Drip Works Limited (“we”) runs Drip Works. We are the controller of the personal data described here. Contact us at [email protected].
What we collect
- Account details: your name, email address and password (stored only as a secure hash), or your Google account identifier if you sign in with Google.
- Consent records: when you confirmed you are 18 or over, accepted our terms, and your marketing email choice.
- Security data: sign-in sessions, IP address and device/browser information, used to keep accounts secure and prevent abuse.
- Profile and activity: your handle, bio, photos, interests, listings, saved items, follows, reports and blocks.
- Seller information: details from your seller application, sample photos and any authenticity evidence (kept private and seen only by our team).
Why we use it
- To create and run your account and send service emails such as sign-in codes (contract).
- To keep the service secure and prevent fraud (legitimate interests).
- To send marketing emails, only if you opt in (consent — withdraw any time).
- To meet legal obligations, for example record keeping.
Who we share it with
Service providers that host and operate Drip Works on our behalf: Northflank (application hosting, UK), Neon (database, UK), Amazon Web Services (photo storage and delivery, UK), Cloudflare (domain and email routing), Resend (email delivery) and Google (only if you choose Google sign-in). We do not sell your personal data.
How long we keep it
For as long as your account is open, then for a limited period afterwards where needed for legal, security or dispute purposes.
Your rights
You can ask to access, correct, delete or export your data, object to or restrict processing, and withdraw consent. You can also complain to the Information Commissioner's Office (ico.org.uk).