Privacy policy
1. Who looks after your data
The data controller is B2C RIDES Ltd (trading as Somerset Buy and Sale), 4 Miltons, Chipstable, Taunton, Somerset TA4 2PZ. Email b2crides@gmail.com or call 01823 216789 with any privacy question or request.
We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What we collect
| Type | Examples |
|---|---|
| Account details | Email address, password (stored only as a secure hash by our authentication provider), username, display name, town, optional bio and profile photo. |
| What you post | Listings and their photos, jobs and job photos, estimates, pro profile details (business name, services, areas, prices, portfolio, self-declared qualifications), community posts, feedback and reviews. |
| Messages | Messages you send to other members about a listing or job. |
| Activity on the site | Items you save, saved searches, events you say you’re going to, notifications, who bought what (when a seller marks an item sold), bumps and reservations, and a count of views of each listing. |
| Safety records | Reports you make or that are made about you, and moderation actions such as warnings, suspensions and bans. |
| Technical data | IP address, browser type and request logs kept by our hosting providers for security and to keep the site running. A random visitor ID stored in your browser so a listing view is counted once a day (see Cookies and storage). |
| If you contact us | Your name, email address or phone number and what you tell us. |
We don’t use advertising trackers, we don’t sell your data, and we don’t use third-party analytics.
3. Why we use it (lawful bases)
- To provide the service you signed up for (contract): your account, listings, messages, jobs, estimates, community posts, saved items and notifications.
- To keep the site safe (legitimate interests): reports, moderation, stopping scams and ban evasion, enforcing the house rules, security logs.
- To show sellers how their listings are doing (legitimate interests): counting one view per visitor per day. You can switch this off on the Cookies and storage page.
- To meet legal obligations (legal obligation): for example responding to lawful requests from the police or courts.
- To reply to you (legitimate interests) when you contact us.
We’ll ask for your consent before using your data for anything else, such as marketing emails. We don’t send marketing emails at the moment.
4. What other people can see
Your username, display name, town, bio, profile photo, member-since date, ratings and feedback, live and sold listings, pro profile, open jobs (town and postcode area only, never your full address) and community posts are public. Messages are only visible to the two people in the conversation. A moderator can read a conversation only when it’s attached to a report, and that access is logged. Estimates are only visible to the customer and the pro who sent them. View counts are only shown to the seller.
5. Who processes it for us
We use these service providers (“processors”). They handle data only on our instructions and under data processing terms:
The site’s fonts and code libraries are served from our own website, so loading a page doesn’t send your data to font or code networks. If you choose to share a link through WhatsApp or Facebook, those services’ own privacy policies apply.
6. Where it’s stored
Our database and photos are stored in the UK (London). Some of our providers are based in the United States and may access or process data there, for example Netlify’s global network or provider support staff. Where data leaves the UK we rely on UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
7. How long we keep it
- Your account and what you post: while your account is open. When you close your account we delete or anonymise your data within 30 days, apart from the items below.
- Feedback and reviews you left: may be kept with your name removed, so ratings stay accurate.
- Reports and moderation records: up to 2 years after the last action, to keep the site safe and stop banned members coming back.
- Notifications: read notifications are deleted after 90 days.
- Listing view records: the per-visitor records used to count each visitor once a day are deleted after 90 days. Only the total count is kept.
- Backups and hosting logs: kept for the limited periods set by our providers.
8. Your rights
You have the right to ask for a copy of your data, to correct it, to have it deleted, to restrict or object to how we use it, and to get it in a portable format. You can edit most of your details yourself on the My account page. For anything else, email b2crides@gmail.com. We’ll reply within one month.
If you’re unhappy with how we’ve handled your data, please tell us first. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk, 0303 123 1113.
9. Security
Data is encrypted in transit (HTTPS). Database rules mean members can only read and change what they’re allowed to. Passwords are never stored in plain text. No system is perfectly secure, so please use a strong password you don’t use anywhere else.
10. Children
The site is for people aged 18 and over. We don’t knowingly collect data from children. If you think a child has created an account, please contact us.
11. Changes
We’ll update this policy when we change how we use data, for example when we add payments. If the change is significant we’ll tell you on the site or by email.
4 Miltons, Chipstable, Taunton, Somerset TA4 2PZ
b2crides@gmail.com · 01823 216789