PRIVACY POLICY
LAST UPDATED 25 OCTOBER 2026- We collect what we need to run a wheel marketplace safely, and nothing for advertising.
- We never sell your data, and we don't use advertising or tracking cookies.
- A few trusted companies process data for us (hosting, email, text messages), only to provide our service.
- You can ask to see, correct or delete your data at any time by emailing privacy@lipd.co.uk.
01Who we are
lipd.co.uk is run by Petru Marin, trading as Lipd (“we”, “us”). We are the data controller for the personal data described in this policy, which means we decide how and why it's used and are responsible for looking after it under UK data protection law (the UK GDPR and the Data Protection Act 2018).
Email: privacy@lipd.co.uk.
02What we collect and why
Lipd is opening in stages. Right now only the waitlist is open. When the full site opens, the account and marketplace sections below will apply too. Under UK GDPR we need a lawful reason (a “lawful basis”) for each use, which we list alongside.
The waitlist (open now)
| What | Why we use it | Lawful basis |
|---|---|---|
| Your email address | To send you one email when the first auctions go live. | Consent |
| The car you drive, if you tell us | To understand which cars our first members drive, so we can prioritise relevant fitment content. | Consent |
| The date you joined | To keep a record of your consent. | Legal obligation |
You can withdraw consent at any time by emailing us, and we'll remove you from the list.
Your account (when the site opens)
| What | Why we use it | Lawful basis |
|---|---|---|
| Username, email address and password | To create and secure your account. Passwords are stored scrambled (hashed) and we can never see them. | Contract |
| UK mobile number | To verify you by text message before you bid or sell. Verified accounts keep scammers and shill bidders out of auctions. | Legitimate interests (preventing fraud) |
| The car you drive, if you tell us | To show you fitments and listings that suit your car first. | Consent |
| If you sign in with Google or Apple: your name and email from that account | To create your account without a separate password. | Contract |
Using the marketplace (when the site opens)
| What | Why we use it | Lawful basis |
|---|---|---|
| Your listings: wheel details, photos, price, town or area, delivery options | To publish your listing. Your username and town are shown publicly; your exact address is not. | Contract |
| Bids, offers and the items you watch | To run auctions and sales. Your bids appear publicly under your username. | Contract |
| Fitment posts: car details, photos and setup | To publish your post in the fitment gallery under your username. | Contract |
| Reports you make, and reports about you | To moderate the community and keep it safe. | Legitimate interests (safety) |
When payments open, we'll also process payment and payout details through a payment provider. We'll update this policy before that happens.
Security and running the site
| What | Why we use it | Lawful basis |
|---|---|---|
| IP address, browser type and sign-in times | To keep you signed in, spot suspicious sign-ins, limit repeated attempts and protect the site from attacks. | Legitimate interests (security) |
| Records of moderation decisions (such as suspensions) | To enforce our rules consistently and handle appeals. | Legitimate interests (safety) |
We don't use your data for automated decisions that have legal or similarly significant effects on you, and we don't build advertising profiles.
04Data outside the UK
Some providers above process data outside the UK. Transfers to the EU are covered by UK adequacy regulations. For transfers to the US or elsewhere, we rely on recognised safeguards such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Agreement/Addendum. Email us if you'd like more detail.
05How long we keep it
| Data | How long |
|---|---|
| Waitlist entries | Until 6 months after launch, or sooner if you ask us to remove you |
| Your account | While your account is open. We delete it within 30 days of you closing it, apart from the items below |
| Sign-in sessions | Expire after 30 days without use |
| Security and moderation records | Up to 2 years, so we can deal with repeat fraud or abuse |
| Transaction records (once payments open) | 6 years, as UK tax law requires |
| Database backups | Kept for 14 days, then overwritten |
07Your rights
Under UK GDPR you have the right to:
- see the personal data we hold about you and get a copy
- have inaccurate data corrected
- have your data deleted
- restrict or object to how we use it, including anything based on legitimate interests
- receive your data in a portable format
- withdraw consent at any time, where we rely on consent
Email privacy@lipd.co.uk to use any of these. We'll reply within one month, and it's free. We may ask you to confirm your identity first.
08Keeping it safe
All traffic to lipd.co.uk is encrypted. Passwords are hashed, staff accounts must use two-factor authentication, staff only get the access their role needs, and every staff action is logged. No system is perfectly secure, but if a breach ever puts your data at risk, we'll tell you and the ICO as the law requires.
09Age
Lipd is for people aged 18 and over, because winning an auction is a binding agreement to buy. We don't knowingly collect data from children.
10Changes to this policy
We'll update this page as Lipd grows, for example when payments open. The date at the top shows when it last changed. If a change is significant, we'll tell you by email or on the site.
11Contact and complaints
Questions or requests: privacy@lipd.co.uk.
If you're unhappy with how we handle your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.