TRADER29 PRIVACY POLICY

Last updated: 25 May 2026

This Privacy Policy explains how Trader29 (“we”, “us”, “our”) collects, uses, stores, shares, and protects personal data when you use www.trader29.com and related Trader29 services (the “Service”).

This notice is intended to be clear and practical. It does not form part of the Terms & Conditions, but it should be read alongside them.

1) Who we are
Trader29 is operated by DWALTON29 LTD.

Operator: DWALTON29 LTD
Company number: 16548940
Location: United Kingdom
Contact: support@trader29.com

For most personal data processed through the Service, DWALTON29 LTD acts as the data controller.

2) Data we collect
We may collect and process the following categories of data.

a) Account and identity data
Email address
Username, username slug, display name, profile bio, store name, avatar, banner, background image, and profile preferences
Platform identifiers such as Xbox gamertag, PSN, Steam name, or other game/platform handles where provided
Account status, role, membership tier, onboarding progress, settings, and security-related account information

b) Marketplace, trade, and reputation data
Trade posts, item details, trade terms, caps/items/wishlist information, vendor notes, trade post images, trade post status, and trade post history
Trade rooms, trade messages, lock/complete/close status, courier/protected trade requests, and dispute information
Reviews, ratings, reputation signals, completed trade counts, badges, follows, watchlist/item radar activity, and public marketplace activity

c) Social and community data
Community posts, comments, replies, likes/reactions, attached trade posts/stores, images, platform tags, and moderation status
News interactions and community activity timestamps

d) Messages and notifications
Direct messages, trade room messages, message previews used in notifications, notification preferences, email delivery data, and read/unread state

Transactional emails may include account, trade, direct message, support, safety, subscription, or service updates. These are separate from marketing emails.

e) Support, safety, and moderation data
Support tickets, ticket messages, screenshots, uploaded attachments, bug reports, feature requests, reports about users/listings/trades, dispute evidence, admin notes, moderation decisions, account restrictions, ban records, and blacklist reports or entries

f) Block, mute, and safety preference data
Users you block or mute, the categories you block them for (trades, DMs, social), safety settings, reasons you voluntarily provide, and related timestamps

g) Payment and subscription data
Trader29 uses Stripe or another payment provider to process payments. We do not store full card details.

We may receive and store payment/subscription metadata such as billing email, customer ID, subscription ID, payment status, price/product ID, subscription tier, renewal/cancellation status, invoices/receipts, and payment event metadata.

h) Technical and usage data
IP address, device/browser information, approximate region inferred from technical data, pages viewed, actions taken, referral/source data, error logs, authentication/session data, cookies, local storage identifiers, analytics events, and anti-abuse/security logs

i) Optional data
Any information you voluntarily add to your account, profile, trade posts, messages, posts, support tickets, reports, or attachments.

Please avoid uploading personal information about yourself or other people unless it is necessary for support, safety, or dispute handling.

3) How we collect data
We collect data when you:
Create or update an account
Sign in, complete onboarding, or change settings
Post trade posts, update trade posts, or use marketplace tools
Start or take part in trades, DMs, courier/protected trades, reviews, follows, watchlists, item radar, or community features
Submit support tickets, reports, screenshots, or attachments
Subscribe to Trader29+, manage billing, or interact with payment flows
Browse the site, where technical data may be collected through hosting, logs, cookies, analytics, and security tools

We may also receive limited data from service providers, such as payment status from Stripe, email delivery data from email providers, and authentication data from Supabase.

4) How and why we use data
We use personal data to:
Provide, operate, secure, and maintain Trader29
Create accounts and authenticate users
Enable trade posts, messaging, trade rooms, reviews, social posts, watchlists, item radar, support tickets, and safety tools
Process subscriptions, billing status, membership features, and payment-related support
Send transactional emails, alerts, notifications, verification emails, support replies, and safety messages
Display public profile, trade post, store, reputation, badge, and activity information where relevant
Moderate content, enforce rules, prevent scams, investigate reports, handle disputes, maintain blacklist/safety records, and protect users
Detect bugs, abuse, spam, fraud, suspicious activity, or security issues
Improve features, performance, usability, and user experience
Comply with legal, tax, accounting, regulatory, and law-enforcement obligations where applicable

5) Lawful bases under UK GDPR
Depending on the context, we rely on the following lawful bases:

Contract: to provide the Service, accounts, marketplace tools, messages, support, subscriptions, and related features.
Legitimate interests: to keep the platform safe, prevent abuse/scams, moderate content, maintain reputation systems, improve the Service, troubleshoot bugs, send relevant service notifications, and operate a trusted marketplace.
Consent: where we rely on optional consent, such as certain non-essential cookies, marketing communications, or optional preferences if introduced.
Legal obligation: where we need to comply with law, tax/accounting rules, court orders, regulatory requirements, or lawful requests.

