Privacy Policy

Last updated: 22 July 2026

This policy explains what personal data Relista collects, why we collect it, what we do with it, and the rights you have over it. It is written to comply with the UK GDPR and the Data Protection Act 2018, and with the EU GDPR where it applies to visitors in the EU.

1. Who we are

Relista ("we", "us") provides crosslisting and inventory software for resale businesses. We are the data controller for the personal data described in this policy.

  • Website: relista.co.uk
  • General & privacy enquiries: support@relista.co.uk
  • Registered company name and address: [TO BE ADDED — see note at the end of this policy]

2. What data we collect

When you join the waitlist or contact us

  • Your email address
  • Your name, if you give it to us
  • The content of any message you send us
  • Your business or store name, if you tell us

When you use Relista as a customer

  • Account details: name, email address, business name, billing details
  • Inventory and listing data you create in the product
  • Authorisation tokens for marketplaces and till systems you choose to connect
  • Usage data: which features you use, and when, so we can improve the product

Automatically, when you visit this website

  • Standard technical data such as IP address, browser type, device type, and the pages you viewed

We do not collect special category data (such as health, ethnicity or political opinions), and we do not knowingly collect data from children.

3. Marketplace and till credentials

Where a marketplace or till system supports it, we connect using secure authorisation tokens rather than storing your password. We only request the level of access needed for the features you have chosen to use, and you can revoke that access at any time from your account or from the marketplace itself.

4. Our legal bases for processing

Under UK and EU GDPR we must have a lawful basis for processing your data. Ours are:

  • Consent — for marketing emails and the waitlist. You may withdraw consent at any time.
  • Contract — to provide the service you have signed up for, including billing.
  • Legitimate interests — to secure our systems, prevent fraud, and improve the product. We balance this against your rights and only rely on it where your interests do not override ours.
  • Legal obligation — to meet accounting, tax and other legal requirements.

5. How we use your data

  • To provide, operate and improve Relista
  • To publish and manage listings on the marketplaces you connect
  • To contact you about your account, the beta, or a message you sent us
  • To send updates you have asked to receive
  • To take payment, where you are a paying customer
  • To protect against fraud, abuse and security incidents

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

6. Who we share data with

We share data only with service providers who process it on our behalf, under contract, and only as needed to run the service. These fall into the following categories:

  • Hosting and infrastructure — to run the website and product
  • Email and communication tools — to send account and waitlist emails
  • Payment processing — to take subscription payments (we do not store your full card details)
  • Marketplaces and till systems — only those you actively connect, and only the data needed to list and sync your items
  • Analytics — to understand how the site is used

We may also disclose data where we are legally required to do so.

7. International transfers

Some of our service providers may process data outside the UK or EEA. Where they do, we ensure an appropriate safeguard is in place — such as UK adequacy regulations, an International Data Transfer Agreement, or Standard Contractual Clauses — so your data keeps an equivalent level of protection.

8. How long we keep it

  • Waitlist data — until you unsubscribe or ask us to delete it, or after a reasonable period of inactivity
  • Account and inventory data — for as long as your account is active, then deleted or anonymised within a reasonable period after closure
  • Billing records — for as long as tax and accounting law requires (generally six years in the UK)
  • Support messages — for as long as needed to resolve the issue and for a reasonable period afterwards

9. Your rights

Under UK and EU GDPR you have the right to:

  • Access the personal data we hold about you
  • Rectify data that is inaccurate or incomplete
  • Erase your data ("right to be forgotten")
  • Restrict how we process your data
  • Portability — receive your data in a machine-readable format, or have it transferred
  • Object to processing based on legitimate interests, and to direct marketing at any time
  • Withdraw consent at any time, where consent is our basis
  • Not be subject to solely automated decisions with legal or similarly significant effects

To exercise any of these, email support@relista.co.uk. We will respond within one month. There is no charge.

10. Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the UK's supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113. If you are in the EU, you may complain to your local supervisory authority.

11. Cookies

This website uses only what is strictly necessary to function, plus privacy-friendly analytics that do not track you across other websites. We do not use advertising or cross-site tracking cookies. If that changes, we will update this policy and ask for your consent first.

12. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and limiting staff access to what is necessary. No system is perfectly secure, but if a breach affects your rights we will notify you and the ICO as the law requires.

13. Changes to this policy

If we make significant changes we will update the date at the top and, where the change materially affects you, contact you directly.

14. Contact us

Note for Frankie — remove this box before launch. This policy is a solid, standards-based starting point, but it is not legal advice. Before you drive real traffic you need to: (1) add your registered company name and address in section 1 — legally required for a UK business; (2) name your actual processors in section 6 once you've chosen your email tool, analytics and payment provider; and (3) ideally have a solicitor review it. If you operate without a registered entity for now, use your trading name and a contactable address.