Privacy notice
Last updated: September 2026
Draft — not reviewed by a solicitor
This page is written in plain English as a working draft while the site is being built. It has not been checked by a lawyer and it is not legal advice. It will be reviewed before anything can be bought here.
Short version: we collect as little as we can get away with, we don't track you around the internet, we don't sell anything about you, and we don't store your IP address.
Who we are
Here in the City, Cardiff (company details to be added before launch), is the data controller for the information described here. When you buy from a shop, that shop is a controller too for the details it needs to fulfil your order.
What we collect, why, and on what basis
| What | Why | Lawful basis | Kept for |
|---|---|---|---|
| Your name, email, phone and delivery address when you order | To take payment, let the shop pack it and get it to your door | Performance of a contract | 6 years (tax and consumer claims) |
| Your email, and the outward code (CF24) if you give it, for Last Call alerts | To tell you when Last Call goes live near you | Consent | Until you unsubscribe |
| What a shop tells us when it applies to join | To get in touch and set the shop up | Legitimate interests (running the marketplace) | 2 years from last contact |
| Aggregate page counts with no identifier attached | To know which pages are worth keeping | Legitimate interests | Aggregate only, indefinitely |
We never store raw IP addresses, and we don't use analytics that does. We don't build a profile of you, we don't run advertising pixels, and we don't sell or share your details with anyone for marketing.
Postcodes are stored as the outward code only (CF24, not CF24 3AA) wherever the full postcode isn't needed to deliver something.
Cookies
This site sets no advertising or analytics cookies. When ordering is switched on, we will need a small number of strictly necessary cookies to keep your basket and your session — those are exempt from consent. If we ever add anything beyond that, we'll ask you first and you'll be able to say no, and nothing non-essential will be set unless you say yes.
Who else sees your information
- The shop you bought from — the details needed to pack and hand over your order.
- Stripe — card payments. We never see or store your card number.
- Our email provider — to send order updates and, if you asked for them, Last Call alerts.
- Our hosting provider — which runs the website.
That's it. No data brokers, no ad networks.
Your rights
Under UK GDPR you can ask us to:
- give you a copy of what we hold about you;
- correct anything that's wrong;
- delete it, where we don't need it for a legal reason like tax records;
- restrict or object to how we use it;
- send it to you or someone else in a portable format;
- withdraw consent at any time, where consent is the basis — unsubscribing does this for alerts.
Ask through the contact details that will be published here at launch. If you're not happy with how we've handled it, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
This site isn't aimed at children.
While the site is a demo
Nothing you type into the forms on this version of the site is stored at all. The forms check what you've typed and then discard it. See the site terms.