Privacy Notice

Last updated: February 2026

This Privacy Notice has been prepared in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR). It explains how UKOffers ("we", "us", "our") processes your personal data as the data controller.

1. Data Controller

UKOffers is the data controller for the personal data described in this notice. You can contact us through the platform's Help & Contact page for any questions about this notice or your rights.

2. Personal Data We Process

• Identity data: name, date of birth, NI number (where you choose to provide it).


• Contact data: UK mobile/landline number, email, postcode and address.


• Account data: username, hashed password, role (user / provider / agent / dealer).


• Financial data: payment metadata (handled by Stripe; we do not store full card numbers).


• Business data: Companies House number, HMRC VAT number, trade certifications (for sellers / providers).


• Listings & transactions: listings, service requests, offers, messages, reviews.


• Technical data: IP address, browser, device info, cookies, session logs.

3. Lawful Bases for Processing

We rely on the following lawful bases under UK GDPR Article 6:

• Contract — to deliver the marketplace service you signed up for.


• Consent — for marketing communications and non-essential cookies.


• Legal obligation — to comply with HMRC, Companies House, anti-money-laundering and consumer-protection law.


• Legitimate interests — to keep the platform secure, prevent fraud and improve our services.

4. How We Share Your Data

• Stripe — payments and refunds.


• Companies House API — to verify limited-company sellers (with your consent).


• HMRC VAT API — to validate VAT registration numbers.


• SMS / email providers — to send verification codes and transactional messages.


• Hosting and analytics providers acting as our processors under written agreements.


• Law enforcement — only where legally required.

We do not sell your personal data to third parties.

5. International Transfers

Where personal data is transferred outside the UK we rely on UK-approved mechanisms (UK Adequacy Regulations, the UK International Data Transfer Agreement, or Standard Contractual Clauses with the UK Addendum).

6. Your Rights under UK GDPR

You have the right to:

• access a copy of your personal data;


• request rectification of inaccurate data;


• request erasure ("right to be forgotten");


• restrict or object to processing;


• data portability;


• withdraw consent at any time;


• lodge a complaint with the Information Commissioner's Office (ICO) at https://ico.org.uk.

You can exercise most rights from your account's Privacy Settings page. Other requests can be made via the Contact page.

7. Data Retention

We keep your personal data only as long as we need it for the purposes described, or as required by UK law (e.g. financial records for 6 years for HMRC). When you delete your account, we anonymise or erase your data subject to those legal retention requirements.

8. Security

We use AES-256-GCM at rest and TLS 1.3 in transit. Passwords are hashed with bcrypt/argon2. Access is role-based and audit-logged. We never ask for your password by email or phone.

9. Cookies

See our separate Cookie Policy for details on the cookies we use and how to manage them.

10. Children

UKOffers is not intended for users under 18. We do not knowingly collect data from children.

11. Changes to This Notice

We will post any updates to this notice on this page and, where the change is material, notify you in the platform.

This text is a draft and does not constitute legal advice. Please consult a UK solicitor before relying on it.