Privacy Policy

1. Introduction

Sole Obsession ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website sole-obsession.co.uk and related services (the "Platform").

Sole Obsession Ecommerce Ltd (Company No: 17019850) is a registered company in England & Wales, trading as Sole Obsession UK from London. We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, username, password
• Profile Information: Bio, profile picture, preferences
• Identity Verification: Name, date of birth and address (for sellers), processed by our payment provider Stripe when a seller sets up payouts
• Payment Information: Billing address, payment card details (processed by Stripe)
• Communications: Messages sent through the Platform, support inquiries
• Content: Listings, photos, reviews you submit

2.2 Information Collected Automatically

• Device Information: IP address, browser type, operating system
• Usage Data: Pages visited, time spent, click patterns
• Location Data: Approximate location based on IP address
• Cookies: Session and preference data (see Section 7)

3. How We Use Your Information

We use your information for the following purposes:

• To provide and maintain the Platform
• To process transactions and send related information
• To verify your identity and age
• To communicate with you about your account and orders
• To respond to your inquiries and provide support
• To detect and prevent fraud and abuse
• To comply with legal obligations
• To improve and personalize the Platform
• To send marketing communications (with your consent)

4. Legal Basis for Processing (UK GDPR)

We process your personal data on the following legal bases:

• Contract: To perform our contract with you when you use the Platform
• Legitimate Interests: For fraud prevention, security, and Platform improvement
• Legal Obligation: To comply with applicable laws and regulations
• Consent: For marketing communications and certain cookies

5. How We Share Your Information

5.1 Service Providers

• Stripe: Payment processing (subject to their privacy policy)
• Didit: Identity and age verification for checks completed before 14 October 2026 (no longer used)
• Shippo: Shipping label generation
• Firebase (Google): Hosting and database services
• Google Cloud Vision: Automated image moderation to detect prohibited content
• Resend: Transactional email delivery

5.2 Other Users

When you transact on the Platform, we share necessary information (such as shipping address) with buyers/sellers to complete transactions.

5.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, safety, or property.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., tax records for 7 years)
• Resolve disputes and enforce agreements
• Maintain records as required by applicable regulations

Identity verification records for sellers are retained for a minimum of 7 years after account closure as required by law.

7. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the Platform to function (no consent needed)
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Help us understand how you use the Platform
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality.

8. Your Rights (UK GDPR)

Under the UK GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to certain processing activities
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at privacy@sole-obsession.co.uk. We will respond within one month as required by law.

9. Data Security

We implement appropriate security measures including:

• SSL/TLS encryption for data in transit
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication
• Secure payment processing through PCI-compliant providers

While we take reasonable precautions, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Your information may be transferred to and processed in countries outside the UK, including the United States (for payment processing and hosting). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner's Office.

11. Children's Privacy

This Platform is strictly for adults 18 years of age and older. We do not knowingly collect information from anyone under 18. All users must complete age verification before using the Platform. If we learn we have collected information from a minor, we will delete it immediately. If you believe we have information about a minor, please contact us immediately.

12. Third-Party Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to read their privacy policies.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last Updated" date. Your continued use of the Platform after changes constitutes acceptance.

14. Contact Us

For privacy inquiries or to exercise your rights, contact us at:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection: