Privacy policy

ALTWORTH LTD is the controller of your personal information, within the meaning of the UK GDPR and the Data Protection Act 2018. We are registered in England and Wales under company number 17233314, with our registered office at 66 Paul Street, London, EC2A 4NA, United Kingdom.

Altworth Inc. (our parent company) is not a controller of your personal information and does not decide how or why your data is processed. For anything about your data, contact us at privacy@altworth.com.

Account data: your name, email, sign-in method, an optional display name and profile image, and basic sign-in metadata.

Transaction data: your bids, purchases, sales, balance movements, payouts, refunds, fees, and the items, prices, and timestamps involved.

Payment and identity data: references from Stripe for payments and payouts, and the checks we use to verify your identity. We never store your full card number.

Custody, shipping and support data: the addresses you give us for delivery, custody and retrieval requests, and the messages and attachments you send our support team.

Device, usage and security data: your IP address, device and browser information, an approximate location derived from your IP, the pages and actions in your session, error reports, attribution/session identifiers, and the privacy preference choices you make.

To provide Altworth (our contract with you): to run your account, sign you in, process bids, purchases, sales, balance movements, custody, shipping, refunds, and support.

To meet our legal duties (legal obligation): accounting and tax, fraud prevention, identity and sanctions checks, and responding to lawful requests.

To keep Altworth secure and working (our legitimate interests): securing the service, debugging errors, preventing abuse, and measuring how the service is used in aggregate to improve it. We balance these against your rights.

To understand product usage and campaign performance (our legitimate interests): product analytics, first-party attribution/session identifiers, and server-side conversion measurement. We balance these against your rights and do not sell your personal data.

We set cookies and similar identifiers needed to sign you in, keep the service secure, remember your privacy preference choices, run core features, understand product usage, and measure campaign performance.

We use product analytics (PostHog) to understand how the service is used, and we measure the effectiveness of advertising using server-side conversion measurement. We do not run browser-side advertising pixels or trackers by default. Our advertising measurement runs server-side and only shares the limited, hashed information needed to attribute a campaign.

While regional consent and opt-out handling is being rebuilt, analytics and server-side measurement run on visits to Altworth. You can record your preferences in the Privacy section of your account or by emailing privacy@altworth.com.

We share data with the providers who help us run Altworth, each under a data-processing agreement: Stripe and Stripe Connect (payments and payouts), Vercel (hosting), Neon (database), Resend (email), Sentry (error reporting), PostHog (analytics), and server-side advertising measurement providers.

We share data with identity and fraud-prevention partners to verify who you are and keep Altworth safe, and with our professional advisers, insurers, and the authorities — including regulators, law enforcement, courts, and tax authorities — where we genuinely need to. We never sell your personal data.

Some of our providers are based outside the United Kingdom. Where your data is transferred abroad, we rely on UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, so your data keeps an equivalent level of protection. You can ask us for details of the safeguards we use.

We keep your account data while your account is open, then delete or anonymise it after closure unless we need to keep it for a legal, security, or dispute reason.

We keep transaction, payment, tax, and accounting records for about six years, in line with our legal duties, and longer if there is an active dispute or investigation. We keep security logs and error reports for up to about 24 months, and support messages for up to about two years unless tied to a transaction or dispute. We keep a minimal record of any opt-out so we can respect it.

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format, and you can withdraw your consent at any time. Some of these rights have limits — for example, we may need to keep certain records for tax or fraud reasons.

If you have an account you can record privacy preferences, request a data export, or submit a deletion request from the Privacy section of your account. You can also email privacy@altworth.com. We respond within one month, and we will tell you if a complex or large request needs more time.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk, though we would like the chance to put things right first.

Altworth is for people aged 18 and over. We do not knowingly collect personal information from anyone under 18.

We may update this policy from time to time. When we make a material change we will update the date above and, where appropriate, tell you in the product or by email. The current version is always the one published here.