1. Information we collect
We may collect your name, business name, business address, email address, telephone number, account credentials, seller verification information, listings, offers, messages, transaction records and support correspondence. We also receive basic technical information such as IP address, browser type, device data, timestamps and security logs.
2. How we use information
We use personal data to operate accounts and listings, verify wholesale sellers, connect buyers and sellers, administer protected transactions, calculate fees and commissions, prevent fraud, resolve disputes, provide support, secure the service and comply with legal, tax and accounting duties.
3. Legal bases
We process data where it is necessary to perform a contract or take requested pre-contract steps, meet a legal obligation, or pursue legitimate interests such as marketplace operation, fraud prevention and service security. Where consent is required, including for optional marketing or non-essential cookies, you may withdraw it at any time.
4. Marketplace visibility
Seller business names, locations, listings, available quantities and other information intentionally published in an offer may be visible to marketplace users and search engines. Private contact, verification and payment information is not published unless you choose to disclose it or disclosure is required to complete a transaction.
5. Payments and protected transactions
Payment or escrow providers may process identity, payment and transaction information under their own privacy notices. GPU.OOO does not need to store full payment-card details when they are collected directly by an authorised payment provider.
6. Who receives data
We may share relevant information with the buyer or seller involved in a transaction, identity-verification providers, payment and protected-transaction providers, hosting and security suppliers, professional advisers, insurers, courts, regulators and law-enforcement bodies. We do not sell personal data.
7. International transfers
Some service providers or marketplace counterparties may be outside the United Kingdom. Where data is transferred internationally, we use an applicable lawful transfer mechanism and proportionate safeguards.
8. Retention
We keep data only for as long as needed for the purpose collected. Account and transaction records may be retained for the life of the account and normally up to six years afterwards where needed for contracts, tax, fraud prevention or legal claims. Enquiries and routine security logs are retained for shorter periods unless an incident or legal duty requires longer retention.
9. Your rights
Depending on the circumstances, you may request access, correction, deletion, restriction, portability or object to processing. You may also withdraw consent where consent is the legal basis. We may need to verify your identity before acting on a request.
10. Cookies and security
We use cookies or similar storage needed for security, sessions and core site functions. We will request consent before using non-essential cookies where required. We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security.
11. Complaints and contact
Send privacy requests through our Contact Us page or by post to our registered office. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.