Privacy policy

This Privacy Policy explains how Brodie collects, uses, stores, and protects your personal data. We comply with the
UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2.1 Data controller

Brodie is the data controller. Contact us at: brodiemarketplace@gmail.com

2.2 What data we collect

Account data

● Name, email, username, profile photo, date of birth, billing and delivery address

Transaction data

● Purchase and sales history, payment information (processed by our provider — we do not store card details),
shipping information

Usage data

● IP address, device information, pages viewed, search queries, browsing behaviour

Verification data

● Identity documents for seller verification where required, bank details for payouts processed by our payment
provider

2.3 How we use your data

● To create and manage your account and facilitate transactions
● To process payments and payouts
● To provide buyer protection and handle disputes
● To send transactional communications and, where consented, marketing
● To detect fraud and enforce our policies
● To comply with legal obligations

2.4 Data sharing

We share data with payment processors, shipping providers, and law enforcement where required by law. We do
not sell your personal data.

2.5 Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict, and port your data, and to object to processing.
Contact brodiemarketplace@gmail.com to exercise these rights. You may also complain to the ICO at ico.org.uk.

2.6 Retention

Account data is retained for the duration of your account and 6 years after closure. Transaction records are kept for
7 years.