Privacy Notice

Swoppd is a trading name used by a sole trader in the United Kingdom. The operator determines the purposes and means of most account, swap, Trust, Support and safety processing and is the data controller for that processing. Specialist providers may act as processors, independent controllers or both depending on the particular service and their legal obligations.

For privacy enquiries, or further information about the operator, including the sole trader's legal name and correspondence address, contact support@swoppd.com or visit Swoppd Support.

• Account and profile: name, email address, date of birth for 18+ eligibility, account identifiers, profile photo and account-security information.
• Swap activity: listings, offers, matches, Swap Contracts, SwopLock terms, transfer states, messages, ratings and completion history.
• Payments: provider references, amounts, statuses, refunds and protected-transfer records. Swoppd does not need to store full card or bank-account details.
• Trust and safety: verification status, Trust inputs, suspicious-listing reports, issues, disputes, evidence references, enforcement history and audit records.
• Support: Support requests, messages, related account/swap context and internal Admin notes needed to investigate or resolve a case.
• Technical and security: authentication/session data and information needed to diagnose errors, prevent abuse, protect accounts and keep the service reliable.
• Communications: records of service, security, Support and transaction notifications sent to you and your notification preferences.

We use personal information for specific purposes, with the lawful basis depending on the activity:

• Contract: to create and operate your account, listings, offers, Swap Room, Swap Contract, protected workflow, Support and requested service.
• Legal obligation: where processing is required for tax, accounting, regulatory, law-enforcement or other applicable legal duties.
• Legitimate interests: to secure the service, prevent and investigate fraud or abuse, maintain auditable records, improve reliability, resolve disputes and protect Swoppd and its users, where those interests are not overridden by your rights.
• Consent: where consent is legally required or where a genuinely optional feature is appropriately based on your choice, including special-category biometric processing where the selected verification flow relies on explicit consent.

We do not treat one lawful basis as a catch-all. The applicable basis must reflect the real purpose of the particular processing. Where we rely on legitimate interests, you can object and we will consider your rights and our reasons for continuing.

Identity verification is optional. It is used as a Trust and fraud-prevention signal and does not determine whether you are allowed to create an account, list a ticket, make an offer or participate in a swap.

If you choose to verify, Stripe Identity hosts the verification flow and asks for an accepted government photo ID and a live selfie. Stripe compares the selfie with the document photograph and may use other fraud and duplicate-identity signals available within its service.

Swoppd's application does not download or store copies of your ID or selfie in the Swoppd database. We store the provider/session reference, verification state, live/test mode, relevant timestamps and limited status information needed to reconcile the result. The normal Swoppd Admin interface exposes the verification result/date, not copies of your document or selfie.

The underlying document, selfie and biometric processing occur within Stripe's Identity service. Stripe has its own retention, security and legal obligations and may process some information for its own fraud, security and compliance purposes. Stripe's current privacy and retention information is presented in its hosted flow.

Where the verification involves biometric information used to uniquely identify you, special-category data rules apply. Swoppd must document both an Article 6 lawful basis and an Article 9 condition, and complete the required data-protection impact assessment before general public use of that biometric verification flow. Because the feature is optional, declining it does not prevent ordinary swapping.

If you want us to consider deletion or provider redaction of an Identity record, contact Swoppd Support. Redaction can be irreversible and some limited Swoppd-side status/audit information may still need to be kept where there is a lawful fraud-prevention, security, dispute or legal reason.

Swoppd uses active account signals such as optional live identity verification, completed swaps, ratings and confirmed outcomes to produce a Trust Score. Phone verification is not currently an active Trust-scoring feature. The score helps users understand account history and supports safety work. The complete weighting formula is not published because that would make manipulation easier.

A Trust Score is not a guarantee about a person. Swoppd does not intend the score alone to make solely automated decisions producing legal or similarly significant effects. Formal dispute, enforcement and safety decisions can involve human Admin review and underlying evidence.

Stripe processes payment information for SwopLock funding, Swap Protection fees, refunds and, where needed, Protected Payouts. Swoppd stores provider references and transaction state needed to reconcile what happened, rather than storing full card or bank-account details.

Transaction and audit records may be retained where needed for accounting, fraud prevention, disputes, provider reconciliation, chargebacks and legal obligations. Provider-confirmed status is treated as the source of truth for actual money movement.

Support and dispute records can include messages, evidence references, related swap/payment information and internal Admin notes. Internal notes are restricted to authorised Admin use and are not ordinary participant chat. We keep case records where necessary to investigate, resolve, audit and defend decisions.

Evidence should contain only what is relevant. Users should avoid uploading unnecessary identity, financial or third-party personal information. We may restrict access to sensitive evidence and preserve it where a dispute, legal claim or safety investigation requires it.