Where processing is based on legitimate interests, we balance our interests against users’ rights and expectations.

6) Public and shared information
Some information is visible to other users or the public, including usernames, profile/store information, public trade posts, public community posts, comments, reviews, badges, reputation information, and certain marketplace activity.

Messages, support tickets, safety records, reports, moderation notes, and block/mute settings are not intended to be public, but may be reviewed by authorised Trader29 admins or service providers where needed to operate the Service, resolve issues, enforce rules, or protect users.

7) Who we share data with
We do not sell personal data.

We may share data with:
Service providers that help run Trader29, such as Supabase, Vercel, Stripe, Resend or other email providers, Cloudinary or media/storage providers, analytics providers, logging/error monitoring providers, and similar infrastructure services
Other users, where information is part of public profiles, trade posts, reviews, social posts, trade context, or community interactions
Payment providers, where needed to process subscriptions, billing, refunds, disputes, or fraud prevention
Professional advisers, accountants, legal advisers, insurers, or auditors where needed
Authorities, regulators, courts, law enforcement, or other parties where required by law or necessary to protect users, rights, safety, or the Service
A future buyer, successor, or reorganised business if Trader29 or DWALTON29 LTD is sold, merged, restructured, or transferred, subject to appropriate safeguards

8) International transfers
Some providers may process data outside the United Kingdom. Where this happens, we rely on appropriate safeguards where required, such as adequacy regulations, standard contractual clauses, data processing agreements, or equivalent protections.

9) Cookies, local storage, and analytics
Trader29 may use cookies, local storage, and similar technologies for:
Authentication and session management
Security, fraud prevention, and abuse detection
Remembering preferences and UI settings
Analytics, performance measurement, error logging, and product improvement

Essential cookies and storage are needed for the Service to work. Non-essential analytics or marketing cookies, where used, should be handled in line with applicable consent requirements.

You can control cookies through your browser settings. More detail is available in the Trader29 Cookie Policy.

10) Data retention
We keep personal data only for as long as reasonably necessary for the purposes described in this policy.

Typical retention criteria include:
Account data: kept while your account is active and for a reasonable period afterwards where needed for safety, support, accounting, or legal reasons.
Trade posts, trade rooms, messages, reviews, reputation and marketplace history: kept while needed to operate the marketplace, preserve trust/reputation history, prevent scams, resolve disputes, and maintain platform integrity.
Support tickets, reports, screenshots, attachments, moderation notes and safety records: kept as long as needed for support, safety, dispute handling, fraud prevention, moderation, legal, or legitimate business reasons.
Payment and subscription records: kept as required for billing, accounting, tax, fraud prevention, chargeback handling, and legal obligations.
Technical logs and analytics: kept for periods appropriate to security, debugging, analytics, and operational needs.
Deleted accounts: personal data may be deleted or anonymised where possible, but some records may remain where necessary for legal, accounting, safety, moderation, anti-fraud, dispute, blacklist, or marketplace integrity reasons.

11) Your rights
Under UK data protection law, you may have the right to:
Access your personal data
Correct inaccurate data
Request deletion of personal data
Restrict or object to certain processing
Request data portability where applicable
Withdraw consent where processing relies on consent
Complain about how your data is used

To exercise your rights, contact support@trader29.com with enough information for us to identify your account and understand your request.

We may need to verify your identity before acting on a request. Some rights are subject to legal limits, especially where data is needed for safety, fraud prevention, dispute handling, legal claims, accounting, or platform integrity.

12) Complaints
If you have a concern about how we use your personal data, contact support@trader29.com with “Data Protection Complaint” in the subject.

You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.

13) Security
We use reasonable technical and organisational safeguards to protect data, including authentication controls, role-based access controls, Supabase Row Level Security where applicable, HTTPS, moderation controls, admin access controls, and security monitoring.

No system is perfectly secure. You are responsible for keeping your login credentials safe and reporting suspected account compromise promptly.

14) Children’s privacy
Trader29 is not directed at children under 18. You must be at least 18 to use the Service.

If you believe a child has provided personal data, contact us and we will take appropriate action.

15) Third-party links and platforms
Trader29 may include links to third-party services, game platforms, payment providers, social platforms, or external community pages. We are not responsible for the privacy practices of those third parties.

16) Changes to this policy
We may update this Privacy Policy from time to time. If changes are significant, we will make reasonable efforts to notify users through the Service or by other appropriate means.

17) Contact
Questions, rights requests, or data protection concerns:
support@trader29.com