Privacy Policy

Last updated: 1 January 2026

1. Who we are

For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, Buchwertanz is the data controller for the personal data described in this policy. Our address is Corn Street 227, LS1 5AT Leeds, United Kingdom, and you can contact us at [email protected] or +44 20 7946 0291.

2. Personal data we collect

We may collect the following categories of personal data:

• Identity and contact data, such as name, email address, telephone number and postal address;
• Account data, such as login details, account preferences and settings;
• Verification data, where we are required to confirm your identity for legal or compliance reasons;
• Usage data, such as pages viewed, features used, and interaction with the Platform;
• Technical data, such as IP address, browser type, device identifiers and approximate location;
• Communications data, such as messages you send to us and records of support requests.

We do not intentionally collect special category data. Please do not send us sensitive information unless we specifically request it.

3. How we use your data

We process personal data for the following purposes: to create and manage your account; to provide the Platform and respond to your enquiries; to keep the Platform secure and prevent fraud; to meet our legal, regulatory and anti-money-laundering obligations; to improve performance and usability; and, where you have agreed, to send marketing communications.

4. Lawful bases

Our lawful bases for processing include performance of a contract with you, compliance with legal obligations, our legitimate interests in running and securing a safe service (balanced against your rights), and your consent where we ask for it. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Cookies and similar technologies

The Platform uses cookies and similar technologies to keep you signed in, remember preferences, measure usage and maintain security. Strictly necessary cookies are always active. Other cookies are used only where permitted by the Privacy and Electronic Communications Regulations, which generally means with your consent. You can control cookies through your browser settings, although some features may not work correctly if you disable them.

6. Sharing your data

We do not sell personal data. We may share data with trusted service providers who process it on our behalf under written contracts, including hosting, analytics, communications and payment providers. We may also disclose data where required by law, by a court or regulator, or to protect the rights, property or safety of our users or others. If our business is reorganised or sold, personal data may be transferred to the successor under appropriate safeguards.

7. International transfers

Some of our service providers may process data outside the United Kingdom. Where this occurs, we rely on mechanisms recognised under UK data protection law, such as adequacy regulations, the International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, together with supplementary measures where appropriate.

8. Retention

We keep personal data only for as long as necessary for the purposes described in this policy. Account data is generally retained for the life of your account and for a further period where needed to satisfy legal, accounting or dispute-resolution requirements. Where data is no longer needed, we delete or anonymise it.

9. Security

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, logging and staff confidentiality obligations. No system is completely secure, so we cannot guarantee absolute security. You should also protect your credentials and notify us promptly of any suspected compromise.

10. Your rights

Under UK data protection law you may have the right to access your personal data, to have inaccurate data corrected, to have data erased in certain circumstances, to restrict or object to processing, to data portability, and to object to direct marketing. You may also withdraw consent where processing relies on it. To exercise these rights, contact us using the details above. We will respond within one month, subject to lawful extensions. We may need to verify your identity before acting on a request.

11. Automated decisions and analytics

The Platform displays automated analytics and monitoring outputs. These outputs are informational and are not used to make decisions that have legal or similarly significant effects on you without human involvement, unless you have been told otherwise and given the necessary protections.

12. Children

The Platform is not directed at children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so that we can delete it.

13. Complaints

If you have concerns about how we handle your data, please contact us first so that we can try to resolve them. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

14. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or the law. The current version will always be published on this page with the date of the latest revision. Material changes will be notified to you where appropriate.

15. Contact

For any questions about this policy or your personal data, email [email protected] or write to Buchwertanz, Corn Street 227, LS1 5AT Leeds, United Kingdom.