1. Who controls your data
FLIO, operator of FLIP and xflip.co.uk, is the controller of personal data processed for the FLIP Service. Contact: flip@xflip.co.uk · 3, MK42 7QB.
2. Information we collect
Depending on how you use FLIP, we may process your name, email address, account and security information, membership and access-card information, communication preferences, support messages, uploaded product photographs, barcodes and product descriptions, scan and valuation history, stock and sales records, selling-platform preferences, technical logs, IP address, device/browser information and Service usage information.
3. Why we use it and our lawful bases
We process account, membership, search, stock, sales and support information where necessary to provide the Service and perform our contract with you. We process security, fraud-prevention, service reliability, audit and proportionate product-improvement information where necessary for our legitimate interests in operating and protecting FLIP. We process information where required by law. Optional marketing communications are sent where we have the required consent or another lawful basis permitted by law, and you can opt out.
4. Product images, searches and automated processing
When you ask FLIP to identify or research an item, relevant images, descriptions, identifiers or structured product information may be processed by technology providers that help us deliver identification, search and market-evidence features. FLIP uses automated systems to organise information and calculate estimates, but the Service is designed as decision support: you decide whether to accept an identification and whether to make a commercial transaction.
5. Who we share information with
We may share the minimum information necessary with service providers that support hosting, email delivery, security, product identification, artificial-intelligence processing, market-data retrieval and other infrastructure. We may also disclose information where required by law, to establish or defend legal rights, or in connection with a genuine sale or reorganisation of the business subject to appropriate safeguards.
We do not sell your personal data to advertisers.
6. International transfers
Some technology providers may process data outside the United Kingdom. Where UK data-protection law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism or rely on an applicable adequacy regulation.
7. Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including account operation, security, dispute handling, legal obligations and legitimate record keeping. Retention periods can differ by data type. Account, transaction, audit and support records may need to be retained after account closure where there is a lawful reason to do so. We will delete or anonymise information when it is no longer required.
8. Your rights
Depending on the circumstances, UK data-protection law gives you rights to ask for access to your personal data, correction, deletion, restriction, portability, and to object to certain processing. Where processing is based on consent, you can withdraw that consent. These rights are not absolute and legal exceptions can apply.
To exercise a privacy right, contact flip@xflip.co.uk. We may need to verify your identity before acting on a request.
9. Complaints
Please contact us first if you have a privacy concern so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office.
10. Cookies and local storage
FLIP may use cookies or browser storage that are strictly necessary for account sessions, security, preferences and operation of the Service. If we introduce non-essential analytics, advertising or similar technologies that require consent, we will provide the required information and choice before using them.
11. Security
We use technical and organisational measures intended to protect personal data, including access controls, secure sessions and separation of private application data from the public web root. No online service can promise absolute security, so you should also protect your password and devices.
12. Changes to this notice
We will review this notice as FLIP develops. If we materially change how we use personal data, we will update the notice and take reasonable steps to bring the change to users’ attention where required.
13. Contact details
Privacy questions and requests can be sent to flip@xflip.co.uk.