Privacy policy

This policy describes how Worn For You collects, uses and protects personal data across both the editorial website (guides, comparisons, blog) and the UK marketplace (accounts, listings, orders and messages).

Who we are

Worn For You, operator of this site and the UK marketplace. Data controller for the purposes of the UK GDPR and Data Protection Act 2018.

What we collect

• Account details: the email, username and public profile information you provide when you register.
• Identity and age verification: identity data collected by our third-party identity and age-verification provider to confirm you are 18 or over before you can list an item. The provider performs the check; we store only the verification outcome and method, not the underlying documents. Where a manual admin review is used instead, the outcome is stored with that label.
• Private seller data: legal name, date of birth, contact details and address needed for verification and payouts, held separately from your public profile and visible to staff only.
• Delivery addresses: the name and address a buyer provides for a specific order, shared with the seller only to fulfil that order.
• Orders and messages: order history and on-site message content between buyer and seller, retained for dispute resolution and record-keeping.
• Analytics: aggregated, IP-anonymised visit data (pages viewed, referrer, device type). We do not use tracking cookies that identify individual visitors.
• Contact form: only the name, email and message you submit voluntarily.
• Server logs: standard technical logs (IP, timestamp, request path) held for 30 days for security and debugging.

What we do NOT collect

• No advertising cookies.
• No cross-site tracking.
• No third-party analytics that share your data.
• No newsletter subscription unless you actively opt in via a form.

Lawful basis

• Identity & age verification, private seller data: our legal obligation and legitimate interests in preventing under-age use, fraud and harm.
• Orders, delivery and messages: performance of the contract between buyer and seller.
• Analytics: legitimate interests — understanding aggregate site use, with data anonymised.
• Contact form: your explicit consent by submission, and our legitimate interest in responding.
• Server logs: legitimate interests — site security and integrity.

Retention

• Verification outcome and method: for the life of the account plus 6 years for fraud-prevention records.
• Identity documents: held by the verification provider, not by us, for the period that provider requires.
• Order and message data: 6 years for accounting and dispute purposes.
• Delivery addresses: until the order is complete and any dispute window has closed.
• Aggregated analytics: 26 months.
• Contact form submissions: 12 months from your last message.
• Server logs: 30 days.

Sharing

We do not sell, rent or trade personal data. We share only with:

• Our identity and age-verification provider, to confirm seller eligibility.
• Our payment provider, to process checkout and payouts. The provider carries out its own seller checks as required by financial regulations.
• Royal Mail or an equivalent delivery provider, to despatch and track orders.
• Our hosting and analytics providers (technical delivery and aggregate reporting).
• Law enforcement or regulators if legally required.

Delivery addresses and order details are shared with the relevant seller only to fulfil that specific order.

International transfers

Where a provider (verification, payment, hosting or analytics) processes data outside the UK, we use standard contractual clauses or rely on an adequacy decision to ensure UK GDPR-equivalent protection.

Your rights

Under UK GDPR you can:

• Request a copy of your data (subject access).
• Request correction of inaccurate data.
• Request deletion (right to erasure), subject to records we are legally required to keep.
• Object to processing based on legitimate interests.
• Complain to the Information Commissioner's Office (ico.org.uk).

To exercise any right, contact us via the contact page. We respond within 30 days.

Cookies

We use only strictly necessary cookies and local storage (authentication, session and security), which are required for the marketplace account to function. We do not use tracking, analytics or advertising cookies. No cookie banner is required for strictly necessary cookies under UK PECR guidance.

Children

This site and the marketplace are strictly 18+. Identity and age verification is required before anyone can list an item. If you believe a person under 18 has registered, contact us and we will investigate and remove the account.

Changes to this policy

Material changes are dated at the top of the page. We recommend re-reading periodically.

Contact

Privacy questions: use the contact page. Include "Privacy" in the subject.