Skip to content
Gem10trade

Privacy Policy

Last updated 7 October 2026

This explains what personal information we collect when you use gem10trade, why we use it, who can see it, how long we keep it, and your rights. We collect only what we need to run the marketplace, and we never sell your information.

1. Who's responsible for your information

gem10trade is run by [Owner's full name — to be added], trading as gem10trade, a sole trader in the UK, who is the “controller” of your personal information under UK data protection law. Contact us about anything in this policy at support@gem10trade.com, or by post at [Postal address — to be added].

2. What we collect

  • Your account: email address, username, display name, password (stored only as a one-way scrambled hash, so nobody can read it), and optionally a profile photo, a short bio and your town.
  • Addresses: the delivery addresses you save, including the recipient's name and, if you add one, a phone number.
  • What you do on the marketplace: your listings, purchases, sales, offers, trades, deals, saved cards, reviews, messages, problem reports and the photos and videos you upload. Location data is removed from photos when you upload them.
  • Business sellers: the business name, address and contact details you give us, which are shown publicly.
  • Payments: our payment provider, Stripe, collects your card details when you pay, and your identity and bank details when you set up payouts. We don't receive or store your card number or bank details; we get the result of a payment or payout and the details we need to match it to an order.
  • Technical and security information: the type of browser you sign in with, stored with your sign-in session. To stop abuse, such as repeated password guessing, we keep a scrambled form of your IP address for up to 24 hours. Security-relevant actions on accounts and orders are recorded in an audit log.
  • Usage statistics: we count views and clicks on listings to show sellers how their listings are doing. These counts use a key that changes every day and can't be traced back to you; we don't store IP addresses with them.

3. Why we use it, and our legal reasons

  • To run your account and the marketplace: listing, buying, selling, trading, messaging, payments and payouts, delivery, reviews and notifications. Legal reason: it's necessary for our contract with you (our Terms).
  • To keep gem10trade safe: preventing fraud and scams, investigating reports and problem reports, moderating content and securing accounts. Legal reason: our legitimate interest in a safe, trustworthy marketplace, and our legal duties to deal with illegal content.
  • To meet legal obligations: keeping financial records, reporting sellers' sales to HMRC where the law requires it, and responding to lawful requests from authorities. Legal reason: legal obligation.
  • To improve gem10trade and give sellers statistics about their listings. Legal reason: our legitimate interests, using information that doesn't identify you where we can.
  • News and tips emails, only if you turn them on in your notification settings (they're off by default). Legal reason: your consent, which you can withdraw at any time.

4. Who can see it

  • Everyone: your public profile (display name, username, photo, bio, your town if you choose to show it), your listings, your ratings and the reviews about you, and, if you sell as a business, your business details.
  • The people you deal with: when you buy, the seller sees the delivery name, address and phone number for that order. In a trade, each side sees the address they post to. Messages are seen by the people in the conversation.
  • Our team: only when needed, for example to decide a problem report or review a report. Staff access to private conversations and orders is itself recorded.
  • Service providers who work for us, only to provide their service: Stripe (payments, payouts and Pro billing), Cloudinary (storing and resizing photos and videos), our email provider (sending emails) and our hosting provider (running the website and its database).
  • Authorities: HMRC (seller reporting required by law), and the police or other authorities when the law requires it or to prevent fraud or harm.

Some of these providers process information outside the UK, for example in the United States. When they do, we rely on the protections UK law requires, such as the UK–US data bridge or approved contract terms.

5. How long we keep it

  • Your account and profile: while your account is open. When you close it, we delete or anonymise it, except what we must keep for the reasons below.
  • Orders, payments, payouts and other financial records: 6 years, because tax and accounting law requires it.
  • Problem reports and their evidence: 6 years, the time in which someone could bring a legal claim about a sale.
  • Photos removed from a listing: 90 days. Uploads never attached to anything are deleted after 24 hours.
  • Raw usage statistics: 90 days for listing impressions and 400 days for other events, after which only daily totals remain.
  • Scrambled IP addresses used to stop abuse: 24 hours. Backups of the database are kept for up to 30 days.

6. Cookies

We only use cookies the site needs to work. We don't use advertising or tracking cookies, so we don't ask for cookie consent.

  • __Host-cm_session: keeps you signed in. It holds a random code, lasts up to 30 days, and is deleted when you sign out.
  • g10_display: remembers how you like listings shown (gallery or list, size, how many). It lasts a year and contains nothing about you.

When you pay, or set up payouts or Pro, you use Stripe's own pages, which set their own cookies to process the payment safely and prevent fraud. See Stripe's privacy and cookie policies for details.

7. Keeping it safe

Everything is sent over an encrypted connection. Passwords are stored only as scrambled hashes, sign-in codes are stored scrambled too, and payment details never reach our servers. Access to our systems is restricted and logged, and our database is backed up every night.

8. Your rights

Under UK data protection law you can ask us to:

  • give you a copy of the personal information we hold about you;
  • correct anything that's wrong (you can edit most of it yourself in your account);
  • delete your information, or close your account (we'll keep only what the law requires);
  • restrict or object to how we use it, including stopping news emails;
  • give you your information in a format you can take elsewhere.

Email support@gem10trade.com from the address on your account. We'll reply within one month. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, but please contact us first so we can try to put it right.

9. Children

gem10trade is for people aged 18 and over. We don't knowingly collect information from children; if you think a child has an account, please tell us.

10. Changes to this policy

When we change this policy we'll update the date at the top, and tell you by email or on the site if the change matters to you.