[Example] Privacy Policy - Including Behavioural Advertising

NOTE: This template is provided for general guidance only and does not constitute legal advice. Each marketplace is responsible for ensuring that its published policy accurately reflects its operations and complies with applicable law. You should obtain independent legal advice before publication.

Before publishing: Replace every yellow-highlighted field with the relevant marketplace information and remove any sections that do not apply.

[Date]
[Marketplace Name]
[Marketplace Email]
[Marketplace URL]
[Business Address]

[Marketplace Name] Privacy Policy

Last updated [Date]

Thank you for choosing to be part of our community at [Marketplace Name] ("Company", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about our policy or our practices with regard to your personal information, please contact us at [Marketplace Email].

When you visit our website [Marketplace URL], mobile application, and use our services, you trust us with your personal information. We take your privacy very seriously. In this privacy policy, we seek to explain to you in the clearest way possible what information we collect, how we use it and what rights you have in relation to it. We hope you take some time to read through it carefully, as it is important. If there are any terms in this privacy policy that you do not agree with, please discontinue use of our Website(s) or App(s) and our services.

This privacy policy applies to all information collected through our Website(s) (such as [Marketplace URL]), mobile application ("App(s)"), and/or any related services, sales, marketing or events (we refer to them collectively in this privacy policy as the "Services").

Please read this privacy policy carefully as it will help you make informed decisions about sharing your personal information with us.

What information do we collect?
How do we use your information?
Will your information be shared with anyone?
Do we use cookies and other tracking technologies?
Tracking preferences (Apps)
Behavioural advertising
Marketing communications
Prize draws and competitions
Redbox as a data controller for platform analytics
How long do we keep your information?
How do we keep your information safe?
Do we collect information from minors?
What are your privacy rights?
Data breach
Controls for Do-Not-Track features
Do we make updates to this policy?
How can you review, update, or delete the data we collect from you?
How to make a privacy complaint
How can you contact us about this policy?

1. What information do we collect?

In short: We collect personal information that you provide to us, and information collected automatically when you use our Website(s) or App(s).

We collect and process personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and only for purposes that are lawful and directly related to our business activities.

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when registering at the Website(s) or App(s), expressing an interest in obtaining information about us or our products and services, when participating in activities on the Website or Apps, or otherwise contacting us. This can include:

Publicly available personal information - Phone numbers, email addresses, first name and surname, current address, delivery address, and other similar data.
Personal information provided by you - Purchase history and other similar data.
Order information - Name, billing and shipping address, email address, phone number, and payment method details, collected to fulfil your contract with us.
Payment data - Data necessary to process your payment if you make purchases, such as your payment instrument number and associated security code. All payment data is processed and stored by Stripe. You may find Stripe's privacy policy here: https://stripe.com/gb/privacy.

All personal information that you provide to us must be true, complete and accurate, and you must notify us of any changes to such personal information.

Information automatically collected (device information)

In short: Some information, such as IP address and browser and device characteristics, is collected automatically when you visit our Website(s) or App(s), with what's collected depending on your cookie choices in relation to the Website(s), and your tracking preferences in relation to the App(s). See "Tracking Preferences (Apps)" below for how this works on our App(s).

We automatically collect certain information when you visit, use or navigate the Website(s) or App(s). This information does not reveal your specific identity (like your name or contact information) but may include your device and usage information, such as browser version, IP address, timezone, approximate location, operating system, language preferences, referring/exit URLs, device identifiers, and information about how and when you use our Website(s) or App(s) - including pages or products viewed, search terms, and how you interact with the Website(s) or App(s). This information is primarily needed to load the Website(s) or App(s) accurately for you, to maintain the security and operation of our Website(s) or App(s), and for our internal analytics and reporting purposes.

Before you respond to our cookie banner on the Website(s), some essential data (such as your basket, login session, and cookie choice) is stored so the Website(s) functions, but no analytics or advertising cookies are set. Analytics measurement in this state uses a temporary identifier that changes regularly and cannot be linked back to you.

