Privacy Policy

NOTS Market ("NOTS", "we", "us" or "our") is an online marketplace where people can browse, list and discover vintage, antique and second-hand items.

This Privacy Policy explains what personal information we collect, how we use it, who we share it with and the choices you have.

1. Who is responsible for your information?

NOTS Market is currently operated by an individual and is not a registered company.

Data controller: [YOUR FULL LEGAL NAME], trading as NOTS Market.

Contact email: liamd1748@gmail.com

The data controller is responsible for deciding how and why your personal information is used.

2. Information we collect

Depending on how you use NOTS, we may collect:

• Account information: your email address, username and account identifier.
• Listing information: seller name, item title, price, category, condition and description.
• Uploaded photos: images you choose to add to your listings.
• Messages: messages you send to other users through the website.
• Favourites: listings you save to your account.
• Technical information: information that may be recorded by the website or its service providers when you use the site, such as security and diagnostic information.

Please do not include sensitive personal information, passwords, payment card details or private contact details in public listing descriptions or photographs.

3. How we use your information

We use personal information to:

• Create and manage user accounts.
• Display listings and make them searchable.
• Allow sellers to upload and manage their listings.
• Allow users to save favourite listings.
• Allow buyers and sellers to communicate through the website.
• Maintain the security and proper operation of NOTS.
• Respond to questions, complaints or requests.
• Meet legal obligations and deal with disputes where necessary.

4. Our lawful reasons for using your information

Data protection law requires us to have a lawful basis for using personal information.

Depending on the activity, we expect to rely on:

• Contract: where information is needed to provide the account and marketplace features you request.
• Legitimate interests: to operate, maintain and protect NOTS, prevent misuse and deal with enquiries or disputes. We consider your rights and interests when relying on this basis.
• Legal obligation: where we need to retain or disclose information to comply with the law.

We do not use your information for unrelated purposes without explaining this to you and, where required, identifying an appropriate lawful basis.

5. Which information is public?

Some information is displayed publicly so that the marketplace can work. This may include:

• Your seller username or display name.
• Your listings, including descriptions, prices, categories and photographs.
• Your seller profile and any introduction or biography you choose to add.
• Whether a listing is available or marked as sold.

Your account email address and private messages are not intended to be displayed publicly as part of your listing or seller profile.

Public listing information can be viewed, copied or shared by other people. Only include information in public listings that you are comfortable making available to others.

6. Messages between users

NOTS allows buyers and sellers to send messages through the website. Messages are associated with the relevant user accounts and listing. They are not intended to be public.

We may need to access messages where reasonably necessary to operate the service, investigate reports, address misuse, respond to support requests or comply with the law.

7. Who we share information with

We do not sell your personal information.

We may share information with:

• Supabase: NOTS uses Supabase for database, account authentication and file storage services. Information needed to provide these features is processed through Supabase.
• Other users: public listing and seller-profile information is visible to visitors. Messages are shared with the user you send them to.
• Authorities or advisers: where disclosure is required by law or is reasonably necessary to establish, exercise or defend legal claims.

We may use other website hosting, technical or security providers where necessary to operate NOTS. We will update this policy if our service providers or data-sharing arrangements change.

8. Where your information is stored

NOTS uses Supabase to provide database, account authentication and image-storage services.

Our Supabase project is hosted in the West EU (Paris), France region (eu-west-3).

This means the project's primary database, authentication service and Storage objects are hosted in that region.

Supabase may process limited information outside the selected region for certain operational purposes, such as service delivery, support, security and infrastructure operations.

Further information is available in Supabase's Data Residency and Transfers FAQ.

9. How long we keep information

We keep personal information only for as long as reasonably necessary for the purposes described in this policy.

• Account information is kept while your account remains active.
• Listings are kept while they are published or needed for account and marketplace records.
• Messages may be retained while needed to support conversations, deal with reports or resolve disputes.
• Information may be retained for longer where required by law or where necessary to establish, exercise or defend legal claims.

When information is no longer needed, we will take reasonable steps to delete it or remove identifying details.

You can contact us to request deletion of your account or personal information. Some information may need to be retained where we have a lawful reason to do so.

10. Cookies and similar technologies

NOTS is currently under development and is not yet publicly launched. The website is currently being run locally during development.

We do not currently use third-party advertising or analytics services as part of the local development version.

NOTS uses Supabase for account authentication and other website functionality. Supabase may use browser storage or similar technologies to maintain account sessions and provide its services.

When NOTS is made publicly available, this section will be reviewed and updated to explain any cookies or similar technologies used by the live website.

11. Your data protection rights

Depending on the circumstances and the lawful basis involved, you may have the right to:

• Request a copy of the personal information we hold about you.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete your personal information.
• Ask us to restrict how we use your information.
• Object to certain uses of your information.
• Request certain information in a portable format.
• Withdraw consent where we rely on consent.

These rights are not absolute in every situation. We may need to verify your identity before responding.

To make a request, email liamd1748@gmail.com with the subject line "Privacy Request".

12. Keeping your information secure

We take reasonable steps to protect personal information against unauthorised access, loss, misuse or disclosure.

No website or online service can be guaranteed to be completely secure. You should use a strong, unique password and keep your login details private.

If you believe your account has been accessed without permission, please contact us.

13. Children's privacy

NOTS is not intended for children to use without appropriate supervision.

If you believe a child has provided personal information to NOTS inappropriately, please contact us so we can look into it.

14. Changes to this policy

We may update this Privacy Policy when NOTS changes, when we introduce new features or service providers, or when legal requirements change.

The latest version will be published on this page with an updated date.

15. Contact and complaints

You also have the right to complain to the UK's Information Commissioner's Office (ICO):

https://ico.org.uk/make-a-complaint/

NOTS Market — Not Off The Shelf