Privacy and cookies

This notice explains what personal information The Book Market collects, why, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018). [Data controller name and contact details to be added.]

What we collect

• Account details: email address, username, password (stored securely hashed by our provider, never visible to us).
• Profile: anything you choose to add — display name, photo, town, bio.
• Listings: book details and photos you upload.
• Activity: your wishlist, basket, notifications and reports.
• Orders (when checkout launches): delivery address and order history. Card details are handled by Stripe and never reach our servers.

Why we use it

To run your account and the marketplace (contract), to keep the site safe and prevent fraud (legitimate interests), and to meet legal obligations such as tax and accounting records.

Who we share it with

• Other members see your public profile and listings — never your email address.
• Service providers who host and run the site: Supabase (database and storage), our web host, and Stripe (payments).
• Couriers, when you buy or sell a book with delivery.

We never sell your data.

How long we keep it

For as long as your account is open, then as long as the law requires for transaction records (usually six years).

Your rights

You can ask to access, correct or delete your data, or object to how we use it, by contacting us. You can also complain to the Information Commissioner’s Office (ico.org.uk).

Cookies

We only use strictly necessary cookies: they keep you signed in and make your basket work. These don’t need your consent under UK rules. We don’t use analytics or advertising cookies. If that ever changes, we’ll ask for your permission first.