Privacy Policy
Last updated: October 2026
This policy explains how FINALBUY LIMITED uses your personal data when you visit finalbuy.co.uk, buy from us, or use our Sell to us service. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
The data controller is FINALBUY LIMITED, a company registered in England and Wales (company no. 16275548). Our postal address is our registered address shown in the footer of this website. Contact for all privacy matters: info@finalbuy.co.uk.
2. The data we collect
- Identity and contact: name, email address, billing and delivery address, and phone number if you choose to give it.
- Account: username, password (stored encrypted) and order history, if you create an account.
- Orders: items bought, prices, delivery choice, returns and messages with us.
- Payment: handled by Stripe. We see only limited details (such as card type, last four digits and payment status). We never see or store your full card number.
- Sell to us: your name, contact details, item details, photos you upload, and, if we buy your item, the bank account details (account name, sort code and account number) we need to pay you by bank transfer.
- Technical: IP address, browser and device type, collected by our hosting and shop software to run and secure the site, and through cookies as described in our Cookie Policy. We do not use analytics tools to track visitors.
3. Why we use your data and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Processing and delivering orders, returns, refunds and warranty claims | Contract |
| Running your customer account | Contract |
| Giving estimates, inspecting and paying for items under Sell to us, including paying you by bank transfer | Contract (or steps before a contract) |
| Answering your questions | Legitimate interests (customer service) |
| Preventing fraud, handling payment disputes and chargebacks, keeping the site secure | Legitimate interests |
| Keeping accounting and tax records | Legal obligation |
| Non-essential cookies (such as preference cookies) | Consent |
4. Who we share your data with
We use these service providers, who process data on our behalf under contract:
- Hostinger – website and email hosting;
- WooCommerce (Automattic) – our shop software, which runs on our own hosting; some optional services may connect to Automattic;
- Stripe – card payments and fraud screening (Stripe is also an independent controller for some purposes, see stripe.com/privacy);
- Royal Mail – delivery of orders and Sell to us parcels (we share your name, address and, where needed, email);
- Complianz – our cookie consent tool, which stores your cookie choices;
- Our bank – to make Sell to us payments by bank transfer;
- Google Search Console – helps us see how our site appears in Google search. It gives us summary search data only and does not set cookies on your device.
We may also share data with professional advisers, or with the police, HMRC or other authorities where the law requires. We never sell your personal data.
5. International transfers
Some providers (such as Stripe) may process data outside the UK. Where this happens, we rely on UK adequacy regulations or approved safeguards such as the UK International Data Transfer Addendum.
6. How long we keep your data
- Order, payment and Sell to us purchase records (including bank details used for payment): 6 years after the end of the financial year, for tax and accounting.
- Customer accounts: until you ask us to delete the account, or after 3 years with no activity.
- Sell to us enquiries and photos where no sale happens: 12 months.
- Customer service emails: 2 years.
- Cookie consent records: 12 months.
7. Your rights
You have the right to:
- access a copy of your data;
- have inaccurate data corrected;
- have your data erased in some cases;
- restrict or object to how we use your data, including where we rely on legitimate interests;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier use.
To use these rights, email info@finalbuy.co.uk. We usually reply within 2 working days, and always within the legal limit of one month. There is normally no charge.
8. Complaints
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint.
9. Security
Our site uses an encrypted (HTTPS) connection, and access to customer data is limited to those who need it. Payments are handled entirely by Stripe.
10. Cookies
We use cookies as described in our Cookie Policy. Non-essential cookies are only set if you agree.
11. Changes
We may update this policy. The latest version will always be on this page with its date.