Privacy Policy for Aquadiction
1. Overview
This Privacy Policy explains how we collect, use, and protect your personal information. We take your privacy seriously and comply with all relevant data protection laws, including the UK GDPR.
2. Personal Accounts (Registered Users)
If you create an account on our website, we collect the following information:
- Email address
- Chosen username
- Country
- Password (securely encrypted — we never store it in plain text)
- If using Google login: only your email address and country
We use this information to allow you to manage your profile, track purchases, and interact with shops.
3. Guest Checkout (No Account)
If you place an order without creating an account, we collect the following to fulfil your order:
- Full name
- Email address
- Phone number
- Shipping address
This information is passed securely to the seller for the sole purpose of fulfilling your order.
4. Shop Accounts
If you upgrade to a shop account, we collect and store the following details:
- Shop name
- Shop type (personal or business)
- Contact phone number
- Shop address
- Preferred currency
- Optional VAT number and tax rate
- Merchant ID from Stripe or PayPal
We do not share this information with third parties. Your shop’s email address is shared with buyers only after a successful order. Your shop address is shown to buyers only if you’ve enabled local pickup.
5. Newsletter Subscribers
If you sign up for our newsletter, we only store your email address. We use it to send occasional updates or promotions. You can unsubscribe at any time via the link in our emails. We do not share or sell newsletter data to third parties.
6. Payment Providers
We integrate with PayPal and Stripe to process payments and manage payouts. If you connect your PayPal or Stripe account:
- We store only your Merchant ID (e.g. PayPal Payer ID)
- This is used solely to link your payment account for order processing and disbursement
- All transmissions are encrypted using HTTPS
- You can disconnect your account at any time
For details, see:
PayPal Privacy Policy
Stripe Privacy Policy
7. Analytics and Advertising
We use Google Analytics to help us understand how visitors use our site. Some pages may also use Google AdSense to display relevant ads. These services may place cookies on your device and collect browsing data.
To learn more about how Google uses your data, visit: https://policies.google.com/technologies/partner-sites.
8. Sharing Your Data
We do not sell or rent your personal data. We may share your data with:
- Service providers (e.g. web hosting, email delivery, payment processors)
- Sellers, in the case of orders, for fulfilment purposes only
- Authorities, if legally required
All third parties are bound to maintain data confidentiality and comply with the law.
9. Security Measures
We use SSL encryption, secure data centres, and access control to protect your data. Your passwords are stored securely and never visible to anyone.
10. Your Rights
Under GDPR, you have the right to:
- Access, correct, or delete your personal data
- Request a copy of your data (data portability)
- Withdraw consent where processing is based on it
- Object to or restrict certain uses of your data
- Complain to the ICO or relevant authority
To make a request, please contact us.
11. Changes to This Policy
We may update this Privacy Policy from time to time. You’ll be notified of major changes through this page. Continued use of our site means you accept the updated policy.
12. Contact Us
Questions or concerns? Please get in touch.
13. Login Activity & IP Address Logging
To protect your account and detect potential fraud or misuse, we automatically log the IP address and browser information (user-agent) each time you sign in.
What we collect:
- IP address
- Browser and device type (user-agent)
- Timestamp of login
Why we collect it:
- To detect unusual login patterns
- To monitor suspicious activity
- To assist with security audits and user account protection
How long we keep it:
This data is retained for up to 12 months, unless required longer for security or legal reasons.
Legal basis:
We process this data under our legitimate interest in ensuring the security and integrity of our services.
Last updated: 17 July 2025