Privacy Policy

1. Who we are

Airsoft Hub ("we", "us", "our") is operated by [COMPANY NAME], of [REGISTERED ADDRESS] (registered with the Information Commissioner's Office under number [ICO REGISTRATION NUMBER]). We are the data controller for the personal information described in this policy.

You can contact us about privacy at [email protected] or through our contact form.

We handle your personal information in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations 2003 (PECR).

2. What information we collect

We collect the following information:

• Account details: name, username, email address, date of birth, password (stored hashed), profile photo, and two-factor or passkey credentials if you enable them.
• Location: your postcode (and the latitude and longitude derived from it), used to calculate distances between users. Your postcode is not shown publicly.
• Listings and activity: items you post, photos, prices, messages you send through the message centre, feedback you leave or receive, and reports you make.
• Payments: if you buy a paid service such as a featured listing, payment is taken by Stripe. We receive confirmation and limited details (such as the amount and the last four digits of the card) but never your full card number.
• Technical data: IP address, browser and device type, pages visited and cookie identifiers.
• Sign-in with Google or Facebook: if you use these, we receive your name, email address and profile identifier from that provider.

3. How and why we use your information

We only use your personal information where we have a lawful basis under UK GDPR:

• To provide the service (contract): creating and running your account, publishing listings, delivering messages between users, showing nearby items and processing payments.
• To keep the site safe (legitimate interests): preventing fraud, spam and misuse, verifying identity where required, moderating reports and enforcing our Terms and Conditions.
• To improve the site (legitimate interests): understanding how the site is used and fixing problems.
• Marketing and cookies (consent): our newsletter, and analytics or advertising cookies. You can withdraw consent at any time.
• Legal obligations: keeping records and responding to lawful requests from the police or other authorities.

4. Who we share your information with

We do not sell your personal information. We share it only with:

• Other users: your username, profile, listings and feedback are visible to other users. Messages are visible only to the people in the conversation.
• Stripe to process payments.
• Google for Google reCAPTCHA (spam protection on forms), Google Analytics (site statistics), Google AdSense (advertising) and, if you choose it, Google sign-in.
• Facebook (Meta) if you choose to sign in with Facebook.
• Service providers who host the site, send email and provide support, acting on our instructions under contract.
• Authorities and advisers where the law requires it or to protect our rights, users or the public.

5. Transfers outside the UK

Some of these providers are based in, or process data in, the United States or elsewhere outside the UK. Where this happens we rely on safeguards approved under UK data protection law, such as the UK Extension to the EU-US Data Privacy Framework or the International Data Transfer Agreement/Addendum.

6. Cookies

We use cookies and similar technologies. Strictly necessary cookies (for example to keep you signed in, protect forms and remember your cookie choice) are always set. Analytics and advertising cookies from Google are only set if you accept them in our cookie banner, in line with PECR.

You can change your choice at any time by clearing your cookies, and you can block or delete cookies in your browser settings. Blocking necessary cookies may stop parts of the site working. Google explains how it uses data and how to opt out at policies.google.com/technologies/partner-sites and tools.google.com/dlpage/gaoptout.

7. How long we keep your information

We keep your information only as long as needed for the purposes above. Account details are kept while your account is open and deleted or anonymised after you close it, except where we must keep certain records (for example payment records for tax purposes, normally 6 years) or need them to deal with a dispute or report. Expired listings are retained for a limited period so you can renew them, then removed.

8. How we protect your information

We use appropriate technical and organisational measures, including encrypted connections (HTTPS), hashed passwords, optional two-factor authentication and passkeys, and restricted access to systems. No online service is completely secure, so please use a strong, unique password. If a breach is likely to result in a risk to your rights and freedoms we will notify the ICO within 72 hours and tell you without undue delay where the risk is high.

9. Your rights

Under UK data protection law you have the right to:

• be informed about how we use your data (this policy);
• access a copy of your personal data;
• have inaccurate data corrected;
• have your data erased in certain circumstances;
• restrict or object to our processing (including direct marketing, which you can stop at any time using the unsubscribe link in any email);
• receive your data in a portable format where processing is based on contract or consent;
• withdraw consent at any time, without affecting earlier processing.

To use these rights, email [email protected]. We will respond within one month. You can also edit most of your information by signing in to your account.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

10. Children

Airsoft Hub is for adults. You must be 18 or over to register or post listings, and we do not knowingly collect information from anyone under 18. If you think a child has given us their information, please contact us and we will delete it.

11. Third-party links

Our site may link to other websites. We are not responsible for their content or privacy practices, so please read their policies.

12. Changes to this policy

We may update this policy from time to time. We will post the new version here with a revised date and, where changes are significant, tell you by email or on the site.