Legal

Privacy Policy

Last updated 5 June 2026

This policy explains, in plain English, what personal data Bootly collects and how we use it. It is a working summary aligned with UK GDPR principles, and will be finalised before public launch. We aim to collect only what we need to run a safe marketplace.

1. Overview

Bootly is the data controller for the personal information you give us when you use the service. We collect data to let you buy, sell, ship and stay safe on the marketplace — and for nothing you haven’t reasonably agreed to.

2. What we collect

Account details — your name or username, email, password (stored securely hashed), and optional profile photo, bio and location.
Listings & messages — the items you list, photos you upload, and messages you exchange with other members.
Orders & shipping — purchase history, delivery addresses and tracking information needed to fulfil orders.
Payments — handled by our payment partner; we receive confirmation and limited details, not your full card number.
Usage data — basic technical and activity information that helps keep the service working and secure.

3. How we use it

We use your data to operate your account, list and sell items, process payments and shipping, provide Buyer Protection, prevent fraud, respond to support requests, and improve the service. We send transactional emails about your activity and, where you’ve agreed, occasional updates you can opt out of at any time.

4. Legal bases

We rely on: performance of our contract with you (running the marketplace), our legitimate interests (security, fraud prevention, improving the service), your consent (optional marketing), and legal obligations (tax and record-keeping).

We share data only as needed to run the service: with other members to complete a sale (for example, a delivery address with the seller), with our payment and shipping partners, with service providers who host and support Bootly, and with authorities where the law requires it. We never sell your personal data.

6. How long we keep it

We keep your data for as long as your account is active, and afterwards only as long as we need to for legal, tax, fraud-prevention or dispute-resolution purposes. When data is no longer needed, we delete or anonymise it.

7. Your rights

Under UK GDPR you can ask to access, correct, delete or export your data, object to or restrict certain processing, and withdraw consent for marketing. You can manage many of these directly from your account Settings, or contact us to exercise any right. You also have the right to complain to the Information Commissioner’s Office (ICO).

8. Cookies

We use a small number of cookies and similar technologies to keep you signed in, remember your light/dark theme preference, and keep the service secure. Essential cookies are required for Bootly to work; any non-essential cookies are used only with your agreement.

9. Security

We protect your data with encryption in transit, securely hashed passwords, and access controls. No system is perfectly secure, but we work hard to keep yours safe and will notify you and the relevant authorities if a significant breach ever occurs.

10. Contact

Questions about your privacy, or want to exercise a right? Email privacy@bootly.market. For general help, visit the Help centre.