Privacy Policy
Your privacy
is taken seriously here.
This Privacy Policy explains how Valentino Platinum Ltd (Co. No. 07972278), the operator of listu.co.uk, collects, uses, stores, and protects your personal data. We process your data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1
Data Controller
The data controller for all personal data processed in connection with the ListU platform is:
Valentino Platinum Ltd is registered with the Information Commissioner's Office (ICO) as a data controller. Our ICO registration details are available at ico.org.uk.
2
What Personal Data We Collect
Account registration data
- First name and last name
- Email address
- Password (stored as a one-way cryptographic hash — never in plain text)
- Account type selection (Private User or Business User)
- Business or trading name (Business Users only)
- Country of operation (Business Users only)
Verification data
- Phone number (if you complete phone verification)
- Verification OTP records (time-limited, not retained after verification)
- Government-issued identity document (if you complete ID verification)
- Date and time of each verification event
Listing and content data
- Listing title, description, price, location, and category
- Images and media uploaded with listings
- Listing creation, modification, and status timestamps
Communications data
- Messages sent through the platform's in-platform messaging system
- Message timestamps and read status
Technical and usage data
- IP address at registration and login
- Browser type, version, and operating system
- Pages visited and actions taken on the platform
- Session timestamps and duration
- Cookie and tracking data (see Section 9)
Social sign-in data
If you register or sign in using Google OAuth, we receive your Google account email address and basic profile information from Google. We do not receive your Google password.
Data we do not collect
- Payment card details — we do not process payments
- Bank account details
- National Insurance number
- Data from minors — the platform is for users aged 18 and over
3
How We Use Your Personal Data
Platform operation
- Creating and managing your account
- Verifying your identity and contact details
- Displaying your listings and seller profile to other users
- Enabling in-platform messaging between buyers and sellers
- Enforcing platform standards and Terms of Service
Trust and safety
- Calculating and displaying your trust tier and verification badges
- Detecting and investigating fraud, scams, and policy breaches
- Responding to reports of suspicious listings or accounts
- Suspending or removing accounts that breach platform standards
Communications
- Sending email verification and OTP codes
- Sending account notifications (listing activity, messages, alerts)
- Sending saved search alert notifications where enabled
- Responding to support, legal, and press enquiries
Platform improvement
- Analysing platform usage to improve features and performance
- Understanding how users navigate and use the platform
- Identifying and resolving technical issues
Legal and compliance
- Complying with applicable UK law and regulatory obligations
- Responding to lawful requests from law enforcement or regulatory authorities
- Establishing, exercising, or defending legal claims
4
Legal Basis for Processing
We process your personal data only where we have a valid legal basis under the UK GDPR. The following table sets out the legal basis for each category of processing:
Contract performance
Art. 6(1)(b)Account creation, listing management, in-platform messaging, verification — processing necessary to perform our contract with you as a platform user.
Legitimate interests
Art. 6(1)(f)Fraud prevention, trust and safety operations, platform improvement, and abuse detection — where our legitimate interests are not overridden by your rights.
Legal obligation
Art. 6(1)(c)Responding to lawful requests from authorities, retaining records required by law, and complying with UK regulatory obligations.
Consent
Art. 6(1)(a)Marketing communications (where applicable) and non-essential cookies. You may withdraw consent at any time without affecting prior processing.
6
Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable law.
After the retention period, data is deleted or anonymised. You may request early deletion of your account and associated data via Settings → Account Management or by contacting privacy@listu.co.uk.
7
Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure.
Technical measures include
- Passwords stored as one-way cryptographic hashes (bcrypt)
- HTTPS/TLS encryption for all data in transit
- Encrypted storage for identity verification documents
- Access controls limiting staff access to personal data
- Regular security review and dependency updates
Breach notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and you without undue delay, as required by UK GDPR.
8
Your Data Protection Rights
Under the UK GDPR you have the following rights in respect of your personal data. To exercise any of these rights, contact us at privacy@listu.co.uk.
10
Children's Data
The ListU platform is intended for users aged 18 and over. We do not knowingly collect personal data from individuals under 18. If you become aware that a child has provided us with personal data without appropriate consent, please contact privacy@listu.co.uk immediately and we will take steps to delete that data.
11
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or platform features. Where changes are material, we will notify you by displaying a notice on the platform or by email.
Your continued use of the platform following the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes. Previous versions are available on request by contacting privacy@listu.co.uk.
12
Privacy Contact
For all data protection and privacy enquiries — including Data Subject Access Requests, rights exercises, and data breach reports — contact:
Data protection enquiries
DSAR, rights requests, GDPR questions
Legal and compliance
Legal notices, compliance, formal correspondence
General support
Account and platform questions
ICO — Information Commissioner's Office
If you are not satisfied with our response to a privacy concern, you have the right to complain to the ICO — the UK's independent supervisory authority for data protection. Website: ico.org.uk · Phone: 0303 123 1113
Related documents