1. Privacy Policy
1.1 Introduction
1.1.1 The Love My Book app (App) and website (Site) are run by Love My Book, (incorporated and registered in England and Wales under [12447014 ]) whose registered office is at [Radius House, 51 Clarendon Road, Watford, United Kingdom, WD17 1HP ] (we, our or us).
1.1.2 Love My Book is a platform which promotes sustainable living through fashion. Love My Book operates a not-for-profit peer-to-peer marketplace where users can swap their clothes using the Love My Book application which we make available for download through an app store on your mobile device or via our website (Service).
1.1.3 The information set out in this Privacy Policy is provided to individuals whose personal data we process (you or your) as data controller, in compliance with our obligations under Articles 13 and 14 of the General Data Protection Regulation 2016/679 (GDPR).
1.1.4 [The Service allows you to search for items, log-in to your profile and view other profiles (each account has a unique and public URL) via the website.] The above information will also be visible to search engines, including but not limited to the photos that you post. When you use our Site or Service we will collect and process certain information about you. This Privacy Policy sets out how Love My Book collects, uses and shares information that identifies you or is associated with you (personal information). Our main goal in collecting such data is to provide you with a safe, efficient and personalised experience, and we will only collect information relating to you that we deem necessary for this purpose.
1.1.5 By setting up an account with us or using and accessing the Site or Service, you consent to the use of your personal information as described in this Privacy Policy. [You should also be aware that we use cookies to store and access information whilst providing the Site and Service.]
1.2 Data controller details
1.2.1 We are the data controller in relation to the processing of the personal information that you provide to us. Our contact details are as follows:
1.2.1.1 Address: John Dickinson Enterprise Centre, London Road, Apsley, Hemel Hempstead, HP3 9QU.
1.2.1.2 [Telephone number: 0333 577 0153 ]
1.2.1.3 [Email address: info@lovemybook.co.uk (please include “Personal Data Request” in your subject heading to ensure it receives the correct attention).
1.3 How we collect your personal information
1.3.1 Generally, the information we collect about you comes from the way you engage with us, for example by doing any of the following:
1.3.1.1 providing us with information in the course of registering for and/or using the Service, including but not limited to:
1.3.1.1.1 completing a form;
1.3.1.1.2 listing an item;
1.3.1.1.3 subscribing to our mailing lists or other marketing communications; or
1.3.1.1.4 taking an action on the Service (such as when you comment on or like an item, perform a search, communicate with other users of the Service, or engage in a transaction);
1.3.1.1.5 registering via a 3rd party for example Apple, Google and Meta and their subsidiaries.
1.3.1.2 engaging with us through our website;
1.3.1.3 taking part in surveys, posting on our message boards or blogs;
1.3.1.4 [providing us with information in the course of any marketing event];
1.3.1.5 interacting with us using social media; and/or
1.3.1.6 contacting us offline, for example by telephone, SMS, email or by post.
1.3.2 We may also collect information about the pages you look at on our Site and Service and/or the device you use to access the Site and Service.
1.4 How we use your personal information
1.4.1 The list below sets out categories of personal information we collect about you and how we use that information. Unless we specifically state below that we are relying on your consent, our legitimate business interests or a legal obligation to process your personal information, the lawful basis we are relying on to process your personal information is to perform a contract with you. This contract is governed by our Terms of Service. We will only rely on legitimate interests to process your personal information where your interests and fundamental rights do not override our interests.
1.4.2 Where we state below that we use your information to send you marketing communications, we may do so on the basis it is in our legitimate interests (where you are an account holder and we are informing you about our products and services), where we provide you with an opt-out option, or because you have consented to receiving such marketing communications from us. We will only send you marketing communications in accordance with your marketing preferences.
Contact and identity details
1.4.3 When you open an account with us you will be asked to provide us with your contact information such as your name, your email address, your University email address (if different to your choice of email address) and [your telephone number]. We will use your contact details so that we can communicate with you directly about the products you purchase and that you sell through the Service and about queries, issues or concerns you or other users have [and to send you marketing communications]. As a necessary part of participating in the Service, you will also share some of your contact details with any buyer or seller you deal with through the Service. We may also ask you to provide copies of identification documents which we will also use along with other contact information you provide for the legitimate interests of verifying your details and helping prevent fraudulent access to the Service or use of your account.
1.4.3.1 For Google initiated registrations we will be supplied with a unique token to link your account, your email address, first name, last name, gender, date of birth and profile picture URL. We may be provided with other information from time to time but will inform you of this change.
1.4.3.2 For Meta (including Facebook) initiated registrations we will be supplied with a unique token to link your account, your email address, firstname, last name and profile picture URL.  We may be provided with other information from time to time but will inform you of this change.
1.4.3.3 For Apple initiated registrations we will be supplied with a unique token to link your account, your email address, first name and last name.  We may be provided with other information from time to time but will inform you of this change.

