Privacy Policy
Last updated: May 2026
1. Introduction
Welcome to TomsSwapShop (“we”, “our”, “us”). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website. We comply with the UK GDPR and Data Protection Act 2018.
2. Who We Are
TomsSwapShop is an online platform that allows users to trade football stickers and cards.
Data Controller: TomsSwapShop
Contact: Use contact us form
3. What Data We Collect
We may collect the following types of personal data:
a) Account Information
- Name or username
- Email address
- Password (securely stored/encrypted)
- Postal Address (only provided to a matched user for sending cards/stickers too)
b) Profile & Usage Data
- Stickers/cards you list (have/need)
- Messages sent between users
- Usage activity within the platform
c) Technical Data
- IP address
- Browser type and device information
- Cookies and tracking data
d) Parental Consent Data (for under 13 users)
- Parent/guardian email address
- Consent confirmation timestamp
- Verification status
4. How We Use Your Data
We use your personal data to:
- Create and manage user accounts
- Enable sticker trading and matching
- Facilitate communication between users
- Ensure platform safety and moderation
- Verify parental consent (where required)
- Improve the website and user experience
- Comply with legal obligations
5. Legal Basis for Processing
We rely on the following legal bases under GDPR:
- Contract: To provide the service you signed up for
- Legitimate Interests: To improve the platform and ensure safety
-
Consent: For:
- Children under 13 (parental consent)
- Optional communications (if added later)
6. Children’s Data & Parental Consent
We take children’s privacy seriously.
Users aged 13–17:
- May use the platform with parental awareness
Users under 13:
- Must provide a parent/guardian email address
- We send a consent request email with a verification link
- The account remains inactive until consent is confirmed
Parent/Guardian Rights:
Parents or guardians can:
- Request access to their child’s data
- Request deletion of the child’s account
- Withdraw consent at any time
To do so, contact us.
7. Sharing Your Data
We do not sell your personal data.
We may share data with:
- Service providers (e.g. hosting, email services)
- Legal authorities if required by law
We ensure all third parties handle your data securely and in line with GDPR.
8. Data Retention
We keep your data only as long as necessary:
- Active accounts → retained while in use
- Inactive accounts → may be deleted after a reasonable period
- Parental consent data → retained for compliance purposes
You can request deletion at any time.
9. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion (“right to be forgotten”)
- Restrict or object to processing
- Request data portability
- Withdraw consent (where applicable)
To exercise any of these rights, contact us.
10. Cookies
We use cookies to:
- Keep you logged in
- Improve site functionality
- Understand how users interact with the site
You can control cookies via your browser settings.
11. Data Security
We take appropriate measures to protect your data, including:
- Encryption of sensitive data
- Secure servers and hosting
- Access controls and monitoring
However, no system is 100% secure, and we cannot guarantee absolute security.
12. International Transfers
If we transfer data outside the UK/EEA, we ensure appropriate safeguards are in place, such as:
- Standard contractual clauses
- Trusted service providers
13. Changes to This Policy
We may update this Privacy Policy from time to time.
Any changes will be posted here with an updated “Last updated” date.
14. Contact Us
If you have questions or concerns about this policy, then please use the contact us form to get in touch.
Website: www.tomsswapshop.com
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) in the UK.