DEAL DESK ("we", "us") is the data controller for personal data processed through Deal Desk. Contact: or DPO/CONTACT EMAIL.
| Category | Examples |
|---|---|
| Account data | Name, email, password (hashed) or sign-in provider ID |
| Profile data | What you're buying/selling, business type, contact details |
| Listing content | Descriptions, asking price, uploaded images/documents |
| Verification documents | Proof of ownership, incorporation documents, ID (where collected) |
| Payment data | Handled by our payment processor — we do not store full card details |
| Usage data | Pages visited, device/browser type, IP address |
| Cookies | See our Cookie Policy |
To provide the Platform and fulfil a contract with you (Art. 6(1)(b) UK GDPR); to comply with legal obligations such as fraud prevention (Art. 6(1)(c)); and, for optional analytics/marketing, with your consent (Art. 6(1)(a)) or our legitimate interests (Art. 6(1)(f)) where appropriate.
Where we ask Sellers to upload documents proving ownership of an asset, this is sensitive information. We STORAGE/ACCESS CONTROLS HERE — e.g. encrypted storage, access limited to verification staff, retention period, and have deletion policy.
Service providers who help us run the Platform (e.g. hosting, authentication, payment processing, cloud storage), each bound by their own data processing agreement with us; law enforcement or regulators where legally required; and other users, limited to what you choose to include in a public listing or profile.
If any provider we use stores or processes data outside the UK/EEA, we rely on Standard Contractual Clauses / adequacy decisions / UK IDTA to protect it.
We keep personal data for as long as your account is active, plus appropriate retention periods afterward for legal/accounting purposes, unless you ask us to delete it sooner or unsubscribe, and we have no legal reason to retain it.
Under UK GDPR you have the right to access, correct, delete, or export your data, to object or restrict certain processing, and to withdraw consent where processing is based on consent. Contact us viaEMAIL to exercise these rights. You can also complain to the Information Commissioner's Office (ico.org.uk).
The Platform is not intended for anyone under 18.
We'll post updates here and change the "last updated" date above.
Link to more policy details: Data Deletion, Government-Requests, and Data Handling.