Once you accept cookies, we also use cookies, local storage and similar technologies as described in our Cookie Policy, and additional information - including a persistent identifier and, if you're logged in, your account identity, is collected.

This device information is shared with our processors Redbox, Google, and, where you've accepted cookies, Meta, and any other analytics or advertising partners we use from time to time. Separately, PostHog processes some of this information on behalf of Redbox, not [Marketplace Name], Redbox determines how this platform-level analytics data is used. See "Redbox as a Data Controller for Platform Analytics" below.

Online identifiers

We collect the device's geolocation and other similar data.

Information collected through our Apps

In short: We may collect information regarding your geo-location when you use our Apps, only where you've granted permission.

If you use our Apps, we may request access or permission to track location-based information from your mobile device - either continuously or while you are using the App - to provide location-based services such as accurate delivery tracking, estimated delivery times, and helping you find outlets near you. Location data is collected only where you have granted permission via your device's settings, and you may withdraw this permission at any time, though this may affect features such as delivery tracking. This information is shared with our processor Redbox, and with delivery partners where necessary to fulfil your order.

2. How do we use your information?

In short: We process your information for purposes based on legitimate business interests, the fulfilment of our contract with you, compliance with our legal obligations, and/or your consent.

We use personal information collected via our Website(s) or App(s) for a variety of business purposes described below, and we indicate the specific processing grounds we rely on for each. We only use or disclose personal information where we have a lawful basis under the UK GDPR: consent, performance of a contract, compliance with a legal obligation, protecting vital interests, tasks carried out in the public interest, or our legitimate business interests.

We use the information we collect or receive:

To facilitate account creation and the logon process. If you choose to link your account with us to a third-party account (such as Google or Facebook), we use the information you allow us to collect from those third parties to facilitate account creation and logon, for the performance of the contract.
To provide products or services to you and fulfil our contract. This includes processing your payment information, arranging shipping, providing invoices and order confirmations, communicating with you, and screening orders for potential risk or fraud.
To send you marketing and promotional communications. This is in accordance with your marketing preferences. You can opt out of our marketing communications at any time (see "Marketing Communications" below).
To deliver targeted advertising to you. We may use your information to develop and display content and advertising (and work with third parties who do so) tailored to your interests and/or location, and to measure its effectiveness — see "Behavioural Advertising" below.
To administer prize draws and competitions. Where you elect to participate, see "Prize Draws and Competitions" below.
To request feedback. To contact you about your use of our Website(s) or App(s).
To enforce our terms, conditions and policies. For business, legal and contractual reasons.
To respond to legal requests and prevent harm. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.
To manage user accounts. To keep them in working order.
To respond to user enquiries and offer support.
For other business purposes. Including data analysis, identifying usage trends, determining the effectiveness of our promotional campaigns, and evaluating and improving our Website(s) or App(s), products, marketing and your experience. Where possible, we use and store this information in aggregated and anonymised form so that it is not associated with individual end-users. We will not use identifiable personal information for these purposes without your consent.

We may also use your personal data to personalise and measure the effectiveness of our advertising campaigns, for example, sharing anonymised or pseudonymised data with advertising networks to display relevant ads across other websites you visit.

3. Will your information be shared with anyone?

In short: We only share information with your consent, to comply with laws, to provide you with services, protect your rights, or fulfil business obligations. We do not sell your personal information.

We may disclose your personal information for the purposes for which it was collected, or as otherwise permitted or required by law. This may include disclosure to third-party service providers, such as cloud hosting, analytics, marketing, and payment platforms, some of which may be located outside of the UK. Where we disclose your personal information outside the UK, we ensure appropriate safeguards are in place (such as adequacy decisions or standard contractual clauses) as required by the UK GDPR.

