Privacy Policy

Castoffs Marine Ltd (SC890681), Clyde Offices, 2nd Floor, 48 West George Street, Glasgow G2 1BP is the UK GDPR data controller for data you provide when using castoffs.co.uk. Contact us at hello@castoffs.co.uk.

• Account data — email address, username, display name (optional), profile photo (optional, with your consent), bio (optional), and approximate location (county/region — never your full address).
• Listing data — photos, descriptions, prices, and condition details you provide when creating a listing.
• Transaction data — purchase records, payment status, and tracking information for orders you place or receive.
• Payment data — handled by Stripe. Castoffs does not store card numbers. Stripe's privacy policy applies to payment processing.
• Messages — in-platform messages between buyers and sellers, stored to support dispute resolution.
• Reviews — ratings and written reviews submitted after a completed transaction, displayed publicly on profiles.
• Usage data — pages visited, search queries, and standard server logs (IP address, browser type, timestamps). Used to operate and improve the platform.

We use your data to operate the marketplace — creating your account, showing your listings, processing payments, facilitating buyer-seller communication, displaying reviews, and resolving disputes. We also use it to comply with our legal obligations (fraud prevention, anti-money laundering, and tax reporting where applicable).

Pirates sell peoples data. We do not. We do not use your data for advertising profiling.

• Stripe — payment processing and seller identity verification (Stripe Connect). Stripe is a data processor under UK GDPR.
• Supabase — database and file storage. Hosted in the EU; Supabase acts as a data processor.
• Vercel — website hosting. Vercel acts as a data processor.
• Other users — your username, display name, profile photo, approximate location, member-since date, listings, and public reviews are visible to other Castoffs users. Your email address and full address are never shared with other users.

We may disclose data to law enforcement or regulators where required by law.

Account data is kept for as long as your account is active, plus 6 years after closure (to meet financial and legal record-keeping requirements). Transaction records are kept for 6 years from the date of transaction. Messages are kept for 2 years. Profile photos and listing images are deleted when you remove them or close your account.

Note: specific retention periods are pending solicitor review — these figures are working placeholders.

Under UK GDPR you have the right to access, correct, or delete your personal data; to restrict or object to processing; and to data portability. To exercise any of these rights, contact hello@castoffs.co.uk. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

Data protection queries: hello@castoffs.co.uk · Castoffs Marine Ltd, Clyde Offices, 2nd Floor, 48 West George Street, Glasgow G2 1BP.