Comments and opinions
1.4.4 When you contact us directly, e.g. by email, phone, post or by completing an online form we will record your comments and opinions. We will also record comments and opinions you express when responding to surveys, entering competitions, taking part in promotions we run or that you post on our community boards or other message areas. We will use your comments and opinions to in the legitimate interests of addressing your queries, issues and concerns and improving our products and services. We will also use comments and opinions you express when posting on our community boards or other message areas, responding to surveys, entering competitions or taking part in other promotions, to determine products and services that may be of interest to you and to send you marketing communications.
[In-app messages
1.4.5 If you choose to use our in-app messaging functionality to message other users of the Service, we may access and review your messages to assist in the fulfilment of orders made through the Service, to respond to any query, issue, concern or dispute users raise and to resolve such disputes and if we have reason to believe the messages may contain evidence that you have breached our Terms of Service.]
Payment and transaction information
1.4.6 We keep records of the products you buy, sell or exchange though the Service. We will use payment and transaction information to assist in the payment process for any product you purchase through the Service. [We will use your payment and transaction information and history to determine products and services that may be of interest to you and send you marketing.] We will provide your contact details to the seller of any item you purchase including your username and the name you provide at the checkout.
Information provided by social networks you connect or link to our Service
1.4.7 If you choose to connect an account on a social network, such as Facebook, Twitter or Instagram to your Love My Book account you are consenting to us collecting personal information from the social network in accordance with your privacy settings on that social network. The connected social network may provide us with information such as your name, Facebook id, Twitter handle, profile picture, gender, username, user ID, age or age range, language, country, friends list, follower list and any other information you have agreed it can share. We will use the personal information provided to help create a public profile for you on our Service and, where we provide the functionality, we will also use the information provided to assist you in sharing your experiences on our Service with your friends, followers or contacts on the connected social network. We may also use the connection between the social network and our Service to provide you with updates on the social network that are relevant to any account you have with us or promotion you are taking part in. Such updates will only be provided with your consent. We will not post to your social network or to your friends, followers or contacts without your consent.
Your relationships with other users
1.4.8 We may collect information regarding other users that you are following on our Service which we use to prioritise items displayed to you in your search results [or your timeline] based on Love My Book’s internal algorithm and to determine other products and services that may be of interest to you. We also store information regarding any blocked or banned relationships associated with your account in the legitimate interests of enforcing our Terms of Service and managing user preferences regarding who they wish to communicate with on our Service.
Website and app login details
1.4.9 Where you create an account with us we will hold your user name and password details in the legitimate interests of keeping your account secure. Where you are provided with the option to log-in using a social network, for example through Facebook sign- in, we will not be provided with your password or other account login details for those accounts.
1.4.10 You are responsible for all actions taken with your user name and password, and we recommend that you do not disclose your user name and password to any third parties. If you lose control of your password, you may lose substantial control over your personally identifiable information and may be subject to legally binding actions taken on your behalf, so you should change such password immediately and notify us of any unauthorised access to your account.

Your preferences
1.4.11 We hold information about the preferences you set for notifications, marketing communications and how our site is displayed or what content is displayed to you through our Service. We will use your preference settings for the purpose of providing notifications, sending marketing communications and displaying our Service in accordance with your choices.
[Information about how you connect to and use our Site and Service
1.4.12 We collect information about how you use our Site and Service such as the pages you view on our Site and Service, the time you access our Site and Service and how long you use it for, the website from where you came to our Site or go to after leaving our Site (if applicable) and any selections and choices you make when using our Site and Service. We also collect information about any items you have searched for, listed, purchased, sold, bookmarked, liked, commented on or shared on the Site and Service.
1.4.13 We, [and our third party analytics providers], process this data for the following purposes:
1.4.13.1 to provide analytics data on the use of the Service, Site and App which we use for the legitimate interests of improving our Service, Site and App;
1.4.13.2 to show you your timeline and search results on our Service and order such results in a way that is relevant to you using Love My Book’s internal algorithm based on your preferences and, where you have consented to us using your location data, your location;
1.4.13.3 to display your items to the most relevant potential buyers using Love My Book’s internal algorithm;
1.4.13.4 to send you tips and other notifications where we think this will improve your user experience of the Service;
1.4.13.5 [in the legitimate interests of determining the success of our marketing campaigns;
1.4.13.6 to send you marketing about products and services we think may be of interest to you;] and
1.4.13.7 in the legitimate interests of detecting or preventing any breach of our Terms of Service.]
[Information about your device
1.4.14 We collect information about the computer, tablet, smartphone or other electronic device you use to connect to our Service. This information can include details about the type of device, unique device identifying numbers, operating systems, browsers and applications connected to our Service through the device, your Internet service provider or mobile network, your IP address and your device’s telephone number (if it has one).
1.4.15 Typically, the information we collect about how you use or connect to our Service is associated with your device and not you as a named individual. However, if you are logged into a registered account you have with us this information may also be associated with you directly.
1.4.16 We use information about your device in order to optimise the presentation and functioning of our Service to you on your device and in the legitimate interests of ensuring that banned users are not able to access the Service by creating a new account.]