More specifically, we share or process your personal information in the following situations:

Service providers. We use Redbox to power our online store, and we disclose personal information to processors including cloud hosting platforms, payment processors (such as Stripe), and technology providers (such as Redbox), to help us deliver our services.
Order and analytics sharing. When you complete an order, order details (such as transaction value and items purchased) are shared with Google Analytics and, where you've accepted cookies, Meta, so we can measure sales performance. This happens even if you have otherwise declined cookies, because it's necessary to process and analyse the order itself. This information is also shared with PostHog on behalf of Redbox - see "Redbox as a Data Controller for Platform Analytics" below. Information about how you arrived at the Website(s) or App(s) (such as which advert or link you followed) may also be recorded.
Enhanced order matching. Where you have accepted cookies, we also share a securely hashed (not readable) version of your name, email address and phone number with Google when you complete an order, to help measure the performance of our advertising.
Analytics and advertising partners. We use Google Analytics to understand how visitors use the Website(s) or App(s), and (where you've accepted cookies or tracking) Meta, along with (where you’ve accepted cookies) Google Ads to measure advertising performance, and any other analytics or advertising partners we use from time to time. Separately, Redbox uses PostHog for its own platform-level analytics across the marketplaces it powers, acting as a data controller for that specific activity rather than as our processor - see "Redbox as a Data Controller for Platform Analytics" below.
Third-party advertisers. We may use third-party advertising companies to serve ads when you visit the Website(s) or App(s). These companies may use information about your visits to our Website(s) or App(s) and other websites, contained in web cookies and other tracking technologies, to provide advertisements about goods and services of interest to you.
Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
Legal reasons. We may disclose your information if required by law (e.g. in response to a subpoena, search warrant or other lawful government request), or to otherwise protect our rights.

4. Do we use cookies and other tracking technologies?

In short: We use cookies and similar technologies to run the Website(s) or App(s) and to understand how it's used, and we only set analytics and advertising cookies once you've made a choice via our cookie banner or tracking preferences (see "Tracking Preferences (Apps)" below).

A cookie is a small data file stored on your browser or device. We use both session and persistent cookies to recognise you when you return, personalise your experience, and for analytics and advertising purposes.

Before you respond to our cookie banner on our Website(s), only essential cookies are set (for example, to remember your basket, keep you logged in, and record your cookie choice) - no analytics or advertising cookies are set at this stage, and any analytics measurement uses a temporary, non-identifying method.

Once you accept cookies via the banner on our Website(s), we and our partners - including Google Analytics/GA4, Meta, and Redbox (via PostHog) - set additional cookies, local storage and similar technologies as described in our Cookie Policy.

You can control and manage cookies through your browser settings, and you can change your cookie choice at any time. Removing or blocking cookies can negatively impact your user experience and parts of our Website(s) or App(s) may no longer be fully accessible. More information on managing cookies can be found at www.allaboutcookies.org.

Please also note that blocking cookies may not completely prevent how we share information with third parties such as our advertising partners - to exercise your rights or opt out of certain uses of your information by these parties, please see "Behavioural Advertising" below.

5. Tracking Preferences (Apps)

On iOS, tracking across other companies' apps and websites requires your consent via Apple's App Tracking Transparency prompt. On Android, an equivalent opt-out is available through your device's Google Advertising ID settings.

On iOS, our App uses Apple's App Tracking Transparency (ATT) framework. The first time our App needs to track your activity across other companies' apps and websites, you will be shown a system prompt asking whether you consent to this. If you decline, your device's advertising identifier (IDFA) will not be shared with us or with our advertising partners, such as Meta, and the features described under "Behavioural Advertising" below - including the Meta pixel and Meta Advanced Matching, and our product analytics tool, PostHog, - will not be able to link data to your device using this identifier. Declining this permission will not affect your ability to use the App. You can change your choice at any time in your device settings, under Settings > Privacy & Security > Tracking.

On Android, an equivalent function is provided by your device's Google Advertising ID (GAID) settings, found under Settings > Privacy > Ads. Unlike iOS, this is a device-level setting rather than an in-app prompt: you can choose to opt out of personalised advertising, or reset your advertising ID, at any time. If you opt out, your advertising ID will not be available to us or to our advertising partners for advertising purposes. Our App(s) read this device-level setting as your tracking preference, rather than asking you separately within the App(s). If this setting cannot be read, or has not been determined yet, we treat this in the same way as if you had opted out.

