We are dripo. This is our Privacy Policy. Please read it to find out more about who we are and what we do with your data. Let us know if you need help in understanding what it means for you. We are dripo Limited (dripo, we, our or us) and we operate the dripo app and dripo website. Our address is 1 Bartholomew Lane, London, United Kingdom, EC2N 2AX. We want to explain here how we use personal information about you (your data). dripo can be accessed via our app or on our website (the Service). When you use our Service, we will collect and use data about you. We have written this Privacy Policy to explain what data we collect, how we use it and what choices you have in relation to your data. We also use cookies, which are files that are stored on your device and access information. You can find out more about how and why we use cookies in our Cookies and Similar Technologies Policy. 1. What data do we collect and how do we use it? We collect your data when you register to dripo and when you are using our Service. We use your data so that you can use the Service and, from time to time, we may use your data to comply with our legal obligations or for other legitimate reasons. There may also be times when we ask for your consent to use your data. We collect data from you when you use our Service or when you provide it to us, for example when you: Register to use the Service. List an item for sale or sell an item. Make an offer or buy an item. View, like, save, search for or comment on an item, add an item to your bag or communicate with other users. Sign up to our marketing emails and push notifications. Complete a form or survey. Participate in a research interview or focus group. Enter a competition or take part in a promotion. We need a legal reason to collect and use your data. The main reason we use your data is to perform our contract (the Terms of Service) with you, so that you can use our Service. We may also collect and use your data if we: Are legally required. Have your consent. Have a legitimate reason to do so in a way which might reasonably be expected as part of running our business (known as a legitimate interest), as long as your interests and fundamental rights do not take priority over our legitimate reasons. We have listed below more information on the types of data we collect and why we use it. Contact Details and Proof of Identity When you open your account you will provide us with contact information like your name, email address, telephone number and address. We use this contact information so we can get in touch with you: About the products you buy and sell through the Service. About queries, issues or concerns you or other users have. If you enter a competition or take part in a promotion. To ask you to complete a form or survey. To ask you to participate in a research interview or focus group. To send you marketing communications. If you deal with a dripo buyer or seller, we will share your contact details with them. This is a necessary part of buying and selling and using our Service. We also collect your date of birth when you create an account, which we use for our legitimate interests in verifying your details, understanding the age range of our users, and providing age appropriate service and support to our users. Where we cannot confirm your identity using other information that we hold about you or that you have provided to us, we may need you to send us copies of identification documents, which we will use together with your contact information. We use this data for our legitimate interest of verifying your details and helping prevent fraudulent access to the Service or use of your account. Comments and Opinions If you contact us, for example by email, phone, post or complete an online form, we will collect the comments and opinions you communicate to us. We also collect data you provide to us, which includes comments and opinions, when you: Complete a form or survey. Participate in a research interview or focus group. Enter a competition or take part in a promotion. Post on community boards or other message areas. We use comments and opinions where we have a legitimate interest to address any issues, concerns or questions, as well as to make our Service better for you and other users. If you complete forms or surveys, participate in research interviews or focus groups, enter competitions or promotions, or post on community boards or other message areas, we use your data, including any comments and opinions, to help determine which products or services you might be interested in and to help send you marketing messages about them. You can read more about marketing messages here. Competitions and Promotions We collect data you provide to us when you enter a competition or participate in a promotion. We use this data for the purposes of running the competition or promotion you have entered. This data may include your contact details, such as your name and any other information you provide as part of the competition entry or promotion, as well as any comments or opinions you provide. If you win a competition or promotion, we have a legitimate interest in using your data in publicity relating to the competition or promotion. This may include your name, dripo username, photographs, likeness, voice, opinions and biographical information. Your Content and Images We collect your content, which may feature images containing your personal data, when you voluntarily submit it to us when using the Service. We may use your content and/or images in our online and offline marketing campaigns, which may be conducted via third parties on our behalf, subject to the licence you give us to use such images and content as set out in our Terms of Service. We process your personal data for these