Information about your location
1.4.17 Where you give us consent, we will collect and use information about your location, sometimes together with other personal information, to provide features of the Service that are relevant to you and your location. For example, this can include ensuring you only search for items that are for sale in your local area. If you change your mind about allowing us to use information about your location in the future, you can update your preferences in your device settings.
Information provided by other users
1.4.18 Sometimes, other users of our Service provide information that is associated with you. Other users can provide information that is associated with you such as comments, feedback and likes relating to your items and messages they send to you. Other users may also share information relating to an item they have bought from you on the Service on other social media channels which link to the Service, but this will not result in any information that was not already public, being made public. Where users of our Service want to invite you to use our Service or to share information with you about our services we will use personal information that they provide about you to assist them in doing this; we will only do this where they indicate that you have provided your consent for them to communicate with you in this way.
Information about fraudulent or criminal activity relating to your account
1.4.19 We will use information about fraudulent or criminal activity relating to your use of our Service for the legitimate interests of detecting and preventing fraud or crime and to comply with our legal obligations.

All personal information
1.4.20 We will use all the personal information we collect to monitor and improve our Service, App and Site and our procedures and processes. We also use the personal information we collect to help us develop new products and services. Our use of your personal information in this way will not result in information that was not previously publicly available being made public on our Service. We also use personal information we maintain about you to resolve disputes between users, to provide user support, to troubleshoot problems and enforce our Terms of Service and policies, including this Privacy Policy.
1.4.21 We shall not request from you any personal information, which is deemed sensitive data, including without limitation, information regarding religious or other beliefs, physical and mental health details, sexual life, racial or ethnic origin, trade union membership and/or offences, and we ask users of the Service not to supply us or any other user with any sensitive personal information, given the nature of the Service and that user profiles and comments are visible by other users. Where you do provide sensitive personal information to us on the Service you hereby confirm that you are deliberately making this information public of your own volition and accept that we may request that you remove such data from the Service.

Your marketing preferences
1.5
Email
1.5.1 From time to time we may contact you by email with information about our products and services.
1.5.2 If you do not want us to contact you by email, you can change your email marketing preferences by emailing us at [support@lovemybook.co.uk] and letting us know that you do not want to receive marketing emails from us. You can also unsubscribe from our marketing emails by clicking on the unsubscribe link in the emails we send to you.
Push notifications
1.5.3 Where you allow us to in your operating system settings, we will send you notifications relating to the Service.
1.5.4 You can change your push notification preferences at any time in your account settings.
1.5.5 Where you have given us permission to do so, we may share your information with selected third parties so that they can provide you with information about their products and services using email.
1.5.6 If, after you have given us permission to share your email address with selected third parties, you change your mind, you can change your email marketing preferences by emailing us at [support@lovemybook.co.uk] and letting us know that you do not want us to share your email address with third parties for marketing purposes.
[Advertising on the Service and third party websites
1.6
1.6.1 We or our advertising partners may show advertisements to you on the Service or on other websites.
1.6.2 To do this we or our advertising partners may collect information about how you use the Service or the types of other web pages, content and ads you, or others who are using the device you connect to this Service, interact with, visit or view. The information collected might also include the IP address of the device you connect to the Service.
1.6.3 Such data may be exchanged between us and our advertising partners to measure the success of advertising campaigns
1.6.4 We or our advertising partner use the information that is collected to make sure adverts you see either on the Service or other websites or apps (where our partner has advertising space) are more relevant to you.
1.6.5 The techniques our advertising partners use do not use obvious identifying information such as name, address, email address or telephone number. This information is used to recognise the device you are using but not to identify you as a named individual.
1.6.6 You can also find out more about this type of advertising from www.youronlinechoices.com.]
Information available to other users through the Service
1.7 The Service is designed to help you interact with other users of the Service. As a result of this some of the information generated through the Service is shared with other users of the Service as described below.

