Privacy policy

Who we are

Spanner Lane is run by Ruhel, a sole trader trading as Spanner Lane, who decides how your data is used (the “controller”). Email support@spannerlane.co.uk about anything in this policy.

The monthly email

If you sign up, we keep your email address, when you signed up and confirmed, which page you used and the wording you agreed to. Nothing is kept until you click the link in the confirmation email. Our reason is your consent, and you can withdraw it with the unsubscribe link in any email.

To stop automated sign-ups, the form uses Cloudflare Turnstile, which checks your browser and IP address. We limit sign-ups per IP address using a scrambled form of it that can’t be turned back into the address.

Your account

When you have an account, we keep:

• your name and email address;
• your Google or Facebook account ID, if you sign in with one (we never receive your password or store their access tokens);
• your date of birth, once you add it, to check you're 16 or over before your first order and 18 or over before you sell;
• your sign-in sessions, with the IP address and browser they came from, so you can stay signed in and we can spot misuse;
• a record of each time you accept our terms or this policy: the version, the time, your IP address and browser.

Our reason is the contract with you: we can’t give you an account without these. The acceptance records are kept as proof of what you agreed to, which is in both our interests.

If you sell

We keep your shop’s trading name and the details on your invitation. Payouts go through Stripe, which checks your identity and holds your bank details under its own privacy policy. We receive your Stripe account ID and whether your account can take payments and receive payouts, never your bank details or ID documents.

Cookies

One cookie, which keeps you signed in. It’s essential, so it doesn’t need your consent. We use no advertising or tracking cookies. Our visitor counts come from Cloudflare Web Analytics, which doesn’t use cookies or identify you.

Who helps us run the site

These companies process data for us, only on our instructions and under a contract that requires them to protect it:

• Cloudflare: delivering and protecting the site, the bot check, visitor counts, forwarding email to us, and storing backups (in the EU).
• Render: our servers and database, in Frankfurt.
• Resend: sending our emails (USA).
• Sentry: error reports, in the EU. They contain an account number at most, never your name or email.

Stripe (for sellers), and Google or Facebook (if you choose to sign in with them), handle your data under their own privacy policies. We never sell your data.

Where data goes outside the UK, it’s protected by UK adequacy regulations or the standard contract terms approved under UK law.

How long we keep it

Your rights

You can ask for a copy of your data, ask us to correct it or delete it, object to or limit how we use it, and take it elsewhere. Email support@spannerlane.co.uk from the address on your account; if you write from another address, we’ll confirm it’s you first. We reply within one month.

Deleting an account removes your details, but records we must keep by law (such as orders, for tax) are kept for the period above. If you signed in with Facebook, see Facebook data deletion.

If you’re unhappy with how we’ve handled your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint.

Age

Accounts are for people aged 16 or over, and selling for 18 or over. We don’t knowingly collect data from anyone younger.

Changes

When the marketplace opens, with orders, listings and messages, this policy will be updated before any of that starts. If you have an account or get the monthly email, we’ll email you 30 days before a change applies.