Your tracking preferences on the App(s) are separate from, and in addition to, the cookie choices you make via our cookie banner on the Website(s), described in "Do we use cookies and other tracking technologies?" above.

Your tracking preference also governs whether our product analytics tool, PostHog, collects information about your use of the App(s) - see "Redbox as a Data Controller for Platform Analytics" below.

On self-service kiosks and other Redbox-operated devices in store, Meta and Google Analytics never collect information, regardless of any tracking preference. PostHog always collects information on these devices, because they are shared hardware we operate rather than your personal device.

6. Behavioural advertising

We use your personal information to provide you with targeted advertisements or marketing communications we believe may be of interest to you. For example:

Google Analytics (GA4). We use Google Analytics to help us understand how our customers use the Site, using Google's Consent Mode so that browsing measurement uses a temporary, non-identifying method before you accept cookies. As described under "What Information Do We Collect?" above, order details are shared with Google Analytics when you complete a purchase regardless of your cookie choice. You can read more about how Google uses your personal information here: https://www.google.com/intl/en/policies/privacy/ . You can opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout. In our App(s), this is instead gated by your tracking preferences rather than cookie consent, see "Tracking Preferences (Apps)" above - this includes advertising-related collection, not just analytics.
Google Ads Enhanced Conversions. Where you have accepted cookies on the Website(s), this shares a securely hashed (not readable) version of your name, email address and phone number with Google, to help us measure the performance of our advertising. In our App(s), this is instead gated by your tracking preferences rather than cookie consent, see "Tracking Preferences (Apps)" above.
Meta pixel. Where you have accepted cookies on the Website(s), we use the Meta pixel to measure the performance of our advertising and show you more relevant ads. The Meta pixel does not run before you accept cookies on the Website(s). Once active, it may automatically collect some information about how you interact with page elements such as buttons and forms, and - where you're logged in - may link a persistent identifier for your account to improve ad matching. In our App(s), this is instead gated by your tracking preferences rather than cookie consent, see "Tracking Preferences (Apps)" above.
Meta Advanced Matching. Where you have accepted cookies on the Website(s) we use Meta Advanced Matching, which shares a securely hashed (not readable) version of your name, email address and phone number with Meta, to help us more accurately measure and improve the performance of our advertising. In our App(s), this is instead gated by your tracking preferences rather than cookie consent.
We share information about your use of the Site, your purchases, and your interaction with our ads on other websites with our advertising partners. Where you have accepted cookies on the Website(s), this may happen directly or through cookies or similar technologies.

For more information about how targeted advertising works, visit the Network Advertising Initiative's ("NAI") educational page: https://www.networkadvertising.org/understanding-online-advertising/how-does-it-work.

You can opt out of targeted advertising by:

Facebook — https://www.facebook.com/settings/?tab=ads
Google — https://www.google.com/settings/ads/anonymous
Bing — https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads

You can also opt out of some of these services via the Digital Advertising Alliance's opt-out portal: https://optout.aboutads.info/.

7. Marketing communications

We may use your personal information - including your email address, mobile number and push notification token - to send you marketing communications about our products, services, offers and promotions, where you have consented to receive these or where we are otherwise permitted to do so by law.

We send marketing communications by email, SMS and push notification using Redbox, which processes this information as our processor on our behalf.

You can opt out of marketing communications at any time by:

Clicking the unsubscribe link included in any marketing email;
Replying STOP to any marketing text message;
Adjusting your notification permissions in your device settings, for push notifications; or
Contacting us using the details in "How can you contact us about this policy?" above.

Opting out of marketing communications will not affect service-related messages, such as order confirmations or updates, which we need to send you to fulfil your order.

8. Prize draws and competitions

From time to time, we may run prize draws or competitions on the Website(s) or App(s). Where you choose to enter, we collect the personal information needed to run the draw and contact winners, which may include your name, contact details and, where relevant to verify eligibility, your date of birth.

Purpose: To administer the prize draw or competition, select and contact winners, and fulfil any prize.
Lawful basis: Your consent, given when you enter.
Disclosure: Where a prize draw is run with a promotional partner, winner details may be shared with that partner solely to fulfil the prize. Winner names may be published where this is a condition of entry, which will be made clear to you at the point of entry.
Retention: Entry data is retained only for as long as needed to run the draw and fulfil the prize, and is deleted shortly afterwards, except where we need to keep a record of the winner for accounting or legal purposes.

Specific terms and conditions for each prize draw or competition will set out any additional detail, including the closing date, entry requirements, and how winners are selected.

9. Redbox as a data controller for platform analytics

Redbox uses PostHog to analyse how the Site, and other marketplaces it powers, are used, for its own purposes such as improving the Redbox platform and understanding performance across marketplaces. For that specific activity, Redbox is a separate data controller in its own right, not us.

What Redbox collects for this purpose: Device and usage information (as described under "What Information Do We Collect?" above) and, once you've accepted cookies on the Website(s), a persistent identifier. Redbox may also use PostHog's session recording capability after consent to understand how the platform is used and identify areas for improvement. Form inputs are masked and are not visible within the recording. In the App(s), the information collected includes a persistent identifier and, once you're logged in, an account reference - not your name or email address. Session recordings are not currently made within the App(s).
Purpose: To understand and improve the Redbox platform across the marketplaces it powers.
Lawful basis: For cookieless, pre-consent measurement using a temporary identifier that changes regularly and is not used to create a persistent profile, Redbox's legitimate interests in understanding and improving its platform. For processing that begins once you accept cookies on the Website(s) - including use of a persistent identifier, any session recording, and identifying you if you're logged in - your consent, given via the cookie banner on the Website(s). In the App(s), no information is collected before your tracking preference has been determined. Once determined, collection follows your tracking preference in the same way as described under "Tracking Preferences (Apps)" above, except on self-service kiosks and other Redbox-operated devices, where PostHog always collects information because these are shared hardware we operate rather than your personal device.
Retention: Up to 7 years for analytics events. Where session recording is used, recordings are retained for up to 3 months.
Your rights: Because Redbox is a separate controller for this data, requests relating to it (such as access or erasure) should be directed to Redbox directly at https://redbox.systems/contact-us, rather than to [Marketplace Name] - we're unable to access or amend this data ourselves.

You can read more in Redbox's own privacy notice at https://redbox.systems/privacy-policy.

10. How long do we keep your information?

In short: We keep your information for as long as necessary to fulfil the purposes outlined in this privacy policy, or to meet legal, accounting, or regulatory obligations.

Because we need your personal information to provide our ordering services, we generally keep it while you use our products or services or until you ask us to delete it. To determine the appropriate retention period, we consider the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, whether we can achieve those purposes through other means, and our applicable legal requirements. We also retain and use personal information to the extent necessary to comply with our legal obligations, resolve disputes and enforce our policies.

When we no longer have a legitimate business need to retain your information, we will delete or anonymise it. If immediate deletion is not possible - for example, due to backup storage - we will securely store and isolate your data until it can be permanently removed.

You can delete your account at any time from our ordering Website(s) or App(s), and we will remove your personal information. Some of your ordering data will be anonymised and retained to comply with legal obligations or to protect our or others' interests.

Note: retention periods that apply specifically to platform analytics data controlled by Redbox (rather than by us) are set out in "Redbox as a Data Controller for Platform Analytics" above.

11. How do we keep your information safe?

In short: We aim to protect your personal information through a system of organisational and technical security measures.

We have implemented appropriate technical and organisational security measures designed to protect the security of any personal information we process, including safe storage, encryption, access controls, and data tokenisation. However, please also remember that we cannot guarantee that the internet itself is 100% secure. Although we will do our best to protect your personal information, the transmission of personal information to and from our Website(s) or App(s) is at your own risk. You should only access the Services within a secure environment.

Redbox is PCI DSS compliant - the global standard maintained by the PCI Security Standards Council for the secure processing of credit card transactions. Payment processing itself is handled by Stripe, which is also PCI DSS compliant.

