Skip to content
GarageSale
Log in

Privacy policy

Last updated: 7 November 2026

Who we are

This site is run by Base IT Support LTD (Oliver Bocking) ("we"). We decide how personal data is used on it and are responsible for it under the UK GDPR. We use the site to list items for sale on eBay and to deal with the people who buy them.

To ask a question about this policy or your data, write to info@bits.si.

What personal data we use

If you buy from us, message us or make an offer on eBay. We receive from eBay, and keep, your eBay user id, your name and delivery address, the messages you send us, and the details and payment status of your order. We add the tracking number of your parcel, and our own replies and feedback.

If you have an account on this site. Your sign-in email address, your name, a profile picture if you add one, your password (stored only as a one-way hash), and a record of your sign-ins and of what you do on the site (an audit record).

Technical data. Your IP address and browser identifier (user agent), in our web server and application logs and in audit records of sign-in and similar actions.

We do not ask you for any of this data directly if you are an eBay buyer: it comes from eBay. An email address and password are needed to have an account; without them you cannot sign in. We do not use any of it for marketing.

Why we use it, and our legal basis

  • To complete and support a sale (send the parcel, answer your messages, handle a return or a claim): it is needed for the contract of sale with you.
  • To run and protect the site (accounts, sign-in, logs, finding faults and misuse): our legitimate interests in running a secure service.
  • To keep financial records: a legal obligation. We keep the record of each sale (amounts, dates, items and fees) for six years for tax purposes. Once your details have been deleted as described below, that record no longer identifies you.

Who we share it with

  • eBay, where the sale is made. eBay has its own privacy policy and is responsible for what it holds.
  • AI service providers. To draft replies to your messages and to write our listings, we may use AI services. If we do, the text involved (which can include what you wrote to us) and the listing's details and photos are sent to one of these providers: OpenAI, Z.ai, Alibaba Cloud (Qwen, Model Studio), OrcaRouter or Ollama Cloud. A person at our end approves every reply before it is sent to you: no decision about you is made by AI alone. These providers may process data outside the UK, under safeguards such as an adequacy decision or the UK addendum to standard contractual clauses, as set out in their terms.
  • Hosting. The site runs on our own servers.

We do not sell personal data.

How long we keep it

  • Buyer data (user id, name, address, tracking number, messages, offer notes and AI drafts that quote them) is deleted 90 days after the sale is completed or the listing ends, whichever is later. A new message from a buyer moves that date on.
  • If eBay tells us that a buyer has closed their eBay account, we delete that buyer's data.
  • After deletion, the sale record stays without the buyer's identity (see "Why we use it").
  • Logs are kept for a short time, 30 days at most. Audit records are an append-only security record kept without a fixed end date; the buyer details they hold are removed with the rest of the buyer data.
  • Backups. Our nightly backups are kept for up to about six months, so deleted buyer data can remain in an older backup until it expires. If a backup is ever restored, deletions are repeated before the site starts again.
  • Account data is kept while the account exists. A closed account is disabled, not deleted, so that the record of what was done on the site stays attributed: its email address, name and audit trail are kept. On request we remove what is not needed for that record, such as the profile picture.

Your rights

You can ask us for a copy of your personal data, to correct it, to delete it, to restrict how we use it, or to object to how we use it where we rely on legitimate interests. Where we use data under a contract, you can also ask for it in a portable form. We will do what we can (we can delete a buyer's data and a profile picture, for example) and explain where we cannot, such as the audit record of a closed account. To use any of these rights, or to make any other request, email info@bits.si. We will reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (the ICO), the UK data protection regulator, at ico.org.uk. We would like the chance to put things right first.

Cookies

We set only the cookies the site needs to work: a session cookie that keeps you signed in and a security cookie that protects forms against forgery. We do not use advertising or tracking cookies, so no consent banner is needed. Your light or dark display choice is saved in your own browser, not sent to us.

Changes to this policy

We may update this policy when what we do changes. The date at the top shows when it was last changed, and the current version is always on this page.