Privacy Policy for Haggle & Swap

Last updated: May 28, 2026

This Privacy Notice for Haggle & Swap ('we', 'us', or 'our'), describes how and why we might access, collect, store, use, and/or share ('process') your personal information when you use our services ('Services'), including when you visit https://www.haggleandswap.com or engage with our platform.

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at contact@haggleandswap.com.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us: We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us, or participate in platform activities.

• Names and usernames
• Email addresses
• Passwords
• Swap item details and images

Payment Data: We do not store or process your full credit card information. All payment processing and card data vaulting is securely handled by our payment gateway, Worldpay. We only collect and store a secure Payment Instrument Token (ID) generated by Worldpay to facilitate automated recurring billing for your active subscriptions. You may find Worldpay's privacy notice here: https://privacy.worldpay.com/policies/en.

Application & Infrastructure Data: * Geolocation Information: We may request access to track location-based information to provide certain location-based services (e.g., matching nearby swap items).

• Log and Usage Data: Our hosting infrastructure automatically collects service-related, diagnostic, and performance information when you access our Services. This may include your IP address, browser type, and timestamp data required to maintain the security and routing operations of our platform.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with the law. Specifically, we process your data to:

• Facilitate account creation, authentication, and platform matching.
• Manage user accounts and process automated subscription renewals via secure payment tokens.
• Deliver and facilitate the delivery of services to the user.
• Save or protect an individual's vital interest, such as preventing harm or fraud.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

Under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, we rely on the following valid legal bases to process your personal information:

• Consent: You have given us permission to use your personal information for a specific purpose (e.g., location tracking). You can withdraw your consent at any time.
• Performance of a Contract: Processing your data (and utilizing payment tokens) is necessary to fulfill our contractual obligations to provide you with your chosen subscription tier.
• Legal Obligations: Where we believe it is necessary for compliance with our legal obligations, such as cooperating with law enforcement or regulatory agencies.
• Legitimate Interests: When processing is necessary for our legitimate business interests, provided those interests do not outweigh your fundamental rights and freedoms.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We may need to share your personal information in the following situations:

• Service Providers & Third-Party Vendors: We share data with third-party vendors that perform services for us, including Worldpay (for secure payment processing and tokenization) and our cloud hosting providers (for platform routing and edge network security).
• Google Maps Platform APIs: We may share your information with certain Google Maps Platform APIs to provide location-based matching. We cache your location data temporarily to improve performance.
• Business Transfers: We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of our business.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We may use cookies and similar tracking technologies (like web beacons and pixels) to gather information when you interact with our Services. These technologies help us maintain the security of our platform, save your preferences, and assist with basic site functions (such as maintaining your active login session). Specific information about how you can refuse certain cookies is set out in our Cookie Notice.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law.

• Account & Token Data: User account information and Worldpay Payment Tokens are retained for the active duration of your subscription, plus a period of up to 7 years following account closure to comply with UK tax, audit, and legal obligations.
• When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.

8. WHAT ARE YOUR PRIVACY RIGHTS?

Under the UK GDPR, you have the right to:

1. Request access and obtain a copy of your personal information.
2. Request rectification or erasure of your data.
3. Restrict the processing of your personal information.
4. Data portability (if applicable).

To exercise these rights, please contact us at the email address provided below.

9. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at contact@haggleandswap.com.