in, security and listing updates, and, only if you choose to receive them, emails about new features;
- To count visits anonymously so we can improve the site (see Section 9);
- To show partner offers and count how often each one is clicked (see Section 10);
- To comply with the law, including responding to lawful requests from the police or regulators.
4. Our lawful basis
Under UK data protection law we rely on the following lawful bases, depending on the activity:
- Contract: to provide the account and marketplace services you have signed up for;
- Legitimate interests: to keep the site secure and prevent fraud and spam, to count visits anonymously so we can improve the site, and to count clicks on partner offers, always balanced against your rights;
- Consent: for optional emails about new features and for the optional Preferences and Maps features, which you can withdraw at any time;
- Legal obligation: where we must keep or share information to comply with the law.
5. Sharing your information
We share only what is needed:
We do not sell your personal data.
- Other users: when you message someone, your display name and messages are visible to them;
- Our service providers listed in Section 6, who process data for us under contract or, where stated, as separate controllers;
- Professional advisers, regulators or the police, where the law requires it or to protect rights and safety and prevent fraud;
- A buyer or successor, if the business is sold, merged or reorganised, with the same protections as this policy and with notice to you.
6. Our service providers
These are the providers that handle personal data when you use UK Junction, what each does, and where the data goes. Where data leaves the UK, the safeguard shown applies.
| Provider | What they do for us | Where data is processed |
|---|---|---|
| Vercel Inc. | Hosts the website, runs our servers and provides anonymous visit counts. | United States. Covered by standard contractual clauses with the UK International Data Transfer Addendum. |
| Neon (Databricks) | Hosts our database. | London, United Kingdom. |
| Cloudflare, Inc. | Runs our domain name service, stores the photos you upload (served from images.ukjunction.com), and provides Turnstile spam protection on the contact form. | May include the United States. Cloudflare is certified under the Data Privacy Framework and also uses standard contractual clauses with the UK Addendum. |
| Stripe | Processes payments. Stripe also acts as a separate controller for fraud prevention and its own legal duties. | May include the United States. Covered by the UK Extension to the Data Privacy Framework, standard contractual clauses and the UK Addendum. |
| Resend | Sends the emails we send you, such as sign-in, password reset and notification emails. | Mainly the United States. Covered by standard contractual clauses with the UK Addendum. |
| Microsoft (Microsoft 365) | Hosts our support mailbox, which receives contact form messages and emails you send us. | Microsoft is certified under the UK Extension to the Data Privacy Framework. |
| Google LLC | Provides Sign in with Google if you choose it, and Google Maps on listing pages if you choose to load a map. Google acts as a separate controller under its own privacy policy. | May include the United States. Google is certified under the UK Extension to the Data Privacy Framework. |
| postcodes.io | Turns a postcode into an approximate position for search and maps. It receives only the postcode, never your name or other details. | Not applicable: no personal details are sent. |
7. Data retention
We keep personal data only as long as we need it for the purposes above, including legal, accounting and reporting requirements. As a guide:
You can ask us to delete your account and its data at any time (see Section 8), except for data the law requires us to keep.
- Account data is kept while your account is active, and for a limited period afterwards in case you return or to meet legal obligations;
- Transaction and billing records are kept for the period UK tax law requires, generally 6 years;
- Reports and moderation records are kept as long as needed for safety and legal purposes;
- Contact form messages are kept in our support mailbox for as long as needed to deal with your enquiry and any follow up;
- Analytics keeps only anonymous totals, and the daily code Vercel uses to tell visits apart is discarded after 24 hours.
8. Your rights
Under UK data protection law you have the right to:
To use any of these rights, email help@ukjunction.com. We will reply within one month, as the law requires. Some rights have exceptions, and we will explain if one applies to your request.
- Access the personal data we hold about you;
- Correct inaccurate or incomplete data;
- Erase your data in certain circumstances;
- Restrict or object to certain processing, including anonymous analytics and direct marketing;
- Data portability: receive your data in a portable format;
- Withdraw consent at any time, where we rely on consent.
10. Partner offers
Partner offers are paid advertising and are labelled Ad. We may earn a commission if you buy after clicking one. When you click, our server adds one to a count of clicks for that offer and sends you to the retailer through the Awin affiliate network. We do not record who clicked and we do not set a cookie to do this. Awin and the retailer may set their own cookies on their own websites, which we do not control; their privacy policies apply once you leave our site.
11. Children
UK Junction is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we will delete it.
12. Security
We protect your data with encryption in transit, access controls and secure infrastructure from our providers. No method of sending or storing data is completely secure, but we work to protect your information to an appropriate standard.
13. Changes to this policy
We will update this policy when the site or the law changes. We will tell you about important changes by email or on the site before they take effect, and the date at the top of this page always shows the current version.
14. Contact us and complaints
UK Junction Trading Ltd, 71a Rowsley Street, Leicester, LE5 5JP. Company number: 16937235. ICO registration reference: ZC194063.
Questions or requests: help@ukjunction.com. If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, though we would appreciate the chance to put things right first.