Privacy Policy

Our Privacy Policy

Last updated: 6 August 2026

This Privacy Policy explains how The Tiny Traders collects, uses and shares your personal data when you use our marketplace, and sets out your rights and how the law protects you.

Please read it carefully before using the Service.

1 - Who we are and how to contact us

The Tiny Traders ("we", "us", "our") operates the online marketplace at https://thetinytraders.co.uk (the "Service"), where private individuals buy and sell pre-loved children's and baby items.

We are the data controller for the personal data described in this policy. The Tiny Traders is currently completing its company registration, and we will update the details below with the full registered information as soon as that is finalised.

  • Trading name: The Tiny Traders
  • Contact: support@thetinytraders.co.uk
  • Registered address: to be confirmed on completion of company registration
  • Company registration number: registration in progress, this page will be updated once the number is issued
  • ICO registration number: registration in progress, this page will be updated once the number is issued

If you have any questions about this policy or about your personal data, contact us at support@thetinytraders.co.uk.

2 - Interpretation and definitions

Words with an initial capital letter have the meanings set out below. Definitions apply whether they appear in the singular or the plural.

  • Account means the unique account created for you to access the Service.
  • Buyer means a User who purchases an item listed on the Service.
  • Seller means a User who lists an item for sale on the Service. Sellers are independent private individuals and are not employed by or acting on behalf of The Tiny Traders.
  • Listing means an item offered for sale on the Service.
  • Personal Data means any information relating to an identified or identifiable individual.
  • Service means the marketplace at https://thetinytraders.co.uk.
  • Usage Data means data collected automatically when you use the Service.
  • User means any person who accesses or uses the Service, whether as a Buyer, a Seller or a visitor.

3 - The personal data we collect

3.1 - Data you give us

When you register, list an item, or make a purchase, we may collect:

  • Name
  • Email address
  • Postal address, including delivery address
  • Telephone number, where you choose to provide it
  • Profile information and profile photo, where you choose to provide it
  • Listing content, including photographs and descriptions of items you list
  • Messages you send to other Users through the Service
  • Reviews and ratings you leave or receive

We do not collect or store your payment card details. See section 5.3.

3.2 - Data collected automatically

When you use the Service we automatically collect Usage Data, which may include your IP address, browser type and version, device type, the pages you visit, the time and date of your visit, the time spent on those pages, and other diagnostic data.

3.3 - Cookies and similar technologies

We use cookies and similar technologies to operate the Service and to remember your preferences.

  • Strictly necessary cookies. Required for the Service to function, including keeping you signed in and securing your session. These cannot be switched off.
  • Functionality cookies. Remember choices you make, such as your login details or language preference.
  • Analytics cookies. Help us understand how the Service is used so that we can improve it. These are only set where you have consented.

You can set your browser to refuse cookies. If you do, some parts of the Service may not function correctly.

4 - How we use your personal data

We use your personal data for the following purposes and on the following legal bases under the UK GDPR.

  • Creating and managing your Account. Legal basis: performance of a contract.
  • Enabling you to list, buy and sell items. Legal basis: performance of a contract.
  • Passing delivery details to a Seller so your order can be sent. Legal basis: performance of a contract.
  • Processing payments and payouts. Legal basis: performance of a contract.
  • Sending transactional messages about your orders and account. Legal basis: performance of a contract.
  • Providing customer support. Legal basis: performance of a contract, and our legitimate interests.
  • Preventing fraud, misuse and unsafe listings. Legal basis: our legitimate interests, and legal obligation.
  • Improving and securing the Service. Legal basis: our legitimate interests.
  • Sending marketing emails. Legal basis: your consent.
  • Analytics and measurement. Legal basis: your consent.
  • Complying with legal and regulatory obligations. Legal basis: legal obligation.

Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and we have concluded they are not. You may object at any time using the contact details in section 1.

5 - Who we share your personal data with

5.1 - Other Users of the marketplace

This is the most important disclosure in this policy, because it is specific to how a marketplace works.

