Privacy Policy

Who we are

BART is a marketplace that helps users exchange skills and services. We act as the data controller for personal information processed through the platform.

Information we collect

We collect information you provide directly, including account details (email, display name), profile details (bio, city, skills), listing content, uploaded images, messages, and trade activity.

We also collect technical data such as IP address, device/browser information, and usage events needed for security, fraud prevention, performance, and analytics.

How we use information

We use your data to operate the service, authenticate users, match listings, support messaging and trade workflows, prevent abuse, and send transactional notices such as sign-in and trade updates.

Lawful basis (UK GDPR)

We process personal data on the basis of contract (to provide the platform), legitimate interests (security and service improvement), legal obligations, and consent where required (for example, optional marketing communications).

Cookies and tracking

We use essential cookies for authentication and session management. We may also use analytics or performance cookies to improve the product. Where required by law, we request consent before enabling non-essential cookies.

Sharing and third parties

We share data with trusted service providers that help us run BART, including infrastructure, email delivery, and app hosting providers. This currently includes Supabase, Resend, and Vercel. These providers process data under contractual safeguards and only for authorised purposes.

International transfers

Some providers may process data outside the UK. Where this occurs, we use appropriate transfer safeguards such as adequacy regulations or standard contractual clauses and related protections.

Data retention

We retain account and marketplace data while your account is active. We retain limited records after account closure where needed for legal, tax, fraud prevention, dispute handling, and security purposes.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or objection to processing. UK users may also complain to the UK Information Commissioner's Office (ICO).

If you are a California resident, you may also have rights under CCPA/CPRA, including rights to know, delete, and correct personal information and rights related to sensitive personal information.

Security

We apply technical and organisational controls designed to protect data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

BART is intended for adults and is not directed to children under 18. We do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated in-product or by email where appropriate. The date above reflects the latest revision.

Contact

Privacy requests and questions: privacy@bart.trade