Legal

Privacy Policy

1. Who we are

BuildRelay Software Ltd ("BuildRelay", "we", "us") is the data controller for personal data processed through www.buildrelay.co.uk and related apps (the "Platform"). We're registered in England and Wales, company number [00000000], registered office 29 Blackwood Close, West Byfleet, England, KT14 6PP.

Data protection queries: [contact@buildrelay.co.uk]

2. The short version

We collect what we need to run a materials marketplace safely: account details, identity verification results, listing and message content, and payment information handled by our payment provider. We use it to operate the Platform, verify sellers, process payments, keep transactions safe, and communicate with you. We share the minimum necessary with the other party to a transaction — never your full address or phone number until an order is paid for. We don't sell your data. You can access, correct, or delete most of it from your account, and can ask us for the rest.

The rest of this page sets that out in full, as UK GDPR requires.

3. What we collect

3.1 Information you give us

Account details: name, display name, email, phone number, postcode.
Profile information: bio, account type (individual, sole trader, or trade business), avatar.
Listing content: photos, descriptions, quantities, prices, and location of materials you list.
Messages: content you send through BuildRelay's messaging system.
Payment and payout details: collected and processed by Stripe on our behalf — see section 6. We do not receive or store your full card number or bank account details.
Identity verification documents: collected and verified by Stripe Identity when you become a seller. We do not receive or retain the document itself — only the verification outcome (verified / not verified) and the date.
Support requests: anything you send us when contacting support.

3.2 Information collected automatically

Usage data: pages viewed, searches made, listings viewed or saved, device and browser type, IP address.
Cookies and similar technologies: see our Cookie Policy for full detail and how to control these.

3.3 Information from third parties

Verification results from Stripe.
Payment and payout status from Stripe.
If you sign in using a third-party account (where offered), basic profile information from that provider.

4. How we use your data, and our legal basis

Creating and managing your account — Account details. Legal basis: Performance of a contract.
Verifying seller identity — Verification result from Stripe. Legal basis: Performance of a contract; legal obligation (fraud/AML prevention).
Operating listings, search, and the wanted board — Listing content, usage data. Legal basis: Performance of a contract.
Enabling messages between buyers and sellers — Message content. Legal basis: Performance of a contract.
Processing payments and payouts — Payment data (via Stripe). Legal basis: Performance of a contract.
Holding payment until collection is confirmed — Order and payment status. Legal basis: Performance of a contract.
Showing you relevant materials and distance — Postcode, search history. Legal basis: Performance of a contract; legitimate interest.
Preventing fraud, abuse, and policy violations — Account, listing, message, and usage data. Legal basis: Legitimate interest; legal obligation.
Order confirmations, safety and policy notices — Contact details. Legal basis: Performance of a contract; legal obligation.
Product updates and marketing emails — Contact details. Legal basis: Consent (you can opt out any time).
Responding to support requests — Whatever you send us. Legal basis: Performance of a contract; legitimate interest.
Complying with tax, accounting, and legal obligations — Order and payment records. Legal basis: Legal obligation.

5. What other users can see

BuildRelay is designed to share the minimum personal information necessary at each stage of a transaction:

Public profile: your display name, avatar, verified badge, account type (private or trade), general area (town/district — never your full postcode), member-since date, listing counts, rating, and reviews.
Before payment: a buyer sees your listing and general location only. A seller sees a buyer's display name and messages.
After payment: the buyer and seller are shown each other's full collection or delivery address and a contact number, so the handover can be arranged. This information is released automatically by the Platform once payment clears — you don't need to share it yourself.
Never shared with other users: your legal name (if different from your display name), email address, identity verification documents, full payment or bank details, or your order history with other sellers/buyers.

6. Sharing your data

We share personal data with:

Stripe, our payment and identity verification provider, to process payments, payouts, and seller verification. Stripe processes this data as an independent controller under its own privacy policy as well as acting as our processor for payment execution.
The other party to a transaction, to the extent described in section 5.
Service providers who help us run the Platform — hosting, email delivery, customer support tooling, and analytics — under contracts that restrict them to processing data only on our instructions.
Authorities, where we're required to by law, where necessary to prevent fraud or a crime, or to protect the safety of our users (for example, reporting a suspected sale of stolen goods or hazardous waste).
A buyer or seller of our business, if BuildRelay is acquired or merges with another company, subject to the same protections in this policy.

We do not sell your personal data to third parties, and we do not use it to serve third-party advertising on the Platform.

7. International transfers

Some of our service providers, including Stripe, may process data outside the UK. Where they do, we rely on the UK's international data transfer safeguards, such as the UK's adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses, to ensure your data stays protected.

8. How long we keep your data

Account data: for as long as your account is active, and for a limited period after you close it, to handle any outstanding disputes or legal claims.
Order and payment records: retained for at least 6 years after the transaction, as required for UK tax and accounting purposes, even if you close your account.
Messages: retained for as long as the related account or order record is retained, to support dispute resolution.
Marketing consent: until you withdraw it.

When you delete your account, we delete or anonymise personal data that we're not legally required to keep, as described in our Settings page.

9. Your rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data, in some circumstances ("right to be forgotten") — subject to our retention obligations in section 8.
Restrict how we process your data in some circumstances.
Port your data to another provider in a structured, machine-readable format.
Object to processing based on legitimate interest, including direct marketing.
Withdraw consent at any time, where processing is based on consent.

You can exercise most of these directly from your account, or by emailing [contact@buildrelay.co.uk]. We'll respond within one month.

If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Children

BuildRelay is not intended for anyone under 18. We don't knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we'll delete it.

11. Security

We use technical and organisational measures — including encryption in transit, access controls, and working with payment and verification providers that meet PCI DSS standards — to protect your data. No system is completely secure, and we can't guarantee absolute security.

12. Cookies

See our Cookie Policy for full detail on the cookies we use and how to control them.

13. Changes to this policy

We may update this policy from time to time. We'll notify you of material changes by email or in-app notice before they take effect.

14. Contact us

BuildRelay Software Ltd, 29 Blackwood Close, West Byfleet, England, KT14 6PP. [contact@buildrelay.co.uk]