Privacy Notice

Last updated 1 October 2026

This is a full working draft written for OffCut. It should be reviewed by a solicitor before OffCut trades commercially.

1. Who controls your information

OffCut Group Ltd (company number 16842590), registered in England and Wales, is the data controller for the information described here. You can contact us through in-app messaging, through the Fast Help screen in the app, or by email at support@offcut-group.com.

2. What we collect

  • Account details: name, email address, phone number, password (stored encrypted), currency.
  • Profile details: photo, trade, business name and company number where you give them.
  • Location: your postcode, used to work out distance between buyers and sellers.
  • Listings: titles, descriptions, photos, quantities, weights and prices.
  • Orders: what you bought or sold, amounts, fees, collection or delivery details.
  • Messages, offers, reviews and disputes, including any photos you attach.
  • Verification evidence you upload, such as trade or company documents.
  • Alert preferences, including whether you have opted in to device notifications.
  • Technical data: pages viewed, listing views, device and browser information.
  • Sign-in keys for Face ID or fingerprint, where you turn that on. Your face or fingerprint itself never leaves your device and is never sent to us — we only store the device's public sign-in key.

3. Why we use it, and our legal basis

  • To run your account and process orders — performance of a contract with you.
  • To show items near you and rank results by distance — performance of a contract.
  • To keep the marketplace safe: fraud checks, message screening, seller reliability monitoring and dispute investigation — our legitimate interest in a trustworthy marketplace.
  • To send alerts you have asked for, such as saved search matches — your consent.
  • To meet accounting, tax and legal obligations — legal obligation.

4. Your address stays private

Listings show only the postcode area, never a street or full address. We store a precise location for your listing solely so the app can calculate accurate distances; that precise location is never shown to other members and never sent to their devices.

A seller's full collection address is shared with the buyer only after payment is completed, and only for that order. Your email address and phone number are never visible to other members.

5. Who we share it with

  • The other party to an order, limited to what is needed to complete it.
  • Hosting and database providers who run the app on our behalf.
  • Postcode lookup services, used to convert a postcode into map coordinates.
  • Stripe Payments UK Ltd, our card payment provider, which handles card details and membership billing on our behalf. We never see or store your full card number.
  • Our email delivery provider, used to send receipts, membership notices and alerts you asked for.
  • ShipEngine and the selected delivery carrier, where postage is booked, which receive the delivery and collection details needed to create the label, transport the parcel and provide tracking.
  • Companies House and identity or trade verification checks, where you ask to be verified.
  • Law enforcement, regulators or advisers where we are legally required to disclose.

We do not sell your personal information.

6. How long we keep it

Account and listing data is kept while your account is open. Order, fee and dispute records are kept for six years after the transaction to meet accounting and legal requirements. Messages are kept for two years. Verification documents are deleted once a decision has been recorded. Closed accounts are anonymised except where records must be retained.

7. Where your information is held

Our systems are hosted in the UK and EU. Where a provider processes data outside the UK, we rely on UK approved safeguards such as the International Data Transfer Addendum.

8. Your rights

You have the right to access your information, correct it, ask for deletion, object to or restrict processing, withdraw consent for alerts, and request a copy in a portable format. You can update most details directly in your profile, or contact us to ask.

If you are unhappy with how we handle your information you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

9. Cookies and similar technology

We use only the storage needed to keep you signed in and remember your preferences. We do not use advertising trackers.

10. Changes

We will update this notice as OffCut develops, and the date at the top shows when it last changed. See also our Terms & Conditions.