Privacy Policy

1. Introduction

ResellerVault is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

2. Data We Collect

When you subscribe:

• Full name
• Email address
• Payment information (processed by Stripe — we do not store card details)
• Billing address

When you use the Directory:

• Login activity and session data
• Search queries and filters used
• Supplier profiles viewed
• Reports submitted, including any evidence you upload
• Your email address, if you sign in with Google or request a login link

When you use our free tools and community features:

• Email address, if you join the newsletter, enter a giveaway, download a guide, use the thumbnail generator or reveal a supplier's contact details
• The description you type into the thumbnail generator
• Take The Lot listings: your name, email, WhatsApp number, region, photos and listing details. Your name, WhatsApp number and listing are shown publicly on the site and shared in our WhatsApp community

If you are a supplier:

• Contact name, business email, phone and WhatsApp numbers, website, social links and business details from your application or listing
• Publicly available business information (for example Companies House records and your public website) that we use to check and describe your business

Automatically collected:

• IP address
• Browser type and device information
• Cookies (see Section 7)

3. How We Use Your Data

We use your data to:

• Process and manage your subscription
• Provide access to the ResellerVault Directory
• Send service-related emails (receipts, renewal reminders, updates)
• Investigate supplier reports you submit
• Improve the Directory based on usage patterns
• Comply with legal obligations

4. Legal Basis for Processing

We process your data under the following lawful bases:

• Contract — to fulfil your subscription
• Legitimate interests — to improve our service and prevent fraud
• Legal obligation — to comply with UK law including tax obligations

5. Data Sharing

We do not sell your personal data to third parties.

We use the service providers below to run ResellerVault. Each one only receives the data it needs for the job listed.

Hosting and storage

• Railway (Railway Corporation, USA) — runs our website and server. Your requests pass through its servers, which are hosted in the United States
• Supabase (Supabase Inc., USA) — our database and file storage: member records, supplier listings, Take The Lot listings, uploaded photos and report evidence. Stored on Amazon Web Services in Ireland (EU)
• Google Sheets (Google LLC, USA) — a working copy of supplier applications and sign-up details for our team

Payments

• Stripe — for payment processing (see stripe.com/gb/privacy)

Email

• Brevo (Sendinblue SAS, France) — sends login, account, Take The Lot and newsletter emails
• Gmail (Google LLC, USA) — the inbox that receives supplier reports, applications and messages you send us

Sign-in, tools and website features

• Google Sign-In (Google LLC, USA) — if you choose to log in with Google, we receive your email address
• Google Gemini (Google LLC, USA) — creates images in the thumbnail generator from the description you enter
• Google Fonts, flagcdn.com and YouTube (privacy-enhanced mode) — load fonts, small images and the videos on our homepage, which shares your IP address with them
• WhatsApp (Meta Platforms) — our community where Take The Lot listings are shared

Analytics and advertising (only with your consent — see Section 7)

• Google Analytics and Google AdSense (Google LLC, USA)
• Microsoft Clarity (Microsoft Corporation, USA)
• Meta Pixel (Meta Platforms Ireland Ltd / Meta Platforms Inc., USA)

Checking and describing suppliers (business information about suppliers, not visitors)

• Companies House (UK government) — company records
• Serper — web search, to find and check supplier websites
• Anthropic (Anthropic PBC, USA) — AI that helps us summarise public information from supplier websites
• postcodes.io — turns supplier postcodes into town names

Legal

• HMRC — where required by law for tax purposes

International transfers: some of these providers are based in, or process data in, the United States. Where personal data leaves the UK we rely on UK adequacy regulations (including the UK–US Data Bridge for certified companies) or the ICO’s International Data Transfer Agreement / Addendum to standard contractual clauses, so your data stays protected to UK standards.

6. Data Retention

We retain your personal data for:

• Active subscribers — for the duration of your subscription
• Cancelled subscribers — for 6 years after cancellation (for tax and legal purposes)
• Payment records — for 6 years (HMRC requirement)

7. Cookies

ResellerVault uses cookies and similar technologies (including your browser’s local storage) in four categories. Only essential ones are used until you make a choice. You can accept, reject or change the optional categories at any time using the “Cookie Settings” button on any page, or via the banner shown on your first visit. Rejecting is as easy as accepting, and nothing optional is pre-selected.

Essential cookies — always on, required for the site to work. Used to:

• Keep you logged in (your member login is stored in your browser)
• Remember that you have already given your email to view supplier contact details (a cookie that lasts 60 days)
• Remember your filter preferences
• Remember your cookie consent choices

Analytics cookies — optional, help us understand how visitors use the site. We use:

• Google Analytics (Google LLC)
• Microsoft Clarity (Microsoft Corporation) — anonymised session behaviour, such as scrolling and clicks. Clarity is not loaded at all unless you allow analytics cookies

Google Analytics and AdSense use Google Consent Mode: if you decline, Google’s tags do not set or read cookies, but may still send basic, cookieless signals (such as that a page was viewed) to Google.

Advertising cookies — optional, used to show and measure ads and to make them more relevant to you. We use:

• Google AdSense (Google LLC) — may set cookies to serve ads, measure ad performance, and, where you have consented, personalise the ads you see based on your visits to this and other sites
• Meta (Facebook) Pixel — used to measure the effectiveness of our advertising and to show you relevant ads on Facebook/Instagram. The Pixel is not loaded at all unless you allow advertising cookies

These advertising partners may use cookies, web beacons, and similar technologies to collect information about your visits to this and other websites in order to provide advertisements about goods and services of interest to you. No advertising or personalisation cookies are set until you accept them via our cookie banner or preferences panel.

Affiliate cookies — optional. Some links on ResellerVault are affiliate links: if you click one and buy something, we may earn a commission, at no extra cost to you (see our Disclaimer). Allowing affiliate cookies lets partner programmes, such as the eBay Partner Network, use tracking on our pages to record that you came from us. No affiliate tracking scripts run on our pages unless you allow this category. When you click an affiliate link (for example our Whatnot links, which go through impact.com), the partner may set its own cookies on its website under its own privacy policy.

Embedded videos — homepage videos use YouTube’s privacy-enhanced mode (youtube-nocookie.com), so YouTube does not store information about you from them unless you play a video.

If you withdraw consent for a category, we delete that category’s cookies set on our domain and stop loading its scripts.

Opting out of personalised advertising:

• Use the “Cookie Settings” link on this site at any time to decline advertising cookies
• Manage or opt out of Google's use of advertising cookies at Google Ads Settings
• Learn more about how Google uses data from sites that use its services, and see Google's own privacy policy, at policies.google.com/technologies/partner-sites and policies.google.com/privacy
• Opt out of interest-based advertising across many providers at once via the Digital Advertising Alliance's youronlinechoices.eu (EU/UK) or aboutads.info (US)

8. Your Rights Under UK GDPR

You have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data (subject to legal retention requirements)
• Restriction — limit how we process your data
• Portability — receive your data in a portable format
• Object — object to processing based on legitimate interests

To exercise any of these rights, email: hello@resellervault.co.uk

We will respond within 30 days.

9. Complaints

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Phone: 0303 123 1113

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email. Continued use of ResellerVault after changes constitutes acceptance.

11. Contact