Privacy Policy

1. Who we are

Loved By Me (lovedbyme.co.uk) is an online marketplace for pre-loved women's clothing. We are the data controller responsible for your personal data.

Contact: Use our contact form

2. What personal data we collect

• Account data: username, email address, location (optional), and a hashed password.
• Listing data: item descriptions, photos, prices, and delivery preferences you provide when creating a listing.
• Messages: the content of private messages sent between buyers and sellers on the platform.
• Booking / interest requests: records of enquiries you send or receive.
• Contact form submissions: your name, email address and message when you use our contact form.
• Technical data: IP address, browser type, pages visited, and time spent — collected via Google Analytics (only with your consent).
• Cookie preferences: a record of your cookie consent choice, stored locally on your device.

3. Lawful basis for processing

• Contract: we process your account, listing, messaging and booking data to provide the marketplace service you have signed up for.
• Legitimate interests: we may process basic server logs to maintain security and performance.
• Consent: analytics cookies (Google Analytics) are only activated after you explicitly consent via our cookie banner. You may withdraw this consent at any time.
• Legal obligation: we may retain certain data to comply with applicable law.

4. Cookies & tracking

We use the following types of cookies:

We use Google Analytics Consent Mode v2. Analytics cookies are blocked by default and only activated once you select "Accept all" in our cookie banner. If you choose "Essential only", no analytics data is collected.

You can change your preference at any time by clearing your browser's local storage for this site or by contacting us.

5. How we use your data

• To create and manage your account
• To display your listings to other users
• To facilitate messaging between buyers and sellers
• To send account-related emails (e.g. email verification) via Resend
• To respond to contact form enquiries
• To analyse site usage and improve the platform (with consent)
• To maintain the security and integrity of the platform

6. Who we share your data with

We do not sell your personal data. We share it only with the following service providers, under contract:

• Resend — transactional email delivery (account verification, contact form)
• Google Analytics — anonymised site analytics (with consent only)
• Replit Inc. — cloud hosting and infrastructure

Your listing information (title, photos, price, size, location) is visible to all visitors of the site as part of the marketplace service.

7. Data retention

• Account data: retained while your account is active. You may request deletion at any time.
• Listings: retained until you withdraw or delete them, or upon account deletion.
• Messages: retained to support your transactions; deleted on account deletion.
• Contact form messages: retained in our inbox for up to 12 months.
• Analytics data: retained by Google for up to 26 months (GA4 default), subject to your consent.

8. Your rights under UK GDPR

You have the following rights in relation to your personal data:

• Right of access — request a copy of the personal data we hold about you.
• Right to rectification — ask us to correct inaccurate data.
• Right to erasure ("right to be forgotten") — request deletion of your data, subject to legal obligations.
• Right to restrict processing — ask us to limit how we use your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — withdraw consent for analytics cookies at any time without affecting previous processing.

To exercise any of these rights, please use our contact form. We will respond within one month.

9. International transfers

Some of our service providers (including Google and Replit) may process data outside the UK. Where this occurs, we rely on appropriate safeguards such as the UK International Data Transfer Agreements or Standard Contractual Clauses.

10. Children's privacy

Loved By Me is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children.

11. Complaints

If you have a concern about how we handle your data and we have not resolved it to your satisfaction, you have the right to lodge a complaint with the UK's data protection regulator:

Information Commissioner's Office (ICO)
ico.org.uk/make-a-complaint
Telephone: 0303 123 1113

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. We encourage you to review this page periodically.