SilverSwap Privacy Policy

Last updated: 05/05/2026

1. Who We Are

SilverSwap ("we", "us", "our") is a UK-based online marketplace where users can list, trade, and purchase items valued in ounces of silver.

Data Controller: SilverSwap
Brightlingsea, Essex, United Kingdom
Email: support@silverswap.co.uk

2. The Data We Collect

Account & Identity Data

• Name
• Email address
• Username
• Password (securely hashed)

Transaction & Listing Data

• Items you list
• Listing descriptions and images
• Offers, swaps, and purchase history
• Payment confirmations
• Silver-denominated pricing

Payment Data (Processed by Stripe)

We do not store card numbers. Stripe processes:

• Card details
• Billing address
• Payment status
• Transaction IDs

Technical & Usage Data

• IP address
• Browser type and version
• Device information
• Pages visited
• Session duration
• Referrer URLs

Cookies & Tracking

• Essential session cookies
• Analytics cookies (if enabled)

3. How We Collect Your Data

We collect data through:

• Account registration
• Listing creation
• Payment processing via Stripe
• Cookies and analytics scripts
• Server logs
• Direct communication with us

4. Why We Use Your Data (Lawful Basis)

Purpose	Lawful Basis
To operate your SilverSwap account	Contract
To process payments via Stripe	Contract
To maintain platform security and prevent fraud	Legitimate Interests
To send essential service emails (e.g. payment confirmations, listing updates)	Contract
To improve SilverSwap and analyse usage	Legitimate Interests
To comply with legal obligations (e.g. tax, accounting, anti-fraud)	Legal Obligation

5. Who We Share Your Data With

Stripe (Payment Processor)

Used to securely process payments. We do not store card details.

DigitalOcean (Hosting Provider)

SilverSwap is hosted on DigitalOcean servers located in the UK/EU. DigitalOcean may process:

• Server logs
• IP addresses
• Error logs
• Stored listing images and account data (if applicable)

Email Delivery Provider

Used to send account and transaction emails.

Analytics Provider (if enabled)

May process anonymised usage data.

We never sell your data.

6. International Transfers

If any of our service providers transfer data outside the UK/EU, we ensure appropriate safeguards are in place, such as:

• UK Addendum to EU Standard Contractual Clauses
• Adequacy decisions
• Contractual safeguards

7. Data Retention

• Account data: kept until you delete your account
• Transaction data: kept for 6 years (legal requirement for accounting)
• Analytics data: typically 12–26 months
• Server logs: 30–90 days

8. How We Protect Your Data

We use a combination of technical and organisational measures:

• Encrypted HTTPS connections
• Hashed passwords
• Secure DigitalOcean server configuration
• Access controls
• Regular security updates
• Stripe PCI-compliant payment processing

9. Your Rights Under UK GDPR

You have the right to:

• Access your data
• Correct inaccurate data
• Delete your data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent (where applicable)

To exercise any of these rights, email us at: support@silverswap.co.uk

10. Cookies

Essential Cookies

Required for login, security, and core functionality.

Analytics Cookies

Used only with your consent (if applicable).

You can manage cookies through your browser settings.

11. Complaints

If you are unhappy with how we handle your data, please contact us first.

You also have the right to complain to the Information Commissioner's Office (ICO):
https://ico.org.uk
Telephone: 0303 123 1113

12. Changes to This Policy

We may update this policy from time to time. If changes are significant, we will notify you by email or via the app.