1. Who We Are

Secondhand Uniforms is a UK-based platform that allows parents and guardians to buy and sell secondhand school uniforms. To use our services as buyers or sellers users must register an account.

2. What Information We Collect

We collect the following types of information:

• Personal data such as your name and email address, collected and securely stored via Auth0

• Payment information, which is processed by Stripe

3. How We Collect Your Data

Data is collected when you:

• Register or log in to your account (via Auth0)

• Make a payment (via Stripe)

• Visit our website (through essential cookies)

• Subscribe to a school (if you opt in)

4. Legal Bases for Processing Your Data

Under the UK General Data Protection Regulation (UK GDPR), we process your data using these lawful bases:

• Contractual Necessity: To provide the core functions of the platform, such as account creation and order processing.

• Consent: For non-essential communications, such as newsletters. You can withdraw consent at any time.

• Legitimate Interests: To improve platform functionality and maintain security — always balanced against your rights.

5. Who We Share Your Data With

We only share your personal data with trusted third parties when necessary:

• Auth0 – handles secure login and stores your account data

• Stripe – processes payments securely

• Schools or PTAs – may be notified when an item linked to their school is sold, but they will not see any personal information about the buyer or seller

We do not sell or share your data with advertisers or external marketing services.

6. Where Your Data Is Stored

All personal data is stored via Auth0, and financial data is stored in Stripe in accordance with their privacy and security standards. Data may be transferred outside the UK, but always with appropriate safeguards (such as Standard Contractual Clauses) to ensure compliance with UK GDPR.

7. Data Retention

We do not directly retain user data. All personal information is held by Auth0, which controls retention in line with its privacy policy which can be found here:

Payment information is stored securely through Stripe in accordance to their privacy policy which can be found here:

You can request deletion of your data by deleting your account (see Section 9).

8. Cookies

We only use essential cookies, which are necessary for:

• Logging in and maintaining sessions

• Navigation and security

• Ensuring basic functionality of the platform

Managing Cookies

Because our cookies are essential to the operation of the platform, they cannot be turned off. If you block them in your browser, parts of the site may not function correctly.

9. Your Rights

Under UK data protection law, you have the right to:

• Access the personal data we hold about you

• Request correction or deletion of your information

• Withdraw consent for optional services (e.g. newsletters)

• Delete your account and associated data

To exercise any of these rights, please contact us using the details below.

10. Data Security

We are committed to keeping your data secure, using the following protections:

• Encryption in transit and at rest (via Auth0 and Stripe)

• Secure HTTPS website

• Platform authentication through Auth0

• PCI-compliant payment processing via Stripe

11. Changes to This Policy

We may update this policy from time to time. All updates will be posted on this page and dated accordingly. We encourage users to review it periodically.

12. Contact Us

If you have any questions or concerns about your privacy or your data, please contact:

WAM Software Ltd.

Data Protection Contact

Secondhand Uniforms

Email: [email protected]