Privacy Policy

1. Who We Are

Thrifting LTD ("we", "us", "our") operates the Thrifting live auction shopping platform, including the website at thrifting.co.uk, the Thrifting apps on Roku and Amazon Fire TV, and the live bidding console.

2. What Data We Collect

When you register to bid

• Your name
• Email address
• Shipping address (if you choose postage delivery)
• Shipping preference (postage or local pickup)

When you create an account via the WordPress plugin

If you use the WordPress plugin Thrifting and click Create free account, we receive the email address you submit so we can create your Mission Control account (via https://thriftingtv.com/api/free-signup).

When you place a bid or win an auction

• Bid amounts and timestamps
• Items won and order details
• Payment information (processed securely by Stripe — we do not store card details)

When you visit our website

• IP address and approximate location (for analytics and security)
• Browser type and device information
• Pages visited and time spent
• Cookies (see Section 6 below)

When you watch via Roku or Amazon Fire TV

• We do not collect personal data through the TV apps. Any data collected by Roku or Amazon is governed by their respective privacy policies.

When you appear on the public live directory (sellers / streamers)

If you choose a category and save your channel details in Mission Control, we may display the following publicly on the Thrifting “who’s live” directory and related pages so buyers can find and join your auctions:

• Your business or channel name (as you enter it)
• The directory category you select
• Your public bidding link (and any short link / subdomain you set with us)
• An optional tile image URL if you provide one
• Optional Facebook and Instagram links if you add them (shown on your bidding page)
• Whether you are currently live and, when live, the current item name and bid amount shown on the directory

We use this information on the basis of contract (providing the directory service to you) and legitimate interests (helping buyers discover live sellers). You can change or remove most of these details in Mission Control at any time; contact us if you need your listing removed.

3. How We Use Your Data

We use your personal data to:

• Process your bids and manage live auctions
• Create and fulfil orders when you win an auction
• Send you order confirmations, invoices, and shipping updates
• Communicate with you about your account or orders
• Improve our platform and user experience
• Prevent fraud and ensure the security of our service
• Comply with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under the UK General Data Protection Regulation (UK GDPR), we process your data on the following bases:

• Contract: Processing necessary to fulfil our contract with you (e.g. processing bids, creating orders, shipping items)
• Legitimate Interest: Improving our service, preventing fraud, and ensuring platform security
• Legal Obligation: Retaining transaction records as required by UK tax and company law
• Consent: Where you have opted in to receive marketing communications or push notifications

5. Who We Share Data With

We may share your data with the following third-party services, solely for the purposes outlined above:

• Stripe — for secure payment processing
• Royal Mail / courier services — for order delivery (name and shipping address only)
• WooCommerce (if enabled on thrifting.co.uk) — order management for Thrifting LTD retail sales on our website
• Cloudflare — for website security and performance
• LiteSpeed — for website caching and performance

All third-party processors are bound by data protection agreements and process data only on our instructions.

6. Cookies

Our website uses cookies for:

• Essential cookies: Required for the website and bidding console to function (session management, security)
• Analytics cookies: To understand how visitors use our site and improve the experience
• Performance cookies: Caching and content delivery optimisation

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the bidding console.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy:

• Bidder registration data: Retained while your account is active and for 12 months after your last activity
• Order and transaction data: Retained for 7 years as required by UK tax legislation
• Website analytics data: Retained in anonymised form

8. Your Rights

Under the UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate or incomplete data
• Erasure — request deletion of your personal data (where applicable)
• Restriction — request restriction of processing in certain circumstances
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interest
• Withdraw consent — where processing is based on consent, you can withdraw at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Data Security

We take appropriate technical and organisational measures to protect your personal data, including:

• SSL/TLS encryption on all data in transit
• Cloudflare DDoS protection and web application firewall
• Secure payment processing via Stripe (PCI DSS compliant)
• Regular security reviews and updates
• Access controls limiting who can view personal data

10. Children

Our service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

12. Contact & Complaints

If you have questions about this Privacy Policy or wish to make a complaint, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):