DRAFT FOR PRIVACY REVIEW

Privacy notice

Beta draft. The data controller’s legal name, address, lawful bases, processors, retention periods and rights-contact details must be completed before a public launch.

Information the service may collect

Why information may be used

To operate checkout, deliver orders, manage warranties and returns, provide support, keep accounting records, prevent fraud, manage future trade-ins and improve the service. The correct UK GDPR lawful basis for each purpose must be documented before launch.

Who information may be shared with

Expected categories may include payment providers, postage carriers, hosting and database suppliers, communications providers, professional advisers and law-enforcement bodies where required. Actual providers must be named or appropriately described in the production notice.

Device contents

For future trade-ins, sellers should remove personal data before sending devices. Sharper Sales should avoid accessing personal content and follow a documented secure-erasure and quarantine process. See the device-data policy.

Retention and security

Production retention periods must be defined by record type. Personal information should be protected with access controls, encryption, backups, monitoring and staff procedures appropriate to the risk.

Your rights

Depending on the circumstances, UK data-protection law may provide rights to access, correct, erase, restrict or object to processing, and to request portability. The notice must include a working contact route and information about complaining to the Information Commissioner’s Office.

Cookies and local storage

The hosted beta stores accounts, purchases, support enquiries, future trade submissions, uploaded extras photos and email records on the site backend. Browser storage may also be used for shopping cart items, sell-basket drafts, private order/trade lookup links and local fallback data. Production analytics, authentication and advertising technologies require a proper cookie assessment and consent mechanism where applicable.

Contact

Insert the data controller’s legal identity, postal address and privacy email before launch.

Draft updated 4 September 2026.