Privacy Policy

The Second Hand Market is a UK-based online marketplace connecting buyers with verified independent watch retailers. We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

When we refer to “we”, “us” or “our”, we mean The Second Hand Market Ltd, registered in England and Wales.

For questions about this policy or your data, contact us at: hello@secondhandmarket.co.uk

For buyers:

• Name and email address when you create an account
• Search and browsing activity on the platform
• Enquiry messages sent to retailers
• Wishlist and saved listings
• Device and browser information (via cookies)

For retailers:

• Business name, registered address, and contact details
• Proof of identity and business registration documents (for verification)
• Profile information including photos and descriptions
• Listing data including watch details, pricing, and images
• Payment information processed via Stripe (we do not store card details)

We use your data to:

• Create and manage your account
• Connect buyers with verified retailers
• Process enquiries between buyers and retailers
• Verify retailer applications and maintain marketplace integrity
• Send transactional emails (account confirmations, enquiry notifications)
• Improve the platform through anonymised analytics
• Comply with our legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

We process your data under the following legal bases:

• Contract: to provide the services you have signed up for
• Legitimate interests: to operate, improve, and protect the platform
• Legal obligation: to comply with UK law
• Consent: where we have asked for and received your explicit consent

We share your data only where necessary:

• Supabase: our database and authentication provider (servers in EU)
• Stripe: payment processing (PCI-DSS compliant — we never see or store your card details)
• Vercel: website hosting and delivery
• Zoho: transactional email delivery

We require all third-party providers to handle your data securely and in accordance with UK GDPR.

All payments on The Second Hand Market are processed by Stripe, a PCI-DSS Level 1 certified payment provider. We never see, store, or have access to your full card details. Stripe's privacy policy is available at stripe.com/gb/privacy.

• Account data: retained for as long as your account is active, plus 2 years after closure
• Enquiry messages: retained for 2 years
• Retailer verification documents: retained for 5 years for legal compliance
• Analytics data: anonymised and retained indefinitely

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (“right to be forgotten”)
• Object to or restrict processing of your data
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email us at hello@secondhandmarket.co.uk. We will respond within 30 days.

We use essential cookies to keep you signed in and maintain your session. We do not use advertising or tracking cookies. A full cookie policy is available at secondhandmarket.co.uk/cookies.

We may update this policy from time to time. We will notify registered users of significant changes by email. The latest version will always be available at secondhandmarket.co.uk/privacy.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.