Privacy Policy

Your data, handled with care.

Effective Date: 27 January, 2026

Destash Ltd ("Destasher", "we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website, services, and our consumer-to-consumer (C2C) marketplace (together, the "Services").

This policy is designed to comply with Data Protection Act 2018/UK GDPR.

1. Who we are

Data controller: Destash Ltd
Registered address: 5 Brayford Square, London, E1 0SG, United Kingdom
Email: hello@destasher.co.uk

We are the data controller responsible for your personal data.

2. Personal data we collect

Depending on how you interact with Destasher, we may collect the following categories of personal data:

a) Information you provide directly

  • Name

  • Email address

  • Username and account details

  • Postal address (e.g., for shipping or verification)

  • Communications with us (emails, messages, support requests)

  • Any information you choose to provide via forms, surveys, or correspondence

b) Marketplace & transaction data

When our C2C marketplace is live, we may collect: - Order and transaction details - Listings, messages, and reviews - Dispute or customer support information

c) Payment & banking information

When you buy or sell on our marketplace: - Bank account details (e.g., account number, sort code, IBAN) - Payment identifiers and payout information

Important: We do not store full payment card details. Payments and payouts are processed by trusted third-party payment service providers who act as independent or joint data controllers in accordance with their own privacy policies.

d) Technical & usage data

  • IP address

  • Device and browser information

  • Log files and usage data

  • Cookie and similar tracking data

3. How we use your personal data

We use your personal data to: - Provide and operate our Services and marketplace - Create and manage your account - Enable buying, selling, payments, and payouts - Communicate with you about your account, transactions, or inquiries - Send newsletters, updates, and marketing communications (where permitted) - Improve, secure, and maintain our Services - Detect and prevent fraud, abuse, or illegal activity - Comply with legal and regulatory obligations (including tax, accounting, and anti-fraud requirements)

4. Legal basis for processing

We process your personal data under the following UK GDPR legal bases:

  • Consent -- for newsletters, marketing communications, and optional data you voluntarily provide

  • Contract -- where processing is necessary to provide marketplace services, process transactions, and manage your account

  • Legal obligation -- where required to comply with UK laws and regulations (e.g., financial, tax, or law enforcement requirements)

  • Legitimate interests -- to operate, improve, and secure our Services, provided those interests do not override your rights

You may withdraw consent at any time where processing is based on consent.

5. Data sharing

We do not sell your personal data. We may share your data with:

  • Service providers who help us operate our website, marketplace, hosting, analytics, customer support, and communications

  • Payment and banking partners to process payments and payouts

  • Other users of the marketplace, where necessary to complete transactions (e.g., usernames, listings, shipping information)

  • Professional advisers (legal, accounting, auditors)

  • Law enforcement or regulators where required by UK law

All service providers are required to protect your data and use it only for specified purposes.

6. Data retention

We retain personal data only for as long as necessary: - Newsletter data: until you unsubscribe - Account and marketplace data: for as long as your account is active and as required for legal, tax, or dispute-resolution purposes - Financial and transaction records: as required by UK law

When data is no longer required, it is securely deleted or anonymised.

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. No system is completely secure, but we work to maintain industry-standard protections.

8. Your rights under UK GDPR

You have the right to: - Access your personal data - Rectify inaccurate or incomplete data - Request erasure of your data ("right to be forgotten") - Restrict or object to processing - Receive your data in a portable format - Withdraw consent at any time (where applicable) - Lodge a complaint with the Information Commissioner's Office (ICO)

To exercise your rights, contact us using the details below.

9. Cookies

We use cookies and similar technologies to operate and improve our website. You can manage cookie preferences through your browser or cookie banner.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the effective date updated.

Contact us

If you have questions about this Privacy Policy or how we handle your personal data, please reach out:

Destash Ltd
5 Brayford Square
London, E1 0SG
United Kingdom
Email: hello@destasher.co.uk