Privacy Notice

• Account details — name, email address and login credentials for venue staff, retailers and our team. Used to create and run your account and keep it secure (contract; legitimate interests).
• Trade-in details — name, mobile number, email, payout choice, bank sort code and account number (for bank transfers), and a return address if you post a club. Used to make and pay your trade-in, contact you about it and prevent fraud (contract; legitimate interests; legal obligation for financial records).
• Club photos and videos — frames you capture or upload, plus the AI grades, specifications and prices we produce. Used to grade and value clubs, create studio images and listings, and resolve disputes (contract; legitimate interests).
• Connected marketplace accounts — the access token issued by eBay when a retailer connects a store. Used only to create listings you ask for (contract).
• Support messages — what you send us. Used to help you (contract; legitimate interests).
• Technical and usage data — IP address, device and browser type, and logs of how the Service is used. Used to keep the Service secure, prevent abuse (for example limiting repeated scans) and improve it (legitimate interests).

Payment card details for Pro Studio are collected by Paddle, not by us. We may send you service messages about your trade-in or account; we'll only send marketing with your consent, which you can withdraw at any time.

• Service providers who host and run the Service for us, including cloud hosting, database and storage, AI processing for grading and image work, and background-removal tools.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, subscription management, payments, tax compliance and invoicing.
• The partner venue where you trade in or check in a club, which sees the club, the offer and your name — never your bank details.
• Trade buyers we sell clubs on to, who receive club photos and specifications (not your contact or bank details), and couriers who need delivery or return addresses.
• eBay, when a retailer chooses to push a listing to their own store.
• Professional advisers such as accountants and lawyers.
• Police, regulators or other authorities where required by law, or to prevent fraud.

We never sell your personal data.

Some of our providers process data outside the UK. When this happens we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.

We keep account data while your account is open. Trade-in and payment records are kept for up to 6 years after the trade-in to meet tax and accounting rules and handle disputes; bank details are kept only as long as needed to pay you and keep those records. Club photos are kept while they're needed for the trade-in, listing or dispute. When we no longer need data we delete or anonymise it.

Under UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use it, including objecting to processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time where we rely on consent.

Contact us to use any of these rights. We'll respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk), though we'd appreciate the chance to help first.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, private storage for photos, access controls that limit staff and venues to what they need, and masking of bank details.

We only use essential browser storage needed to keep you signed in and make the Service work. We don't use advertising or analytics cookies. Paddle's checkout may set its own essential cookies when you pay.