RATCH PRIVACY POLICY

Last updated: May 2026

This Privacy Policy explains how Ratch (“Ratch”, “we”, “us”, “our”) collects, uses, stores, and protects personal data when you use our website, marketplace platform, and related services (“Platform”).

Ratch is committed to protecting your privacy and handling personal data in accordance with:

• the UK General Data Protection Regulation (“UK GDPR”);

• the Data Protection Act 2018;

• the Privacy and Electronic Communications Regulations (“PECR”).

By using the Platform, you acknowledge that your personal data will be processed in accordance with this Privacy Policy.

1. WHO WE ARE

Ratch is an online multi-seller marketplace platform connecting independent sellers and buyers.

Data Controller officer:

gdprofficer@ratch.uk

If you have any questions about this Privacy Policy or your personal data, please contact us using the details above.

2. PERSONAL DATA WE COLLECT

We may collect and process the following categories of personal data.

2.1 Account Information

When you create an account, we may collect:

• name;

• email address;

• username;

• password (encrypted);

• phone number;

• billing address;

• shipping address.

2.2 Seller Information

If you register as a seller, we may additionally collect:

• business name;

• business address;

• tax/VAT information;

• identity verification documents;

• payout account details;

• customer service information.

2.3 Transaction Information

We may collect:

• order details;

• purchase history;

• transaction records;

• refunds and dispute information.

Ratch does not store full payment card details.

Payments are processed by third-party payment providers.

2.4 Technical Information

When you use the Platform, we may automatically collect:

• IP address;

• browser type;

• operating system;

• device identifiers;

• pages viewed;

• referral URLs;

• session data;

• timestamps.

2.5 Communications

We may collect information contained in:

• support requests;

• seller communications;

• moderation reports;

• emails;

• marketplace messages.

2.6 Cookies and Analytics

We use cookies and similar technologies to:

• operate the website;

• remember preferences;

• analyse traffic;

• improve performance;

• personalise content.

Further details are provided in our Cookie Policy.

3. HOW WE USE PERSONAL DATA

We process personal data for the following purposes.

3.1 To Provide Marketplace Services

Including:

• account creation;

• order processing;

• customer support;

• seller management;

• dispute resolution;

• fraud prevention.

Lawful basis:

• performance of a contract;

• legitimate interests.

3.2 To Process Transactions

Including:

• facilitating payments;

• processing refunds;

• preventing fraudulent transactions.

Lawful basis:

• performance of a contract;

• legal obligations;

• legitimate interests.

3.3 To Improve the Platform

Including:

• analytics;

• performance monitoring;

• usability improvements;

• feature development.

Lawful basis:

• legitimate interests;

• consent where required.

3.4 Marketing Communications

We may send:

• service announcements;

• newsletters;

• promotional communications.

We will only send marketing communications where permitted by law or where consent has been obtained.

You may unsubscribe at any time.

Lawful basis:

• consent;

• legitimate interests.

3.5 Legal and Regulatory Compliance

We may process data to:

• comply with legal obligations;

• respond to lawful requests;

• prevent unlawful activity;

• enforce our Terms and Policies.

Lawful basis:

• legal obligations;

• legitimate interests.

4. LEGAL BASES FOR PROCESSING

Under UK GDPR, we rely on the following lawful bases:

• contract performance;

• legal obligations;

• legitimate interests;

• consent.

Where processing is based on consent, you may withdraw consent at any time.

5. SHARING PERSONAL DATA

We may share personal data with:

5.1 Sellers and Buyers

Information necessary to complete marketplace transactions may be shared between buyers and sellers, including:

• names;

• delivery information;

• order details.

5.2 Service Providers

We may share data with trusted third-party providers including:

• payment processors;

• cloud hosting providers;

• analytics providers;

• customer support platforms;

• fraud prevention providers;

• email service providers.

These providers may only process personal data on our instructions.

5.3 Legal Authorities

We may disclose information where required to:

• comply with law;

• respond to court orders;

• protect rights and safety;

• prevent fraud or unlawful activity.

5.4 Business Transfers

If Ratch is involved in:

• a merger;

• acquisition;

• restructuring;

• asset sale,
  personal data may be transferred as part of that transaction.

6. INTERNATIONAL DATA TRANSFERS

Some service providers may process data outside the United Kingdom.

Where personal data is transferred internationally, we will ensure appropriate safeguards are in place, including:

• adequacy regulations;

• International Data Transfer Agreements;

• standard contractual clauses where appropriate.

7. DATA RETENTION

We retain personal data only for as long as necessary for:

• contractual purposes;

• legal obligations;

• dispute resolution;

• fraud prevention;

• tax and accounting requirements.

Retention periods may vary depending on the nature of the data and legal obligations.

8. SECURITY

We implement appropriate technical and organisational measures to protect personal data, including:

• encryption;

• secure hosting;

• access controls;

• authentication measures;

• monitoring systems.

However, no online platform can guarantee absolute security.

9. YOUR RIGHTS

Under UK GDPR, you may have the right to:

• access your personal data;

• correct inaccurate data;

• request deletion;

• restrict processing;

• object to processing;

• request data portability;

• withdraw consent;

• lodge a complaint with the Information Commissioner’s Office (“ICO”).

You can exercise your rights by contacting us using the details in this Policy.

10. SELLER RESPONSIBILITIES

Sellers using the Platform may independently process buyer personal data.

Sellers are responsible for complying with applicable data protection laws, including UK GDPR, when handling customer information.

Buyer information may only be used for:

• order fulfilment;

• customer service;

• legally required communications.

Sellers must not use buyer data for unauthorised marketing purposes.

11. CHILDREN

The Platform is not intended for individuals under 18 years of age.

We do not knowingly collect personal data from children.

If we become aware that a child has provided personal data, we may delete the information.

12. THIRD-PARTY LINKS

The Platform may contain links to third-party websites or services.

We are not responsible for the privacy practices of third parties.

Users should review third-party privacy policies separately.

13. COOKIES

Ratch uses cookies and similar technologies.

Details about:

• cookie types;

• purposes;

• retention periods;

• consent controls
  are set out in our Cookie Policy.

14. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time.

Updated versions will be published on the Platform with a revised “Last Updated” date.

Continued use of the Platform after updates take effect constitutes acknowledgement of the revised Policy.

15. CONTACT US

If you have questions about this Privacy Policy or your personal data, contact:

Ratch
gdprofficer@ratch.uk

You also have the right to complain to the UK Information Commissioner’s Office (ICO):

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom