Privacy Policy

Who we are

MiniCache is an online marketplace for buying and selling Warhammer miniatures and hobby supplies, operated at minicache.co.uk. When we say "we", "us", or "MiniCache" in this policy, we mean the operator of this platform.

For questions about your data, contact us at support@minicache.co.uk.

What data we collect

We collect information you give us directly:

• Account data — your email address, display name, username, and location when you register.
• Listing data — photos, descriptions, prices, and condition grades you submit when selling.
• Messages — conversations between buyers and sellers on the platform.
• Order data — purchase records, shipping addresses, and order status.

We also collect limited technical data automatically, including IP address, browser type, and pages visited, to keep the platform secure and working correctly.

Payment data

We do not store your card details. All payments are processed by Stripe, a regulated payment provider. Stripe handles card data under their own PCI-DSS compliant systems. We receive only a transaction reference and the amount paid.

Sellers connect their own Stripe accounts via Stripe Connect. Stripe's privacy policy governs the data they collect during onboarding.

How we use your data

• To create and manage your account
• To process purchases and facilitate shipping
• To enable messaging between buyers and sellers
• To investigate disputes and apply Buyer Protection
• To send transactional emails (order confirmation, password reset)
• To detect fraud and keep the platform safe

We do not sell your data to third parties or use it for advertising.

Who we share data with

We share only what is necessary to operate the marketplace:

• Stripe — to process payments and onboard sellers.
• Supabase — our database and authentication provider, hosting data in the EU.
• Vercel — our hosting provider, used to serve the website.
• Shippo — used by sellers to generate postage labels. Your shipping address is shared with Shippo when a label is created.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Object to or restrict how we process your data
• Receive a copy of your data in a portable format

To exercise any of these rights, email support@minicache.co.uk. We will respond within 30 days.

Cookies

We use only essential cookies required to keep you logged in and to process payments securely. We do not use tracking or advertising cookies.

How long we keep your data

Account and listing data is retained for as long as your account is active. Order records are retained for 7 years for legal and accounting purposes. If you delete your account, your personal details are removed within 30 days, though anonymised order records may be retained.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or by a notice on the site. The date at the top of the page always shows when it was last updated.