1. Controller and scope
The Valdeni legal operator shown on this page is the controller for personal information processed to provide the Valdeni marketplace, except where another provider acts as an independent controller under its own notice.
This notice covers visitors, members, buyers, private sellers, professional sellers, support contacts and people whose information is supplied for a delivery or compliance purpose.
Payment card, bank-account and payment-identity information is handled primarily by Stripe under its own privacy terms. Shipping labels, rates and tracking are handled with Parcel2Go and the selected carrier. Valdeni receives the references and status information needed to operate the transaction.
2. Information we use
We process information you provide, information generated through your use of Valdeni, and information received from service providers or public registers.
- Account and age-safeguard information, such as name, handle, email, private birth date, authentication identifiers and account status.
- Profile, listing and media information, including descriptions, photographs, videos, sizes, condition, prices and item measurements.
- Transaction information, including Collections, offers, reservations, orders, fees, payment references, ledger entries, refunds and payouts.
- Delivery information, including recipient details, addresses, contact details needed by a carrier, parcel data, labels, tracking and delivery events.
- Messages, attachments, reviews, reports, appeals, support correspondence and evidence relevant to a safety or transaction case.
- Seller compliance information, including seller capacity, public business disclosures, tax identifiers, registration information and verification status.
- First-party service activity, such as searches, listing opens, saves, Collection activity, Runway interactions, recommendation feedback, device/session data and security logs.
3. Why we use information
We use personal information only where we have a lawful basis. The basis depends on the purpose and the information involved.
- Contract: to create and secure your account, display listings, enable messages, calculate checkout, process orders, arrange delivery, provide support, administer offers and reservations, and maintain transaction records.
- Legal obligation: to keep financial and tax records, report qualifying seller information, respond to lawful requests, support product and online-safety duties, and meet payment or fraud-prevention requirements.
- Legitimate interests: to prevent fraud and abuse, moderate the marketplace, protect members, improve reliability, understand service use, operate relevant recommendations, defend legal claims and communicate important service information. We balance those interests against member rights.
- Consent: where required for optional cookies, direct marketing or another specific optional use. You can withdraw consent without affecting earlier lawful processing.
- Vital interests or public interest: in rare cases where processing is necessary to protect life, respond to an immediate serious safety risk, or cooperate with an authorised body.
4. Recommendations and members under 18
Valdeni can use first-party interactions to organise or recommend marketplace content. Paid placement is labelled and does not override basic eligibility, safety or relevance controls.
Persistent behavioural profiling is disabled for members identified as under 18. Their recommendation signals are limited to the current session where supported. Photo attachments in chat and some other higher-risk features are restricted to adults.
Valdeni is not available to children under 13. We use the private birth date supplied at signup to enforce age safeguards and do not make that date public.
6. International transfers
Some service providers may process information outside the United Kingdom. Where UK data-protection law requires a transfer safeguard, we use an adequacy regulation, an approved contractual safeguard, or another lawful transfer mechanism together with any necessary supplementary protections.
Provider locations and safeguards can change. Contact the privacy address shown on this page if you want more information about the safeguard used for a particular transfer.
7. How long information is kept
We keep information for no longer than reasonably necessary for the purpose collected, taking account of transaction records, tax and accounting duties, safety needs, disputes, fraud prevention and legal claims.
- Account and transaction records are kept while the account or transaction is active and for the applicable legal or claims period afterwards.
- Notifications are normally retained for 180 days unless a longer period is required for an unresolved transaction or case.
- Safety-review evidence copies are normally scheduled for deletion 365 days after a case is resolved, subject to a minimum 90-day evidence period and any legal hold. Source records can be retained where needed to enforce or evidence a decision.
- Account exports are encrypted and the download link expires after 15 minutes once the export is ready.
- Backups are protected and age out under the backup schedule; deletion from live systems may not remove an item from every backup immediately.
8. Your rights
Depending on the circumstances, you may have rights to access your information, correct it, delete it, restrict or object to processing, receive portable information, and withdraw consent. You may also complain to the Information Commissioner's Office.
Some requests can be completed through account settings or the account export and closure tools. Other requests can be sent to the privacy contact shown on this page. We may need to verify the request and can retain information where the law requires or permits it.
Closing an account withdraws listings, revokes sessions and pseudonymises the public profile. Closure can be delayed while an order, payment, payout, dispute, legal hold or seller balance remains unresolved.
9. Security and automated decisions
Valdeni uses access controls, encryption where appropriate, audit records, environment separation and provider security features to protect information. No system is completely secure, so members should protect their sign-in method and report suspicious activity promptly.
Automated checks can block or prioritise activity for fraud, safety, eligibility or compliance reasons. A significant adverse decision is not intended to rest solely on an unexplained automated score. Where a review or appeal is available, the relevant notice explains how to request it.
10. Privacy contact and changes
Use the privacy contact shown on this page for data-rights requests or privacy complaints. You can also contact the Information Commissioner's Office if you remain dissatisfied.
We will issue a new policy version when this notice changes materially. The effective version and previous published versions remain identifiable by date and version.