12. Do we collect information from minors?

In short: We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly solicit data from or market to children under 18 years of age. By using the Website(s) or App(s), you represent that you are at least 18, or that you are the parent or guardian of such a minor and consent to that minor's use of the Website(s) or App(s). If we learn that personal information has been collected from a user under 18 years of age, we will deactivate the associated account and take reasonable steps to promptly delete such data from our records. If you become aware of any data we have collected from a child under 18, please contact us at [Marketplace Email].

13. What are your privacy rights?

In short: You may review, change, or terminate your account at any time.

If you are resident in the UK, you have rights under the UK GDPR, including the right to access, correct, erase, restrict or object to processing, and the right to data portability. Your personal information is processed by us and by our processors, some of which may be located outside the UK - where this is the case, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses. This does not cover platform analytics data controlled by Redbox — see "Redbox as a Data Controller for Platform Analytics" above for how to exercise your rights over that data.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: https://ico.org.uk/make-a-complaint/
Phone: 0303 123 1113

If you have questions or comments about your privacy rights, you may email us at [Marketplace Email].

Account information

If you would like to review or change the information in your account, or terminate your account, you can:

Log into your account settings and update your user account; or
Contact us using the contact information provided.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, some information may be retained in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our Terms of Use, and/or comply with legal requirements.

Cookies and similar technologies

Most web browsers accept cookies by default. You can usually set your browser to remove or reject cookies - doing so could affect certain features or services of our Website(s) or App(s). To opt out of interest-based advertising by advertisers on our Website(s) or App(s), visit http://www.aboutads.info/choices/.

Opting out of email marketing

You can unsubscribe from our marketing email list at any time by clicking the unsubscribe link in our marketing emails, or by contacting us using the details below. You will then be removed from the marketing list - however, we will still need to send you service-related emails necessary for the administration and use of your account. See "Marketing Communications" above for how to opt out of other channels.

You have the right to request access to the personal information we hold about you and request its correction if it is inaccurate, out-of-date, incomplete, irrelevant, or misleading. To make a request, please contact us. We will respond within a reasonable time, typically within 30 days.

14. Data breach

A data breach occurs when personal information is lost, or subjected to unauthorised access, modification, disclosure, or misuse.

Where a data breach is likely to result in a risk to your rights and freedoms, we will notify the Information Commissioner's Office (ICO) without undue delay, and in any case within 72 hours of becoming aware of it, where required under the UK GDPR. Where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly, without undue delay.

We maintain procedures for identifying, assessing and responding to data breaches, including working with our processors - such as Redbox - to investigate and contain any incident.

15. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems and applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognising and implementing DNT signals has been finalised. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in future, we will inform you in a revised version of this privacy policy.

16. Do we make updates to this policy?

In short: Yes, we will update this policy as necessary to stay compliant with relevant laws and to reflect changes to our practices.

We may update this privacy policy from time to time to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. The updated version will be indicated by an updated "Last updated" date and will be effective as soon as it is accessible. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy policy frequently to stay informed of how we are protecting your information.

17. How can you review, update, or delete the data we collect from you?

Based on the laws of some countries, you may have the right to request access to the personal information we collect from you, change that information, or delete it in some circumstances.

Most of the data that is stored can be reviewed, updated or deleted by yourself within the Website(s) or App(s). If you have an additional request, or need support to review, update, or delete your personal information, please contact us at [Marketplace Email]. We will respond to your request within 30 days.

This does not apply to platform analytics data controlled by Redbox — see "Redbox as a Data Controller for Platform Analytics" above.

18. How to make a privacy complaint

If you believe we have breached the UK GDPR and Data Protection Act 2018, or mishandled your personal information, you can contact us at [Marketplace Email]. We take complaints seriously and will investigate and respond within a reasonable timeframe.

If you are not satisfied with our response, you may lodge a complaint with the Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Phone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

19. How can you contact us about this policy?

If you have questions or comments about this policy, you may email us at [Marketplace Email], or write to us at [Business Address].