DEN — Independent Furniture Marketplace

1. Who we are

DEN Marketplace is an independent furniture marketplace operating in the United Kingdom. We connect independent furniture makers (vendors) with buyers. References to "DEN", "we", "us" or "our" in this policy refer to DEN Marketplace Ltd.

For any privacy-related queries, contact us at: help@den.co.uk

2. What data we collect

We collect the following personal data:

Account information

Name, email address, and password (stored as a secure hash) when you create an account.

Order information

Delivery address, order history, and transaction references when you place an order.

Vendor information

Store name, description, location, and business details when you apply to sell on DEN.

Payment information

We do not store card numbers or bank details. All payment data is handled securely by Stripe. We only store a payment reference ID.

Communications

Emails you send to us, and transactional emails we send to you (order confirmations, vendor notifications).

3. How we use your data

We use your personal data to:

Create and manage your account
Process and fulfil orders
Send transactional emails (order confirmations, shipping updates)
Process payments and payouts via Stripe
Communicate with you about your account or orders
Comply with our legal obligations
Prevent fraud and maintain platform security

4. Legal basis for processing

Under UK GDPR, we process your data on the following legal bases:

Contract — processing necessary to fulfil orders and manage your account
Legal obligation — retaining financial records as required by law
Legitimate interests — fraud prevention and platform security
Consent — marketing communications (where applicable)

5. Who we share your data with

Stripe

Our payment processor. Stripe handles all card and bank data securely. See Stripe's privacy policy at stripe.com/privacy.

Vendors

When you place an order, the relevant vendor receives your name and delivery address to fulfil it.

Resend

Our email delivery provider. Used to send transactional emails only.

Railway and Vercel

Our hosting and database providers. Data is stored on secure servers in the EU/UK.

We do not sell your personal data to third parties.

6. How long we keep your data

Account data — until you request deletion
Order records — 7 years (legal requirement for financial records)
Communications — 2 years
Inactive accounts — 3 years of inactivity

7. Your rights

Under UK GDPR you have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion of your data
Portability — receive your data in a portable format
Objection — object to processing based on legitimate interests
Restriction — request we limit processing of your data

To exercise any of these rights, email help@den.co.uk. We will respond within 30 days.

8. Cookies

DEN uses only essential cookies required for the site to function — specifically for authentication (keeping you logged in). We do not use advertising or tracking cookies.

9. Security

We take security seriously. Passwords are hashed using bcrypt. All data is transmitted over HTTPS. Payment data is handled exclusively by Stripe and never passes through our servers.

10. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

11. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email. Continued use of DEN after changes constitutes acceptance of the updated policy.

Privacy Policy