Privacy Policy

This Privacy Policy describes our practices around the collection, use, and disclosure of your information when you use our website and services, and sets out your privacy rights and how the law protects you. We use your personal data to provide and improve the service. By using the service, you agree to the collection and use of information in line with this policy.

Interpretation and definitions

Interpretation

Words with an initial capital letter have the meanings set out below, whether they appear in the singular or the plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for you to access our service or parts of it.
• Company (referred to as "the Company", "we", "us", or "our" in this policy) refers to Sticker Sale.
• Cookies are small files placed on your computer, mobile device, or any other device by a website, containing details of your browsing history on that website among other uses.
• Country refers to the United Kingdom.
• Device means any device that can access the service, such as a computer, phone, or tablet.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the Sticker Sale website.
• Service Provider means any company or individual engaged by us to facilitate the service, to perform tasks on our behalf, or to help us understand how the service is used.
• Usage Data refers to data collected automatically, generated either by use of the service or from the service infrastructure itself, for example the length of a page visit.
• Website refers to Sticker Sale, accessible from stickersale.co.uk.
• You means the individual accessing or using the service, or the company or other legal entity on whose behalf that individual is accessing or using the service, as applicable.

Collecting and using your personal data

Types of data collected

Personal Data

While you use our service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you. This may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Address, county, postcode, city
• Usage Data

We will never share, sell, or trade your personal information with third parties for their own marketing purposes. Your data stays with us and is used only for the purposes set out in this policy.

Usage Data

Usage Data is collected automatically when you use the service. This may include your device's IP address, browser type and version, the pages of our service you visit, the time and date of your visit, the time spent on those pages, unique device identifiers, and other diagnostic data.

When you access the service through a mobile device, we may also collect information such as the type of device, a unique device identifier, your mobile operating system, and the type of mobile browser you use.

Tracking technologies and cookies

We use cookies and similar tracking technologies to track activity on our service and to store certain information. The technologies we use include:

• Cookies or browser cookies. A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to flag when a cookie is being sent. If you do not accept cookies, some parts of our service may not work as intended.
• Web beacons. Certain sections of our service and our emails may contain small electronic files that allow us, for example, to count visitors to a page or to confirm an email has been opened, and to compile related statistics.

Cookies can be persistent or session based. Persistent cookies remain on your device after you go offline, while session cookies are deleted as soon as you close your browser. We use both types, for the purposes below:

Necessary or essential cookies Session cookies, administered by us. These are essential to provide services available through the website and to enable core features. Without them, the services you have asked for cannot be provided.

Cookie notice acceptance cookies Persistent cookies, administered by us. These identify whether you have accepted our use of cookies on the website.

Functionality cookies Persistent cookies, administered by us. These let us remember choices you make when using the website, such as saved preferences, so you do not have to re-enter them every visit.

Analytics and performance cookies Persistent cookies, administered by third parties. These help us understand how visitors use the website and let us test and improve pages and features over time.

Waitlists

If you join the waitlist for a sale that is full, we keep your name, email address and how many places you want, so we can email you if a place comes free. We use them for nothing else. You can leave the waitlist at any time from the link in our emails, and we delete your details from it once the sale has ended.

Retention of your personal data

We keep personal data only for as long as we need it, and then delete it or remove what identifies you. These are the periods we keep it for:

• Bookings you paid for. Your phone number, the names on the tickets and the Google Analytics ids recorded with your booking are removed 90 days after the last day of the sale. Your email address, the booking reference and what you paid are kept for six years after the last day of the sale, because we have to keep financial records for that long. After six years your email address is removed too.
• Bookings never paid for. If a booking is not paid for, or is cancelled before it is paid, your email address, phone number, the names on the tickets and the Google Analytics ids are removed 30 days after it closed.
• Homeowners, and whoever is paid for a sale. Once every payout for the sale has been made, including the part held back to cover refunds and card disputes, we remove the phone number, any note about the authority to act for the homeowner, and the agreement about unsold items. The name, who was paid and the Stripe account the payouts went to are kept for six years after the last day of the sale, for the financial records, and are then removed.
• Sale addresses. The address of a sale, and its parking and access notes, are removed 90 days after the last day of the sale.
• Emails we send you. Our record of each email we send (who it went to, which email it was and when) is deleted after 90 days, or once the sale it was about is over if that is later. Until then it is what stops us sending you the same email twice.
• Enquiries. Enquiries and consultation requests are deleted 24 months after we receive them.
• Reports about a sale. A report you send us about a sale is deleted 12 months after we close it.
• Team invitations. An invitation to join a partner's team that is never accepted is deleted 30 days after its link runs out. Once an invitation is accepted, the email address on it is removed after 30 days.
• Email subscriptions. If you unsubscribe, we stop sending you marketing emails. If you ask us to take you off our list altogether, within 30 days we delete everything except your email address and the dates you signed up and stopped, which we keep so that we never email you again unless you sign up afresh.
• Records of failed tasks. When one of our background tasks fails, the record of it can include your email address. These records are deleted after seven days.