The Tiny Traders is a venue that connects private Buyers and Sellers. We do not sell the items ourselves and we do not handle, inspect or dispatch them.

  • When you buy an item, we share your name and delivery address with the Seller so that they can post the item to you.
  • When you sell an item, we share your name and the information in your public profile and Listing with prospective Buyers.
  • Messages, reviews and ratings you post are shared with the Users they are addressed to, and reviews may be publicly visible.

Once a Seller receives your delivery details they act as an independent data controller in their own right. We require Sellers to use those details only to fulfil the order, but we do not control what an individual Seller does with them afterwards. If you have a concern about how a Seller has handled your information, please contact us and we will assist.

5.2 - Service providers

We share personal data with the following providers, who process it on our instructions:

  • Sharetribe. Provides the marketplace platform that runs the Service, including accounts, listings, messaging and transactions. Data is hosted in the European Union. Privacy policy: https://www.sharetribe.com/privacy-policy/
  • Render. Hosts the website front end. Servers are located in the United States. Privacy policy: https://render.com/privacy
  • Stripe. Processes payments and Seller payouts. Privacy policy: https://stripe.com/gb/privacy
  • Microsoft. Provides our business email. Privacy policy: https://privacy.microsoft.com/en-gb/privacystatement

5.3 - Payments

We do not store or collect your payment card details. Card information is provided directly to Stripe, whose use of your personal information is governed by their own privacy policy. Stripe is certified to PCI-DSS standards.

Because Sellers are paid individually, Stripe collects identity and bank account information directly from Sellers in order to meet its own legal obligations. Stripe is a separate data controller for that information.

5.4 - Legal and business disclosures

We may disclose your personal data where we believe in good faith that it is necessary to comply with a legal obligation, respond to a valid request from a public authority, protect the rights, property or safety of The Tiny Traders, our Users or the public, prevent or investigate wrongdoing, or defend against legal liability.

If we are involved in a merger, acquisition or sale of assets, your personal data may be transferred. We will give notice before your data becomes subject to a different privacy policy.

6 - International transfers

Your personal data is primarily processed within the United Kingdom and the European Economic Area.

Some of our providers process data outside the UK, including Render, which hosts the website front end on servers in the United States, and Stripe, which operates globally. Where personal data is transferred outside the UK, we rely on appropriate safeguards, including the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or an adequacy decision where one applies.

7 - How long we keep your personal data

We keep your personal data only for as long as we need it for the purposes set out in this policy.

  • Account data is retained while your Account is open, and for a reasonable period afterwards to handle disputes and enforce our agreements.
  • Transaction and payment records are retained for six years, to meet UK tax and accounting requirements.
  • Usage Data is generally retained for a shorter period, unless it is used to strengthen security or improve the Service, or we are legally required to keep it longer.

8 - Security

We take reasonable and appropriate measures to protect your personal data, including encryption in transit. No method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.

9 - Your rights

Under the UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data deleted in certain circumstances
  • Restrict how we process your data
  • Object to processing carried out on the basis of legitimate interests
  • Receive your data in a portable format
  • Withdraw consent at any time, where we rely on consent
  • Complain to the Information Commissioner's Office

You can update or delete much of your information directly in your Account settings. Please note that we may need to keep certain information where we have a legal obligation or a lawful basis to do so.

To exercise any of these rights, contact us at support@thetinytraders.co.uk. We will respond within one month.

You can contact the Information Commissioner's Office at https://ico.org.uk or on 0303 123 1113.

10 - Children

The Service is not intended for children. You must be at least 18 years old to create an Account, list an item or make a purchase.

Although the items sold on the Service are children's and baby items, they are bought and sold by adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

11 - Links to other websites

The Service may contain links to websites we do not operate. We are not responsible for the content or privacy practices of those websites, and we encourage you to read their privacy policies.

12 - Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and change the "Last updated" date at the top. Where changes are significant we will notify you by email or by a prominent notice on the Service.

We encourage you to review this policy periodically.