Privacy Policy

1. Who We Are

Scrapoli ("we", "us", "our") operates an online discovery platform connecting buyers and sellers of scrap materials worldwide.

For the purposes of UK data protection law and the UK GDPR, Scrapoli is the data controller of your personal data.

Contact support for privacy matters: www.scrapoli.com/support

2. Scope of This Policy

This Privacy Policy explains how we collect, use, store, share, and protect personal data when you:

• Visit the Scrapoli website
• Create or use a Scrapoli account
• Post listings or company profiles
• Communicate with other users
• Subscribe to Premium or Enterprise plans
• Receive emails or newsletters from us

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Account & Identity Information

• Full name
• Company name
• Email address
• Phone number
• Username
• Password (hashed)

3.2 Profile, Listings & Content

• Profile descriptions
• Company page information
• Photos, images, and documents uploaded to listings
• Messages sent through the platform
• Any other content you voluntarily provide

3.3 Billing & Subscription Information

• Subscription status (Free, Pro, Enterprise)
• Billing address
• Payment history and invoices

Important: Scrapoli does not store card details. All card payments are processed securely by Stripe, which stores and processes payment card information independently under its own privacy policy.

3.4 Technical & Usage Data

• IP address
• Device type, browser type, operating system
• Log files
• Usage activity (pages viewed, features used)
• Approximate location (city/country level)

3.5 Cookies & Analytics Data

• Cookie preferences
• Analytics data collected via PostHog (subject to consent)

4. How We Use Your Personal Data

We use personal data for the following purposes:

• To provide, operate, and maintain the Scrapoli platform
• To create and manage user accounts and company pages
• To display listings and enable user-to-user communication
• To process subscriptions and manage Premium/Enterprise features
• To send service-related emails (account, security, legal notices)
• To send newsletters and marketing communications (with opt-out)
• To analyse platform usage and improve features (with cookie consent)
• To detect fraud, abuse, or misuse of the platform
• To comply with legal and regulatory obligations

5. Legal Bases for Processing (UK GDPR)

We process personal data under the following lawful bases:

• Contract: to provide the Scrapoli service you sign up for
• Legitimate Interests: platform security, analytics, fraud prevention
• Consent: cookies, analytics, and marketing communications
• Legal Obligation: compliance with applicable laws

6. Marketing & Communications

By default, users are subscribed to Scrapoli newsletters and product updates.

You may unsubscribe at any time by:

• Clicking the unsubscribe link in any email, or
• Updating your account preferences

We use Resend or similar email service providers to deliver emails. We do not send spam, and we do not sell email addresses.

7. Cookies & Tracking

We use cookies and similar technologies to:

• Enable essential site functionality
• Measure usage and performance (PostHog)
• Improve user experience

Cookies are controlled via a cookie consent banner with a simple opt-in / opt-out choice.

You may change your cookie preferences at any time. Future advertising cookies may be introduced, in which case this policy will be updated.

8. Data Sharing & Disclosure

We may share personal data with:

• Payment processors: Stripe (for subscription payments)
• Email providers: Resend or equivalent
• Analytics providers: PostHog (with consent)
• Legal authorities: where required by law

We do not sell personal data. Public information (such as listings, company pages, usernames, and uploaded images) is visible to other users and visitors worldwide, similar to online marketplaces like eBay.

9. International Access

Scrapoli is a global platform. User-generated content and public profile information may be viewed worldwide. We do not intentionally transfer personal data outside the UK for processing at this time.

10. Data Retention

We apply conservative retention practices:

• Account data is retained while your account is active
• When you delete your account, personal data and linked company pages are deleted
• Residual logs and backups may persist for up to 12 months for security and legal purposes
• Anonymous or aggregated analytics data may be retained indefinitely

11. Account Deletion & User Controls

You may delete your account at any time using the Delete Account button.

Deletion will:

• Remove your personal data
• Remove your listings and company page
• Disable access permanently

Some data may remain temporarily in backups or logs, as described above.

12. Your Data Protection Rights

Under UK GDPR, you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Withdraw consent at any time
• Lodge a complaint with the UK ICO

Most actions can be completed directly in your account. You may also contact us at support@scrapoli.com.

13. Security Measures

We use appropriate technical and organisational measures to protect personal data, including:

• Encryption
• Access controls
• Secure hosting
• Password hashing

However, no system is completely secure, and you use the platform at your own risk.

14. Children's Data

Scrapoli is not intended for users under 18. We do not knowingly collect data from children.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be posted on the website. Continued use of Scrapoli after changes constitutes acceptance.

16. Contact Us

For privacy or data protection questions, contact: support@scrapoli.com