This policy explains how Numonday collects, uses, and protects personal information, in line with UK GDPR requirements.

Numonday operates an online marketplace that allows independent sellers to run their own shops. We act as a platform provider only. Sellers are responsible for their own businesses and buyer interactions.

• Accounts: name, email address, and login details to create and manage your account.
• Orders: information required to process orders, payments, and fulfilment — including your name and delivery address, which is shared with the seller.
• Payments: payment information is handled securely by Stripe. Numonday does not store card details.
• Messages: buyer–seller messages sent through the platform to support transactions.

Your data is used only to:

• Provide and operate the Numonday platform
• Enable buying and selling between users
• Meet legal and regulatory obligations
• Maintain platform security and prevent misuse

We keep personal data only for as long as necessary to provide our services and meet legal requirements. When data is no longer required, it is securely deleted.

If you close your Numonday account, your account and related personal data are permanently deleted.

• No selling of data: we do not sell, rent, or trade personal information with third parties.
• Service providers: limited data may be shared with providers such as Stripe (payment processing) where required to operate the platform.
• Order fulfilment: your name, email address, and shipping address are shared with the seller when you place an order.
• Legal obligations: data may be disclosed where required by law or a lawful authority.

• We send emails only where necessary to operate the platform.
• This includes account notices, order confirmations, and important service updates.
• We do not send marketing emails or newsletters without your consent.
• We do not provide ongoing support by email — queries should go through the Help Centre.

We use cookies to ensure the website functions correctly — for example, remembering basket contents or keeping you logged in. Cookies do not collect financial details and cannot be used to personally identify you.

You can manage or disable cookies at any time through your browser settings.

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict how we process your data in certain circumstances