Home / Legal
Privacy Policy
Last updated: 25 September 2026
This policy explains how RigSwap handles your personal data under the UK GDPR and the Data Protection Act 2018. It applies to everyone who browses, buys or sells on RigSwap.
1. Who we are (data controller)
RigSwap is the data controller for the personal data collected through this site. You can contact us about anything in this policy, or about your data, at support@rigswapuk.com.
2. Data we collect
Account data: your name, email address, town or city and outward postcode when you sign up. Listing data: the photos, descriptions, prices and locations you post. Transaction data: orders, amounts, delivery addresses and payout details. Message data: messages you send to other users through RigSwap. Technical data: sign-in records and basic device and browser information needed to run the site securely.
Payment card details are collected and processed directly by Stripe — we never see or store your full card number.
3. How and why we use it (lawful bases)
We use your data to run your account, process orders and payouts, and let buyers and sellers communicate (lawful basis: performing our contract with you). We use it to keep the marketplace safe — screening messages, preventing fraud and enforcing our terms (lawful basis: legitimate interests). We keep transaction records where the law requires it (lawful basis: legal obligation). Where we rely on consent, you can withdraw it at any time.
4. Sharing your data
We share data only where needed to run the service: with Stripe to process payments and seller payouts; with our hosting and email providers to operate the site and send order and message notifications; and with other users, limited to what a transaction needs — for example a seller sees the delivery address for an order they must post, and your public profile shows your name, town and ratings.
We never sell your personal data, and we do not share it with advertisers.
5. International transfers
Some of our service providers (including Stripe) process data outside the UK. Where this happens, transfers are protected by safeguards recognised under UK data protection law, such as the UK's international data transfer agreements or adequacy regulations.
6. How long we keep data
We keep account data while your account is active. Order and payment records are kept for up to six years to meet tax, accounting and legal requirements. Messages are kept while the related order or account remains active. When data is no longer needed it is deleted or anonymised.
7. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict or object to how we use it, and to receive a portable copy. To exercise any of these rights, email support@rigswapuk.com — we respond within one month.
If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. We would appreciate the chance to put things right first.
8. Cookies
RigSwap uses essential cookies and similar storage only — primarily to keep you signed in and keep the site secure. We do not use advertising or cross-site tracking cookies.
Contact
RigSwap is a trading name of Fin Elwell-Jones (sole trader) · United Kingdom · support@rigswapuk.com