Privacy Policy
UniTill Ltd ('we', 'us', or 'our') is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
UniTill Ltd is the data controller for personal data processed through the UniTill app and website. You can contact us at [email protected].
1. Information We Collect
We collect the following categories of personal data: (a) Account information — your name, university email address, and profile photo when you register; (b) Listing data — photographs, descriptions, and pricing information you submit; (c) Communications — messages sent between users through our in-app chat; (d) Usage data — how you interact with the app, including pages viewed, searches made, and listings clicked; (e) Device information — device type, operating system, and IP address for security and analytics purposes; and (f) Verification data — your university email address used to confirm student status.
2. How We Use Your Information
We use your personal data to: operate and maintain the UniTill marketplace; verify your student status; enable communication between buyers and sellers; personalise your experience and show relevant listings; detect and prevent fraud, abuse, and prohibited activity; send you service notifications and updates; comply with legal obligations; and improve our platform through analytics and research. Our lawful bases for processing are: contract performance (operating your account), legitimate interests (platform security and improvement), legal obligation (compliance), and consent (marketing communications).
3. Sharing Your Information
We do not sell your personal data. We may share your information with: other UniTill users to the extent necessary to facilitate a transaction (e.g. your display name and listing details); service providers who help us operate the platform (hosting, analytics, customer support), subject to data processing agreements; law enforcement or regulatory authorities where required by law; and any successor entity in the event of a merger, acquisition, or sale of assets.
4. Data Retention
We retain your personal data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (e.g. financial records, which we retain for 6 years). Message data may be retained for up to 12 months after account deletion for safety and dispute resolution purposes.
5. Your Rights
Under UK GDPR, you have the following rights: the right to access your personal data; the right to rectify inaccurate data; the right to erasure ('right to be forgotten'); the right to restrict processing; the right to data portability; the right to object to processing based on legitimate interests; and the right to withdraw consent at any time. To exercise any of these rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
6. Cookies and Tracking
Our website uses cookies and similar technologies to improve your experience and analyse usage. Essential cookies are required for the site to function. Analytics cookies help us understand how visitors use the site. You can control non-essential cookies through our cookie consent banner. For more information, see our Cookie Policy.
7. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted data transmission (HTTPS), access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
8. Children
UniTill is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [email protected] and we will delete it promptly.
9. International Transfers
Your data is stored and processed in the United Kingdom. If we transfer data outside the UK, we will ensure appropriate safeguards are in place in accordance with UK GDPR requirements.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email. The date at the top of this page indicates when the policy was last updated.
11. Contact Us
For any questions or concerns about this Privacy Policy or how we handle your data, please contact us at [email protected].
Data controller: UniTill Ltd · [email protected]