Usage Data is generally retained for a shorter period, except where it is needed to strengthen security or improve the service, or where we are legally required to keep it for longer.

Transfer of your personal data

Your information, including personal data, may be processed at our offices and at any other location where parties involved in the processing are based. This can mean your information is transferred to, and stored on, computers located outside your county or country, where data protection laws may differ from those of your jurisdiction.

We take reasonable steps to ensure your data is treated securely and in line with this policy, and no transfer of your personal data takes place to an organisation or country unless adequate safeguards are in place, including the security of your data.

Deleting your personal data

You have the right to ask us to delete the personal data we hold about you. You can also update or correct your information at any time by contacting us. Please note that we may need to retain certain information where we have a legal obligation or lawful basis to do so.

Disclosure of your personal data

How we use your personal data

We may use personal data for the following purposes:

• To provide and maintain our service, including monitoring how the service is used.
• To manage your account, including your registration as a user and the features that come with it.
• To perform a contract, including the development and delivery of any purchase, ticket, or listing arrangement with us.
• To contact you, by email, phone, or other electronic means, about updates or information related to the service, including necessary security updates.
• To send you news and offers about sales and services similar to those you have already used or asked about, unless you have opted out.
• To manage your requests to us.
• For business transfers. We may use your information to evaluate or carry out a merger, sale, restructuring, or transfer of some or all of our assets, in which personal data held by us is among the assets involved.
• For other purposes, such as data analysis, identifying usage trends, and improving our service, marketing, and your experience with us.

Business transactions

If we are involved in a merger, acquisition, or asset sale, your personal data may be transferred. We will give notice before your personal data is moved and becomes subject to a different privacy policy.

Law enforcement

In certain circumstances, we may be required to disclose your personal data if required to do so by law or in response to a valid request from a public authority.

Other legal requirements

We may disclose your personal data where we believe in good faith that doing so is necessary to:

• Comply with a legal obligation
• Protect and defend our rights or property
• Prevent or investigate possible wrongdoing connected with the service
• Protect the personal safety of users of the service or the public
• Protect against legal liability

Security of your personal data

The security of your personal data matters to us, but no method of transmission over the internet or method of electronic storage is completely secure. While we work to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

Service providers we use

Payments. Ticket payments, card payments at sales and payouts are handled by Stripe. We do not store your card details ourselves. Stripe handles them in line with its own security standards and privacy policy.

Email. Our emails are sent through Amazon Simple Email Service, part of Amazon Web Services. You can opt out of marketing emails at any time using the unsubscribe link in the email or by contacting us.

Photos and video. Photos of the items in a sale are stored with Amazon Web Services. Sale videos are hosted by Bunny (bunny.net), which receives your device's IP address when you watch one.

Security and bot checks. The website runs through Cloudflare, which protects it from attacks and automated abuse. Some of our forms use Cloudflare Turnstile to check that you are a person, which sends Cloudflare your device's IP address and details of your browser.

Postcode lookups. We look postcodes up with postcodes.io to find the area they are in, for example when you search for sales near you, set up sale alerts, or list a sale. Only the postcode is sent.

Fonts. Some of our pages and emails load fonts from Google Fonts, which receives your device's IP address.

Analytics. We may use tools such as Google Analytics to understand how the service is used. You can opt out of this tracking through your browser settings or a suitable opt out add on.

Advertising and remarketing. We may work with third party advertising services to show you relevant ads about Sticker Sale after you have visited our service. These providers may use cookies and similar technologies to recognise your device. You can manage your ad preferences through your browser or device settings, or through the relevant provider's own opt out tools.

Children's privacy

Our service is not directed at anyone under the age of 16, and we do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will take steps to remove it.

Links to other websites

Our service may contain links to other websites that we do not operate. If you follow a third party link, you will be taken to that site directly. We encourage you to review the privacy policy of every site you visit, as we have no control over and take no responsibility for the content or practices of third party sites.

Your rights

If you are in the United Kingdom, you have rights under UK data protection law, including the right to ask what personal data we hold about you, to have inaccurate data corrected, to ask us to delete your data, and to object to or restrict certain uses of it. If you have concerns about how we handle your data that we have not resolved, you have the right to raise them with the Information Commissioner's Office.

Changes to this policy

We may update this Privacy Policy from time to time. We will let you know of any changes by posting the new policy on this page and updating the "last updated" date above. Where changes are significant, we will also aim to let you know directly, such as by email.

---