Privacy Notice

1. Introduction

This Privacy Notice applies to all Users of our online platform whether you're browsing listings, posting advertisements, or contacting other Users. Our goal is to be transparent about how we handle your data and to give you control over your personal information.

When you use our Service, we may collect personal information that you provide directly:

Categories of Personal Information Collected:

• Identity Data: Name, user name.
• Contact Data: Email address, phone number, correspondence address
• Content Data: Information you submit when creating listings or communicating with other Users which may also contain personal information.
• Financial Data: For example, if you make a purchase or complete a transaction, we may also collect payment details though through third-party payment providers and the any credit card details are not stored on our servers.
• Transaction Data: Details about payments to and from you and other transaction details for the provision of Services.
• Technical Data: IP address, login data, browser type and version, time zone setting, location, operating system and device information.
• Profile Data: Username, password, searches, favourites, ratings, preferences, feedback, and survey responses.
• Usage Data: Information about how you use our website and Services.
• Marketing & Communications Data: Your preferences in receiving marketing from us and our third parties, and your communication preferences.

Personal data may be provided to us directly by you for example through forms or indirectly for example via your device or third-party services you interact with.

We will process your personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We rely on the following legal bases:

• Consent – for sending marketing communications or using non-essential cookies;
• Contractual necessity – when processing is necessary to provide the Service or to fulfil a User agreement;
• Legitimate interests – such as improving our platform, preventing fraud, and ensuring the safety and security of our Users;
• Legal obligations – where we are required to retain or disclose data to comply with applicable laws or respond to lawful requests.

The table below outlines why we process personal information, the categories of personal data involved, and the lawful basis for each type of processing.

Where you are a User:

We may also process your information to third party partners so that they can publish, engineer and or advertise your listings and their content on their websites or in their applications, services and tools. If we transfer personal information along with the content of your listings to third party providers, this will be solely on the basis of an agreement limiting use by the third-party provider of such personal information to processing necessary to fulfil their contract with us and obligating the third party provider to take security measures with regard to such data. Third party providers are not permitted to sell, lease or in any other way transfer the personal information included in your listings to third parties.

Where you are a Website Visitor or App User:

This is where you are a website visitor on our website or you have logged into our app regardless as to whether you will be taking up or using our Services.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us. Please contact us if you wish to update your personal data.

We use cookies and similar technologies to recognize your browser or device, keep you signed in, remember your preferences and analyze site usage. These technologies also help us serve relevant ads and measure the effectiveness of marketing campaigns. You can manage or disable cookies through your browser settings. For more details, see our User Cookie Notice.

If you do not wish to participate in our advertising personalization programs, you can opt-out by following the directions provided below, or through the programs described in our User Cookie Notice. The effect of an opt-out will be to stop personalized advertising, but it will still allow the collection of personal information as otherwise described in this privacy notice. We do not allow third parties to track or collect your personal information on our sites for their own advertising purposes, without your consent.

If you do not wish to receive marketing or change your communication preferences from us, you can unsubscribe via the My Details page on web or My Gumtree on mobile app or contact us as described in the Contact Us section below. To change your preferences for push notifications, search alerts, new messages and Gumtree alerts this can be done on your Gumtree account, Gumtree app notifications or via your phone settings for app.

If you request that we stop processing some or all of your personal information or you withdraw (where applicable) your consent for our use or disclosure of your personal information for purposes set out in this privacy notice, we might not be able to provide you all of the Services and customer support offered to our Users and authorized under this privacy notice and our Terms of Use.

We do not sell your personal data. However, we may share your information with trusted third parties who help us deliver our Service. This includes cloud hosting providers, payment processors, courier services, customer support platforms, and analytics services. These third parties are required to handle your information in accordance with applicable data protection laws and only for the purposes we specify.

In certain cases, we may disclose information if required by law, court order, or other legal processes, or if we believe such disclosure is necessary to protect our rights or the safety of our Users or others. We may share your personal data in the event of company restructuring or sale of the business where your personal data will be used for the same purpose.

If your personal information is transferred outside of the United Kingdom, European Economic Area, or other countries without adequate data protection laws, we will ensure that such transfers are carried out in accordance with applicable legal requirements of the UK GDPR requirements such as Standard Contractual Clauses (SCCs) or other approved transfer mechanisms that offer adequate protection for your information.

If you are located outside the country where our servers are located, please note that your information may be transferred to and processed in countries that may not provide the same level of data protection. In such cases, we ensure that appropriate safeguards, such as SCCs or other legal mechanisms, are in place.

We are committed to protecting your personal data and have implemented appropriate technical and organizational measures to prevent unauthorized access, disclosure, alteration, or destruction. These include secure servers, encryption protocols, access controls, and regular security reviews. However, no online service can guarantee complete security, so we encourage you to take care in protecting your login credentials and account.

10. Data Retention and Deletion

We retain your personal information only for as long as is necessary to fulfil the purposes outlined in this Privacy Notice including providing the Service, complying with our legal obligations, resolving disputes and enforcing our agreements.

Account-related data is typically retained while your account remains active. Transactional records, communication logs, and other legally relevant data may be retained for longer periods where required by applicable law, such as tax, regulatory or anti-fraud obligations.

You have the right to request the deletion of your personal data, ask us for copies of your personal information or rectify your records. These can be requested by using the Contact Us section. Upon receiving a verified request, we will action via our active systems unless we are required or permitted to retain or refuse under applicable law.

Please note that in some cases, certain information may be retained in backup archives for a limited time, or as necessary for legitimate business interests or legal compliance. Where deletion is not possible (e.g., where data must be retained for financial reporting or fraud prevention), we will securely store the information and isolate it from further use.

11. Data Subject Rights

Under certain circumstances, you have rights under data protection laws. Not all rights are absolute and depending on where you are located, not all rights are given to you.

You can:

• Request access to your personal data: this means requesting information held about you by Gumtree.
• Request correction of your personal data: this means fixing inaccurate information about you.
• Request erasure of your personal data: this means asking to delete information about you.
• Object to processing of your personal data: this means refusing use of your data for specific purposes.
• Request restriction of processing your personal information: this means limiting how your data is used.
• Request transfer of your personal information ("data portability"):this means moving your data elsewhere securely.
• Right to withdraw consent: this means you can stop data use anytime where consent is relied upon.
• Automated decision making: This is where decisions are made about you by automated means. We do not carry out automated decision making which results in legal or similarly significant effect.

You won't pay a fee to access your data or exercise rights, unless requests are unfounded, repetitive or excessive of which we may also refuse your request. We may request ID to confirm your identity for security. We aim to respond within one month but may take longer for complex or multiple requests. If you wish to make a request you may use the Contact Us form.

12. Contact Us

If you have questions, concerns, or complaints about this Privacy Notice or how we handle your data, you can contact us at:

Email: dpo@gumtree.com

Your right to file complaints with a data protection supervisory authority remains unaffected. If you believe we have not handled your complaint appropriately you can send your complaint to the Information Commissioner’s Office, details of which can be found at www.ico.org.uk

13. Changes to This Notice

We may update this Privacy Notice from time to time to reflect changes in our practices or legal requirements. If we make material changes, we will notify you through our Service or by email. Your continued use of the Service after the changes become effective constitutes your acceptance of the revised notice.