Data Protection and Privacy Policy

UK GDPR

Last updated: 15/07/2026

1. Introduction

This policy explains how RevvMarket collects, uses, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data We Collect

We may collect and process the following categories of personal data:

• Identity Data (name, username)
• Contact Data (email address, phone number)
• Transaction Data (purchase and sales history)
• User Content (photos and images you upload, such as listing photos, profile pictures, message attachments and dispute evidence)
• Technical Data (IP address, device type, browser type)
• Usage Data (interaction with the platform)

3. Lawful Basis for Processing

We process personal data under the following lawful bases:

• Performance of a contract;
• Legitimate interests (such as fraud prevention and platform security);
• Compliance with legal obligations;
• Consent (where applicable).

4. How We Use Your Data

We use personal data to:

• Operate and maintain the platform;
• Facilitate transactions between users;
• Prevent fraud and enforce policies;
• Communicate with users;
• Provide optional features such as our AI Listing Assistant (see below);
• Comply with legal requirements.

Our AI Listing Assistant is an optional feature. If you choose to use it, the photos you select are sent to our AI provider (Anthropic) to suggest a title, description and other listing details. Anthropic processes these images on our behalf and, under its commercial terms, does not use them to train its models and retains them only for a short period. You can always fill in a listing manually instead.

5. Data Sharing

We may share personal data with:

• Payment service providers;
• Shipping and logistics providers;
• Technology and IT service providers, including cloud hosting and storage providers, and our AI provider (Anthropic), which processes photos you submit to the AI Listing Assistant on our behalf;
• Regulatory or law enforcement authorities where required.

These providers act as our processors and may only use the data to provide services to us, in accordance with our instructions and applicable data protection law. We do not sell your personal data.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including legal, accounting, or reporting obligations.

When you delete your account, we remove your profile, listings, photos and saved addresses, and anonymise your account so that it no longer identifies you. We retain records of completed transactions in anonymised form for as long as the law requires — in particular, UK tax and accounting rules require financial and transaction records to be kept for up to 6 years — after which they are deleted. See Deleting your account for details.

7. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data;
• Request correction of inaccurate data;
• Request erasure of your data;
• Restrict or object to processing;
• Request data portability.

Requests can be made by contacting support@revvmarket.com.

8. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.

9. International Transfers

Some of our service providers are located outside the UK. In particular, our AI provider (Anthropic) processes photos in the United States when you use the AI Listing Assistant. Where personal data is transferred outside the UK, we implement appropriate safeguards in accordance with UK data protection law — such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework (the “UK–US Data Bridge”), as applicable.