User profile
1.7.1 When you create an account on the Service a user profile will be generated for you that makes the following information publicly available: user name, country and city location, your followers and who you are following, details about the items you are selling. If you add any of the following information to your profile this will also be made publicly available: profile picture, profile description and website address. We will not directly reveal user email addresses to other users, however we may pass your email address to a seller where you have purchased an item.
Item listings
1.7.2 When you list an item for sale on the Service information you add to the listing will be made publicly available such as the item photograph, price, item description, accepted payment method and delivery options. Any comments or likes other users add to your item listing will also be made publicly available as well as any reply comments or images you post. Other users may also share a link to an item they have bought from you via the Service on other social media channels which link to the Service, but this will not result in any information that was not already public, being made public.

Information about your activity on the Service
1.7.3 Some of your activities on the Services are public by default. These activities are when you follow a user, or a user follows you, when you comment on or like an item, when you list an item for sale, when your item is sold, or when you purchase an item.
Social networks you connect to the Service
1.7.4 Where you have chosen to do so we will post updates about your use of the Service to social networks you connect to the Service on your behalf.
Information we share with third parties
1.8 We may share your personal information with the following parties:
1.8.1 Service providers – third parties who provide a service to us. These third parties will only be allowed to use your personal information in accordance with our instructions and will be required to keep your information secure. In particular, we may share the personal information you provide to us with identity verification service providers (in order to verify your access to the Service and prevent fraudulent activity on your account), moderators who monitor our Service (to ensure our Terms of Service are being adhered to that no criminal activity is taking place using our Service), [and Site or Service analytics providers]. In some cases, our service providers may collect information directly from you (e.g. if they are asked to conduct a survey for us), and in these cases you will be notified of the involvement of the service provider, and all information disclosures you make will be strictly optional. If you provide additional information to a service provider directly, then their use of your information is governed by their applicable privacy policy.
1.8.2 Law enforcement, regulators and other parties for legal reasons – third parties who we are under a legal obligation to disclose your personal information to or who we need to disclose your personal information to protect our rights, property or safety or the rights, property or safety of others, detect and investigate illegal activities and breaches of any agreement we have with you.
1.8.3 Buyers of our business – buyers of Love My Book or any of its assets may have your personal information disclosed or transferred to them as part of the sale.
1.9 We will not sell or rent your personal information to a third party for marketing or other purposes without your consent. For further information on your marketing options see section 1.5 above.
1.10 [Although the Love My Book API is publicly available, we do not permit third parties to use this for any purpose at present. The Love My Book API handles your personal data in exactly the same way as the Service.]
Information that cannot identify you
1.11 We do not disclose information about identifiable individuals to anyone else except as set out in this Privacy Policy and subject to applicable data protection legislation. [We may provide third parties with aggregate statistical information and analytics about users of the Service but we will make sure that no one can be identified from this information before we disclose it.]

Retention and deletion policy
1.12 Timeframe
1.12.1 We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
1.12.2 If you have an account with us your Personal Information will be kept by us for as long as your account remains active.
1.12.3 If you deactivate your account your personal information will be deleted after a reasonable period of time so that we can complete any activities already initiated or where we have a need to retain your personal information for legal or technical reasons (including back-up systems) for example to retain proof of transactions for the enforcement of our rights, and to enable the other party to a transaction to access records of past purchases or sales, or at the end of the year (whichever is sooner).
1.13 [Cookies and local storage
1.13.1 We may store information (which may include personal information) locally on your device using cookies and other browser and application storage methods.]
1.14 International Transfers
1.14.1 We will not transfer personal data relating to you within or to a country which is outside the European Economic Area (EEA) unless:
1.14.1.1 the country or recipient is covered by an adequacy decision of the Commission under GDPR Article 45;
1.14.1.2 appropriate safeguards have been put in place which meet the requirements of GDPR Article 46 (for example using the European Commission’s Standard Model Clauses for transfers of personal data outside the EEA); or
1.14.1.3 one of the derogations for specific situations under GDPR Article 49 is applicable to the transfer. These include (in summary):
1.14.1.3.1 the transfer is necessary to perform, or to form, a contract to which we are a party:
1.14.1.3.2 with you; or
1.14.1.3.3 with a third party where the contract is in your interests;
1.14.1.4 the transfer is necessary for the establishment, exercise or defence of legal claims;
1.14.1.5 you have provided your explicit consent to the transfer; or
1.14.1.6 the transfer is of a limited nature, and is necessary for the purpose of our compelling legitimate interests.

