Privacy policy
Last updated 11 October 2026
This policy explains what personal data ClosetSwipe collects, why we collect it, who we share it with and what you can do about it. It covers the ClosetSwipe app on iOS and Android and the closetswipe.co.uk website.
Who we are
ClosetSwipe Ltd, company number 16765714, registered in England and Wales, is the data controller for the personal data described here. You can reach us at support@closetswipe.co.uk for any question about this policy or to exercise any of the rights set out below.
What we collect and why
We only collect what the marketplace needs to work. There is no advertising network, no data broker and nothing is sold.
| What | Why we need it | Lawful basis |
|---|---|---|
| Email address, name and username | To create your account, sign you in, and let other users see who they are dealing with | Performance of a contract |
| Profile details you choose to add: avatar, bio, location, shop name, shop banner, shipping and return policies | To display your public profile and shop to buyers | Performance of a contract |
| One time verification codes sent to your email | To confirm you control the email address and to reset passwords | Performance of a contract |
| Listing content: photos, titles, descriptions, sizes, brands, prices, parcel dimensions and weight | To publish your items and calculate postage | Performance of a contract |
| Delivery addresses, recipient names and postcodes | To buy a postage label and get the parcel to the right place | Performance of a contract |
| Order records: items, amounts, buyer protection fee, delivery method, tracking numbers and delivery status | To process purchases, run buyer protection and release seller payouts on evidence of delivery | Performance of a contract, and legal obligation for tax records |
| Seller payout details held by Stripe, plus the Stripe account reference and wallet balances we store | To pay sellers, and to meet the identity checks payment law requires | Legal obligation, and performance of a contract |
| Messages and offers you send to other users | To let buyers and sellers agree a sale, and to investigate reports | Performance of a contract, and legitimate interests in keeping the marketplace safe |
| Reports and dispute records, including anything you write in them | To investigate problems and resolve disputes fairly | Legitimate interests in a safe and trustworthy marketplace |
| Push notification tokens and the platform and device identifier they belong to | To send you the notifications you have enabled, such as a sale or a message | Consent, which you can withdraw in your device settings at any time |
| How you use the app: screens you open, items shown to you, swipes left and right, taps, searches and filters, and how long an item stayed on screen | To see which parts of the app work, fix what does not, and decide what to build next | Legitimate interests in improving the product |
| A random identifier stored on your device. It is created the first time you open the app, before you have an account, and is linked to your account when you create one | To join up activity from the same device, so usage is counted once rather than twice | Legitimate interests in improving the product |
| Your IP address and browser or device identifier, recorded when you create an account and when you upload a photo | To investigate abuse and serious reports, and to link an account to the person behind it where the law requires us to | Legitimate interests in a safe marketplace, and our duties under the Online Safety Act |
| The result of the automated check on each photo you upload, and the categories it matched | To stop illegal and adult images being published, and to keep a record of why something was refused | Legitimate interests in a safe marketplace, and our duties under the Online Safety Act |
| Your email address and whether you want marketing emails from us | To send you offers, new features and tips about ClosetSwipe. Only about ClosetSwipe, never on behalf of anyone else. You can say no when you sign up, switch it off in Settings at any time, or use the unsubscribe link in any email | Legitimate interests, under the "soft opt-in" for our own users in the Privacy and Electronic Communications Regulations, or your consent where you said yes in the app |
Photos you upload are checked automatically. A resized copy of each photo goes to Amazon Web Services, in the UK, which checks it for illegal and adult content before it is published or sent. The check is automatic, no person looks at your photos as part of it, and the copy is not kept for anything else.
We never see your card details. Payments are processed entirely by Stripe. Your card number does not pass through, and is not stored on, ClosetSwipe systems.
The website
The closetswipe.co.uk website uses privacy friendly, cookieless analytics. It does not set advertising or tracking cookies, does not build a profile of you across websites, and does not require a cookie banner. See our cookie policy for the detail.
Who we share data with
We use a small number of service providers to run the marketplace. Each one only receives what it needs to do its job.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase | Database, sign in, file storage and server functions | All account, listing, order and message data |
| Stripe | Card payments and seller payouts through Stripe Connect | Payment details, amounts, and seller identity information required by law |
| Shippo and Evri | Postage labels and parcel tracking | Sender and recipient names, addresses and parcel details |
| Apple Push Notification service and Firebase Cloud Messaging | Delivering push notifications | Device push tokens and notification content |
| IONOS | Sending transactional email such as verification codes | Your email address and the message content |
| Vercel | Hosting the website | Standard server request data, and cookieless analytics events |
| Amazon Web Services | Checking uploaded photos automatically for illegal and adult content, in the UK | A resized copy of each photo you upload to a listing, a profile or a message |
We also share the limited information a transaction requires directly between users. When you buy something, the seller sees the delivery name and address needed to post it. When you sell something, the buyer sees your public profile and shop. We do not share your email address with other users.
We will disclose data to a law enforcement agency, regulator or court where we are legally required to.
Where your data is held
Our database, file storage and server functions are hosted in the European Union. Some of our other providers, such as Stripe and our push notification and email services, may process data elsewhere, including in the United States.
Where personal data leaves the United Kingdom, the transfer is covered by the safeguards UK data protection law requires, such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the UK's adequacy decision for the European Economic Area.
How long we keep it
- Account and profile data: for as long as your account is open.
- Order and payment records: six years after the transaction, because UK tax law requires it.
- Messages, offers and dispute records: as long as needed to resolve any dispute, and to defend a legal claim.
- Verification codes: minutes. They expire quickly by design.
- Push tokens: until you disable notifications or remove the app.
- Usage records: 24 months, then deleted automatically.
- Photo check results: for as long as the photo exists, and afterwards where we need them to show why something was refused.
- IP addresses and device identifiers: 12 months, then deleted automatically.
- The device identifier: for as long as your account is open.
When you delete your account we remove your profile and stop it appearing anywhere in the app. We keep the minimum transaction records described above, because we are legally obliged to.
Your rights
Under UK data protection law you can ask us to:
- give you a copy of the personal data we hold about you
- correct anything that is wrong
- delete your data, where we are not required to keep it
- restrict or object to how we use it
- send your data to another service in a portable format
- withdraw consent, where consent is what we relied on
Email support@closetswipe.co.uk and we will respond within one month. If you are not happy with our answer you can complain to the Information Commissioner's Office at ico.org.uk.
Children
You must be at least 18 to hold an account in your own name, because buying and selling involves taking payments. A parent or guardian may open an account and allow a child to use it, in which case the account and the data on it belong to the adult, who is responsible for it and is the person we deal with. If we find an account opened by someone under 18 in their own name, we will close it.
We do not knowingly collect personal data directly from children. If you believe a child's data has reached us, email support@closetswipe.co.uk and we will remove it.
Security
Access to data is controlled at the database level so that users can only reach their own records. Payment credentials are held by Stripe rather than by us. No system is perfectly secure, so if you believe your account has been accessed by someone else, contact us straight away.
Changes to this policy
If we change this policy we will update the date at the top, and tell you in the app if the change is significant.