purposes either on the basis of our legitimate interests in order to promote dripo in our publicity and marketing campaigns or with your consent. In-App Messages, Comments and Item Descriptions If you send in-app messages or comments, or provide item descriptions, we may access, store and review these: To help with fulfilling an order made via our Service. To respond to issues, concerns, queries or disputes raised by users and to resolve disputes. If we believe the messages are in breach of our Terms of Service, or show that you have breached our Terms of Service, for example for the purposes of fraud prevention and/or safety of our users. Payment and Transactions We collect data, including payment information, in relation to items you buy or sell and the payment method(s) you use so you can pay for items and receive money for items that you have sold. If you buy something using our Service, your username, name, delivery address, email address and phone number that you provide during checkout will be shared with the seller for the purposes of your order. However, you should not share your details directly with sellers and if something does not feel right or you have any concerns, you can contact us using the contact details in Get in Touch. If you sell an item using our Service and purchase the shipping label through dripo, we may share your name, address, email address and phone number with our shipping partner for inclusion on the shipping label to provide the Service to you. If you use one of our payment partners, including dripo Payments via Stripe, you authorise dripo to pass any information and payment instructions you provide (which may include name, email address, unique customer identifier, order ID, bank account details, payment card details, card expiration date, CVC code, date/time/amount of transaction, merchant name/ID and location) to the extent required to complete payments via the Service. Our support and moderation team will also have access to this information in order to process and support transactions and moderate refunds. Our payment partners may also collect your information, including information collected by cookies or other similar means, to the extent this is necessary to process the transactions or to satisfy security requirements. We also use your transaction information and your purchase history to help decide which products and services you might be interested in hearing about and to send you marketing messages about them. You can read more about marketing messages here. Data from Social Accounts If you connect your dripo account to a social network account, such as Facebook or other social networks, we will collect data about you from the social network. We will do this in accordance with the privacy settings you have on that social network. The data we may receive includes your name, ID or handle, profile picture, gender, username, user ID, age or age range, language, country, friends list, follower list and any other information you agree to share. We use this data to help create your public profile on our Service, and help you share your experiences on our Service with your friends, followers or contacts on the social network you have connected your dripo account to. If you agree, we may also use your data to give you updates on the social network which might be of interest to you or any promotion you are taking part in. We won’t post to your social network or friends, followers or contacts without your permission. Your relationship with other users We collect data about the users you follow (and users who follow you) on our Service. We use this to display items to you in your search results, recommendations or feed which may be of interest to you. We use technology (an algorithm) to help us do this. If an account has been blocked or banned, we also store this data. We do this for our legitimate interests of enforcing our Terms of Service and allowing users to manage who can communicate with them on our Service. Website and app login When you create an account and log in, we collect your username, password and information about your device. It is in our legitimate interest to use this data to keep your account secure. If you decide to log-in using a social network, such as Facebook sign-in, or any other third party log-in methods, we are not given your password or other account login details for those social networks or other third party services. However, we may receive some information from those third party services depending on the third party account you choose to use to log in. For example, depending upon the third party service you choose to use and your settings on that service, we may receive your email address registered with that third party service. You should keep your username and password safe and not share them with anyone else. You are responsible for actions that are taken using your username and password. If you think someone has access to your password or account, you should tell us immediately and change your password. You can add an extra level of security to your account by turning on two-factor authentication. Your Device We will collect information about the device you are using to use the Service. This includes a computer, smartphone or any other electronic device that you can access the Service from. This can include the type of device, unique device identifying number (such as Android ID, Apple ID or browser fingerprint), what operating system is used on the device, what browsers and applications are used to connect to our Service by your device, your internet service provider or mobile network, your IP address and your device telephone number (if it has one). If you are logged into a registered account, this information may be associated with