Your rights
1.15 You have certain rights under existing data protection laws, including the right to (upon written request) access a copy of your personal data that we are processing. From 25 May 2018, in accordance with the GDPR:
1.15.1 you will have the following rights:
1.15.1.1 right to access: the right to request certain information about, access to and copies of the personal information about you that we are holding (please note that you are entitled to request one copy of the personal information that we hold about you at no cost, but for any further copies, we reserve the right to charge a reasonable fee based on administration costs); and
1.15.1.2 right to rectification: the right to have your personal information rectified if it is inaccurate or incomplete; and
1.15.2 in certain circumstances, you will also have the following rights:
1.15.2.1 right to erasure/“right to be forgotten”: the right to withdraw your consent to our processing of the data (if the legal basis for processing is based on your consent) and the right to request that we delete or erase your personal information from our systems (however, this will not apply if we are required to hold on to the information for compliance with any legal obligation or if we require the information to establish or defend any legal claim);
1.15.2.2 right to restriction of use of your information: the right to stop us from using your personal information or limit the way in which we can use it;
1.15.2.3 right to data portability: the right to request that we return any information you have provided in a structured, commonly used and machine-readable format, or that we send it directly to another company, where technically feasible;
1.15.2.4 right to object: the right to object to our use of your personal information including where we use it for our legitimate interests or for marketing purposes; and
1.15.2.5 Right to opt-out of behavioural analytics: the right to opt-out of behavioural analytics will prevent us from conducting behavioural analytics for the purposes of Love My Book’s internal algorithm used to display relevant sellers and items to you or to display your items to the most relevant potential buyers, you must close your Love My Book account and cease using our Service. This is because it is essential to Love My Book to suggest the right items and sellers to you and to display your items to the right buyers which we can only do by learning about your tastes and preferences and the types of products you list.
1.15.3 Please note that if you withdraw your consent to the use of your personal information for purposes set out in our Privacy Policy, we may not be able to carry out our contractual obligations to you or provide you with access to all or certain parts of our services.
1.15.4 To exercise any of the above rights, or if you have any questions relating to your rights, please contact us by using the details set out in section 1.21 below. We may need to request specific information from you when you exercise your rights to confirm your identity and to speed up our response. We may not be able to fulfil your request if we are not able to identify you.
1.15.5 Most of the personal information we hold about you is either available directly from viewing your account and looking back over your own activities or is available from the social networks that you have connected to our Service. If you think that there is other personal information which you think we hold, please contact us using the contact details set out in section 1.21 below. Please provide as much information as you can about the personal information you are looking for and we will be happy to try and help you find it.

Links to third party sites
1.16 The Service may, from time to time, contain links to and from third party websites of our partner networks, advertisers, partner merchants, retailers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.

Our policy towards children
1.17
1.17.1 Our Service is only available to persons aged 18 and over.
1.17.2 The Service is not directed to persons under 18 and we do not knowingly collect personal information from children under 18. Children under 18 years of age are prohibited from providing any personal information to the Site. If you become aware that your child has provided us with personal information without your consent, then please contact us using the details below so that we can take steps to remove such information and terminate the child’s account.

Do not track
1.18 We currently do not honour browser-based Do-Not-Track signals.
Changes to this policy
1.19 We may amend this Privacy Policy from time to time in order that it accurately reflects the regulatory environment and our own data collection and disclosure practices. Accordingly you should review this policy periodically. When we change this Privacy Policy in a material way, we will update the “last modified” date at the top of this Privacy Policy. Changes to this Privacy Policy are effective when they are posted on this page.

Notice to you
1.20 If we need to provide you with information about something, whether for legal, marketing or other business related purposes, we will select what we believe is the best way to get in contact with you. We will usually do this through email, or by placing a notice on the Service. The fact that we may send notices to you will not stop you from being able to opt out of certain types of contact as described in this Privacy Policy.

Contacting us
1.21 Questions, comments and requests regarding this Privacy Policy are welcome and should be addressed to info@lovemybook.co.uk or to our Data Protection Officer (whose contact details are stated at the beginning of this Privacy Policy).
Complaints
1.22 In the event that you have a complaint about our treatment of your personal information, you have the right to lodge a complaint with the supervisory body, the Information Commissioner – ico.org.uk. Details of how do to this are set out in the “for the public” section. However Love My Book welcomes the opportunity to resolve any complaint and we would suggest you first refer your complaint to our Data Protection Officer (whose contact details are stated at the beginning of this Privacy Policy), prior to making a complaint to the Information Commissioner.