Privacy Policy.

LAST UPDATED: 7 SEPTEMBER 2026 · MARKETPLACE LAUNCH VERSION

How POKISTOCK LTD collects, uses, and protects your personal data.

1. Who we are

POKISTOCK LTD ("POKISTOCK", "we", "us") is the data controller for personal data collected through the POKISTOCK app and website. We are based in Fleetwood, Lancashire, United Kingdom. Contact: contact@pokestockapp.uk.

2. What data we collect

2.1 Account data

Name, email address, phone number (if provided), password (stored encrypted/hashed), and account type (collector or vendor).

2.2 Order & transaction data

Order history, delivery address, items purchased, and payment status. Full card details are handled directly by Stripe, our payment processor. We do not store your full card number.

2.3 Vendor data

For approved Vendors: business details, verification information, payout/bank account details (processed via Stripe Connect), listing content, and sales history.

2.4 Usage data

Device information, app version, general location (if permitted), pages/screens viewed, and interactions with the app, collected to help us understand usage and fix problems.

2.5 Cookies & similar technologies

Our website may use cookies and similar technologies to keep you logged in, remember preferences, and understand site usage. You can control cookies through your browser settings; blocking some cookies may affect site functionality.

3. How we use your data

• To create and manage your account.
• To process orders and payments, and connect buyers with Vendors.
• To verify Vendors and prevent fraud.
• To provide customer support and respond to enquiries.
• To send order-related communications (confirmations, dispatch updates, support responses).
• To send marketing communications, where you have opted in. You can unsubscribe at any time.
• To improve POKISTOCK, understand usage patterns, and fix bugs.
• To comply with legal obligations, including tax and fraud-prevention requirements.

4. Legal basis for processing

We process your data on the following bases: performance of a contract (processing your orders and account), legitimate interests (fraud prevention, service improvement), consent (marketing communications, where applicable), and legal obligation (tax and regulatory compliance).

5. Sharing your data

We share data with:

• Vendors, limited to what is needed to fulfil your order (name, delivery address, order details) when you buy from them.
• Stripe, our payment processor, to process payments and, for Vendors, payouts.
• Service providers who support our infrastructure (hosting, email delivery, analytics), under appropriate data processing agreements.
• Law enforcement or regulators, where required by law.

We do not sell your personal data to third parties.

6. International transfers

Where any of our service providers process data outside the UK, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) in line with UK GDPR requirements.

7. How long we keep your data

We keep account and order data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting, and dispute-resolution obligations (typically up to 6 years for financial records). You can request deletion sooner, subject to these obligations. See Section 9.

8. Data security

We use appropriate technical and organisational measures to protect your data, including encrypted storage of passwords and secure, access-controlled infrastructure. No system is 100% secure, but we take reasonable steps to protect your information and respond promptly to any issues.

9. Your rights

Under UK GDPR, you have the right to: access the data we hold about you; request correction of inaccurate data; request deletion of your data (subject to legal retention requirements); object to or restrict certain processing; request a copy of your data in a portable format; and withdraw consent for marketing at any time.

To exercise any of these rights, contact us at contact@pokestockapp.uk. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk if you believe your data has been mishandled.

10. Children

POKISTOCK is not intended for use by anyone under 18 without parental permission, and we do not knowingly collect data from young children.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified with reasonable notice.

12. Contact

Questions about this Privacy Policy, or to exercise your data rights, can be sent to contact@pokestockapp.uk.