We share personal information only where there is a service, security or legal reason, including with:

• Stripe for payments, refunds, protected transfers and optional Identity verification;
• Supabase for authentication, database and storage infrastructure;
• Vercel and other infrastructure providers used to host and deliver the service;
• email or notification delivery providers used to send service communications;
• professional advisers, insurers, regulators, courts or law enforcement where disclosure is required or reasonably necessary;
• the other participant where information is inherently part of the agreed swap, such as profile information, messages or transfer instructions.

We do not sell personal information to advertisers.

Some providers may process personal information outside the United Kingdom. Where UK data-protection law requires a transfer safeguard, the transfer must use a lawful mechanism such as UK adequacy regulations, appropriate contractual safeguards or another permitted route. We will not describe a transfer as protected by a particular mechanism unless that is true for the provider and processing concerned.

We keep personal information only for as long as reasonably needed for the purpose for which it was collected, taking account of active and historical swaps, payment reconciliation, accounting, fraud prevention, security, disputes, legal claims and user rights. Where an exact period has not yet been fixed, those criteria determine retention rather than an invented number.

Some protected records are deliberately durable. Closing or deleting an account does not automatically erase the historical Swap Contract, payment, dispute or audit record where retaining it is necessary to preserve the integrity of the protected exchange, defend a claim or comply with law.

For a routine successful live Stripe Identity verification, Swoppd's policy is to review the underlying Stripe-held Identity material for redaction six months after verification. Where there is no active fraud, security, legal, rights-request or dispute reason requiring a longer period, we intend to redact the Stripe Verification Session at that point rather than leave the underlying ID and selfie available for Stripe's longer default retention period.

Provider-side redaction removes the underlying Identity information from Stripe, but does not rewrite the historical fact that Stripe previously completed a live verification. Swoppd can retain the minimal verification result, provider reference, verification date and redaction audit state for Trust, fraud prevention and audit purposes where there is a continuing lawful need. Any exception extending access to the underlying Stripe-held material must be justified and reviewed rather than applied indefinitely.

Swoppd uses session and browser-storage technologies that are necessary for authentication, security and core service functionality. Before an analytics choice is made, Swoppd may record privacy-minimised first-party statistics such as the page visited, referral domain, campaign parameters and broad device category. These records do not include an analytics user ID, IP address, raw user-agent string or cross-site identifier. A prior analytics decline stops this optional statistical tracking. Google Analytics 4 and Google Ads conversion measurement are only loaded after a user chooses to allow analytics. Google Ads measurement may be used to understand whether an advert led to actions such as a confirmed signup or creation of a listing. Swoppd disables Google advertising-personalisation signals in this implementation and does not use this consent choice to enable personalised advertising or remarketing.

Swoppd keeps its cookie and browser-storage inventory aligned with the deployed product. Non-essential analytics, advertising or behavioural tracking must not be introduced for UK users without the required transparency and consent controls.

We may send messages that are necessary to operate your account or protected swap, such as security, payment, transfer, dispute and Support updates. These are service communications rather than marketing.

Promotional/news email is optional. Swoppd only includes accounts that have opted in through their email preferences, and each promotional campaign includes a way to opt out again. We do not treat acceptance of these Terms as blanket consent to marketing.

Swoppd may use first-party campaign delivery, open and link-click signals to understand whether Admin-sent emails are reaching people and which links are useful. These records are used for aggregate campaign performance and operational improvement rather than third-party advertising profiles.

Depending on the circumstances and lawful basis, UK data-protection law can give you rights of access, rectification, erasure, restriction, objection and data portability, as well as rights relating to automated decision-making and the right to withdraw consent where processing relies on consent.

These rights are not absolute. For example, we may need to retain transaction, fraud, dispute, safety or legal records even where other account information can be deleted. If an exception applies, we will explain it.

To exercise a right, contact Swoppd Support. You also have the right to complain to the UK Information Commissioner's Office about our handling of your personal information.

Swoppd is for adults aged 18 and over. We use date of birth to confirm age eligibility before new marketplace activity. We do not display your date of birth publicly, and normal Admin views use an age-eligibility status rather than exposing the full date unless a genuinely necessary support or legal process requires it.

We use access controls, least-privilege Admin permissions, provider-backed financial status, audit records and other technical and organisational measures designed to protect personal information. No online service can promise absolute security, so Swoppd also limits the sensitive data it holds wherever practical.

During a planned maintenance wind-down, Swoppd may pause new marketplace activity or public Browse while continuing to process account, case, payment, security and protected-swap information needed for existing obligations. Emergency maintenance can also temporarily hide the public site while essential Admin and provider reconciliation routes remain available.

We may update this Privacy Notice when the product, providers or law changes. The date at the top tells you when this version was last updated. Material changes will be communicated where appropriate.