Privacy Policy

What we collect

• Account data: your name, email address, and sign-in credentials
• Profile data: your locality, and identity signals you choose to connect, such as a linked Strava account
• Marketplace data: your listings, photos, offers, messages, reviews, and saved listings
• Transaction data: orders, delivery addresses, payment status, and payout details (payment credentials are held by our payment partner, not by us)
• Verification data: frame numbers and supporting evidence you submit for verification
• Technical data: device, browser, and usage information needed to run and secure the service

How we use it

• Running the marketplace: listings, search, messaging, offers, orders
• Processing payments and payouts through our regulated payment partner
• Trust and safety: frame number checks, report handling, dispute mediation, fraud prevention
• Communicating with you about your account, orders, and disputes
• Improving the product, using aggregated and de-identified usage data

Lawful bases

We process data to perform our contract with you (running your account and orders), to meet legal obligations (fraud, accounting, lawful requests), for legitimate interests (keeping the marketplace safe and improving it), and with your consent where we ask for it (such as connecting Strava).

Who we share it with

• Our payment partner, to process payments, hold funds, and pay out sellers
• Our authentication and hosting providers, who store data on our behalf
• Stolen-bike registries such as BikeRegister, when checking a frame number you submit
• The other party to your transaction: a seller sees the delivery details needed to post your order
• Police and other authorities, where we receive a valid lawful request or where we report suspected stolen goods

We do not sell your personal data, and we do not share it with advertisers.

Retention

We keep personal data for as long as your account is active, and afterwards only as long as needed for legal, accounting, or dispute purposes. Transaction records are kept for the periods required by law; messages and listings are removed or de-identified when no longer needed.

Your rights

You can ask us for a copy of your data, ask us to correct or delete it, restrict or object to processing, and take your data elsewhere. Contact us through the contact page and we will respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).

International transfers and security

Some of our providers store data outside the UK. Where they do, transfers are protected by recognised safeguards such as adequacy decisions or standard contractual clauses. Data is encrypted in transit, access is restricted, and payment credentials never touch our servers.

Children

Peddler is for adults. We do not knowingly collect data from anyone under 18, and we close accounts found to belong to minors.

Changes and contact

We will update this policy as the product changes and flag material updates in the app. Questions about your data can be sent through the contact page.