you. We use this device information so that the way the Service is presented and works is suitable for your device. We also use this device information for our legitimate interest of ensuring any users that have been banned are not able to access the Service by creating a new account, as well as detecting and analysing potentially suspicious user activity in order to protect our Service and other users of our Service. Your preferences We use the preference and notification settings you have chosen to: Provide you with notifications. Send you marketing communications. Change how our app and/or website is displayed to you. Change what content you see through our Service. How you connect to and use our Service We collect data about how you use our Service. This includes: Profiles you have viewed. Items you have listed, viewed, added to bag, bought, sold, searched for, saved, shared, liked or commented on. The time you access our Service and for how long. The website you came to our website from, or went after leaving our website. Any choices you make when using our Service. We use this data (with the help of third party analytics providers) to: Understand how our Service is used, which we use for the legitimate interests of improving our Service. Show you your feed and search results on our Service and order the results in a way that is relevant to you. We use technology (an algorithm) that uses your preferences and, where you have consented to us using your location data, your location to do this. Display your items to the most relevant potential buyers. We use technology (an algorithm) to do this. Display the aggregate number of users interested in an item (e.g. by displaying the number of views, offers or the number of users who have added the item to their bag). Send you tips and other notifications we think will improve your experience of the Service. Assess if our marketing campaigns or promotions have been successful. Send you marketing (including via email) about products and services we think may be of interest to you. Detect or prevent any breach of our Terms of Service. Location If you have given us your consent, for example via your device settings where permissible, we collect and use your location information to provide you with features of the Service that are relevant to you and your location. Aggregated postcode information is also occasionally used to measure the performance of marketing campaigns we conduct. We may use other information we have together with your location to do this. For example, this helps you to search for items that are for sale in your local area. If you change your mind about allowing us to use your location information, you can update your preferences in your device settings at any time. Other Users Sometimes other users of our Service may provide data about you, such as comments, feedback, and likes relating to your items, and messages they send to you. Other users can also share information about an item they have bought from you on other social networks that link to dripo. However, this is only information that is already public. If users want to invite you to use our Service or share information about our Service, we will use data they provide to us about you to help them to do this. We will only do this if they have told us that you have agreed they can communicate with you in this way. Fraudulent or Criminal Activity, or activity that violates our Terms We use data about fraudulent or criminal activity which is related to your use of our Service. We use this for our legitimate interests in detecting and preventing fraud and crime, and to comply with our legal obligations. So that we can provide the Service to you on the basis of our Terms of Service, we may monitor the data you provide when using the Service to detect and respond to potential fraud, abuse or breaches of our Terms of Service, including listings (description, price), messages, user profile information, phone number, location, linked account information and/or device ID. This can lead to various enforcement actions, from issuing an account warning and content removal to permanently banning an account from the platform. In some cases to protect our Service, this detection and enforcement takes place automatically using machine learning tools (such as in the case of detecting fraud, phishing, commercial spam or users that may have previously been removed from our Service). Other uses of your data We will use data we collect to: Monitor and improve our Service. Help us develop new products and services. When we use your data for these purposes, this won’t result in any data that wasn’t previously publicly available being made public on our Service. We also use your data to resolve disputes between users, provide support to users, to troubleshoot and help solve problems, and to enforce our Terms of Service. Sensitive Data We may collect sensitive data, such as information about your religious beliefs, racial or ethnic origin, physical and mental health details, or sexual orientation. We collect and use such data when we have your express consent, for example when you complete a survey. With your permission, we may feature you or your profile in publicity and marketing campaigns. Providing your sensitive data for these purposes is entirely voluntary. We may also collect and use such data to comply with government regulations and guidance. If you put your own sensitive data on the Service (including where you self-declare certain types of sensitive data on the Service), you acknowledge you are deliberately making this data public at your own choice and that we may use such data for the purposes mentioned above. We may remove such data, or request that you remove such data, from our Service at any time.