Privacy Policy
Last Updated: 20 February 2025
Welcome to Encore Ski Ltd (“we,” “us,” or “our”). We are committed to protecting your privacy and ensuring that your personal data is handled securely and in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This Privacy Policy explains how we collect, use, and share your personal data when you use our peer-to-peer marketplace for buying and selling pre-loved children’s ski wear.
By using our website www.encoreski.com or services, you agree to the terms of this Privacy Policy.
1. Who We Are
Encore Ski is operated by Encore Ski Ltd, a company registered in England under company number [Company Number], with our registered office at 12 Serpentine Road, Sevenoaks, Kent, TN13 3XR.
For any privacy-related queries, you can contact us at:
📧 Email: [email protected]
📮 Address: 12 Serpentine Road, Sevenoaks, Kent, TN13 3XR.
2. What Data We Collect
When you use our marketplace, we collect and process the following personal data:
A. Data You Provide to Us
- Account Information: When you register, we collect your name, email address, password, and optional profile details (e.g., profile picture, location).
- Transaction Data: When you buy or sell items, we process payment details (handled by a third-party payment provider), order history, and messages exchanged between users.
- Communication Data: When you contact us, we collect your email address and any details you provide.
B. Data We Automatically Collect
- Usage Data: Information about how you interact with our platform, including pages viewed and time spent on the site.
- Device & Technical Data: IP address, browser type, operating system, and device information.
- Cookies & Tracking Data: We use cookies and similar technologies to improve our services. See our [Cookie Policy]([insert link]) for more details.
3. How We Use Your Data
We use your data for the following purposes:
Purpose | Legal Basis |
---|---|
To create and manage your account | Contractual necessity |
To facilitate buying and selling transactions | Contractual necessity |
To process payments (via third-party provider) | Legitimate interest / Contractual necessity |
To communicate with you about transactions, support, or updates | Legitimate interest |
To personalize your user experience | Legitimate interest |
To comply with legal and regulatory requirements | Legal obligation |
To prevent fraud and ensure security | Legitimate interest |
To send marketing emails (only with your consent) | Consent |
You can withdraw your marketing consent at any time by clicking “unsubscribe” in our emails or contacting us at [email protected].
4. How We Share Your Data
We do not sell your personal data. However, we share it with:
- Payment Providers: We use third-party services (e.g., Stripe, PayPal) to process payments securely.
- Service Providers: Cloud hosting, analytics, and email marketing tools that help us run our business.
- Other Users: When you sell or buy an item, relevant details (e.g., username, order details) may be shared with the other party.
- Legal Authorities: When required by law (e.g., fraud prevention, regulatory compliance).
5. Data Storage & Retention
- We store your personal data on secure servers within the UK and the European Economic Area (EEA).
- Transactional data is kept for six years to comply with tax laws.
- If you delete your account, we remove or anonymize your data unless required for legal purposes.
6. Your Rights Under UK GDPR
You have the following rights regarding your personal data:
- Access: Request a copy of the data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request deletion of your data (subject to legal obligations).
- Restriction: Ask us to limit how we process your data.
- Objection: Object to certain types of processing, such as marketing.
- Portability: Request a copy of your data in a structured format.
- Withdraw Consent: Withdraw consent for marketing communications at any time.
To exercise these rights, contact us at [email protected]. We aim to respond within one month.
If you’re unsatisfied with how we handle your data, you can lodge a complaint with the UK Information Commissioner’s Office (ICO) (www.ico.org.uk).
7. Data Security
We implement appropriate security measures, including:
✅ Encryption of sensitive data.
✅ Access controls to restrict unauthorized access.
✅ Regular security audits and compliance checks.
Despite these measures, no online system is 100% secure. Always use strong passwords and keep your login details confidential.
8. Cookies & Tracking Technologies
We use cookies to enhance user experience and analyze website traffic. Some are necessary for site functionality, while others (e.g., analytics cookies) require consent.
For details, see our [Cookie Policy]([insert link]).
9. Third-Party Links
Our website may contain links to third-party sites (e.g., social media, payment providers). We are not responsible for their privacy policies, so please review their terms separately.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. If significant changes occur, we will notify you via email.
11. Contact Us
If you have any questions about this Privacy Policy or your personal data, contact us at:
📧 Email: [email protected]
📮 Address: 12 Serpentine Road, Sevenoaks, Kent, TN13 3XR.