Updated 30th March 2020
Depop’s approach to privacy
The Depop app (“App”) and website (“Site”) are run by Depop Limited a company established in England (company number 08316342) with its registered offices at 9 th Floor, 107 Cheapside, London, United Kingdom, EC2V 6DN (“Depop”, “we”, “our”, or “us”). We are committed to protecting and respecting your privacy.
Title: Aphaia Ltd
Email address: firstname.lastname@example.org
Postal address: Eagle House, 163 City Road, London, EC1V 1NR, United Kingdom
Personal information we collect about you and how we use it
We collect information from you when you voluntarily submit it to us and when you use the Site and Service. This can include information you provide when you register to use the Service, complete a form, list an item, subscribe to our mailing lists or other marketing communications or take an action on the Service (such as when you comment on or like an item, perform a search, communicate with other users of the Service, or engage in a transaction).
We also collect information about the pages you look at on our Site and Service and/or the device you use to access the Site and Service.
The list below sets out categories of personal information we collect about you and how we use that information. Unless we specifically state below that we are relying on your consent, our legitimate interests or a legal obligation to process your personal information, the lawful basis we are relying on to process your personal information is to perform a contract with you. This contract is governed by our Terms of Service. We will only rely on legitimate interests to process your personal information where your interests and fundamental rights do not override our interests.
Where we state below that we use your information to send you marketing communications, we may do so on the basis it is in our legitimate interests (where you are an account holder and we are informing you about our products and services), where we provide you with an opt-out option, or because you have consented to receiving such marketing communications from us. We will only send you marketing communications in accordance with your marketing preferences.
Contact and identity details: When you open an account with us you will be asked to provide us with your contact information such as your name, your email address, your telephone number and addresses associated with your account. We will use your contact details so that we can communicate with you directly about the products you purchase and that you sell through the Service and about queries, issues or concerns you or other users have and to send you marketing communications. As a necessary part of participating in the Service, you will also share your contact details with any buyer or seller you deal with through the Service. We may also ask you to provide copies of identification documents which we will also use along with other contact information you provide for the legitimate interests of verifying your details and helping prevent fraudulent access to the Service or use of your account.
Comments and opinions: When you contact us directly, e.g. by email, phone, post or by completing an online form we will record your comments and opinions. We will also record comments and opinions you express when responding to surveys, entering competitions, taking part in promotions we run or that you post on our community boards or other message areas. We will use your comments and opinions to in the legitimate interests of addressing your queries, issues and concerns and improving our products and services. We will also use comments and opinions you express when posting on our community boards or other message areas, responding to surveys, entering competitions or taking part in other promotions, to determine products and services that may be of interest to you and to send you marketing communications.
In-app messages: If you choose to use our in-app messaging functionality to message other users of the Service, we may access and review your messages to assist in the fulfilment of orders made through the Service, to respond to any query, issue, concern or dispute users raise and to resolve such disputes and if we have reason to believe the messages may contain evidence that you have breached our Terms of Service.
Payment and transaction information: We keep records of the products you buy, sell or exchange though the Service and the payment method you use for the transaction. We will use payment and transaction information to assist in the payment process for any product you purchase through the Service. We will use your payment and transaction information and history to determine products and services that may be of interest to you and send you marketing. We will provide your contact details to the seller of any item you purchase including your username and the name, delivery address, email address and phone number you provide at the checkout.
In order to transfer funds and process refunds in connection with a transaction via Stripe (where you have been offered this option and choose to use Stripe), you agree to provide Depop accurate and complete information about you and your Depop account. By using the payment services provide by Stripe, you hereby authorize Depop to pass to Stripe any information and payment instructions you provide (which may include name, email address, unique customer identifier, order ID, bank account details, payment card details, card expiration date, CVC code, date/time/amount of transaction, merchant name/ID and location) to the extent required to complete payments via the Service. In addition where you elect to use Stripe, limited members of our support and moderation team may have access to your name, date of birth, address, and last 4 digits of the relevant bank card, in order to process and support transactions and moderate refunds. Stripe may collect information about your use of Stripe, including information collected by way of cookies or other similar means, to the extent this is necessary to process the transactions or to satisfy security requirements.
Information provided by social networks you connect or link to our Service: If you choose to connect an account on a social network, such as Facebook, Twitter or Instagram to your Depop account you are consenting to us collecting personal information from the social network in accordance with your privacy settings on that social network. The connected social network may provide us with information such as your name, Facebook id, Twitter handle, profile picture, gender, username, user ID, age or age range, language, country, friends list, follower list and any other information you have agreed it can share. We will use the personal information provided to help create a public profile for you on our Service and, where we provide the functionality, we will also use the information provided to assist you in sharing your experiences on our Service with your friends, followers or contacts on the connected social network. We may also use the connection between the social network and our Service to provide you with updates on the social network that are relevant to any account you have with us or promotion you are taking part in. Such updates will only be provided with your consent. We will not post to your social network or to your friends, followers or contacts without your consent.
Your relationships with other users: We may collect information regarding other users that you are following on our Service which we use to prioritise items displayed to you in your search results or your timeline based on Depop’s internal algorithm and to determine other products and services that may be of interest to you. We also store information regarding any blocked or banned relationships associated with your account in the legitimate interests of enforcing our Terms of Service and managing user preferences regarding who they wish to communicate with on our Service.
Website and app login details: Where you create an account with us we will hold your user name and password details in the legitimate interests of keeping your account secure. Where you are provided with the option to log-in using a social network, for example through Facebook sign- in, we will not be provided with your password or other account login details for those accounts.
You are responsible for all actions taken with your user name and password, and we recommend that you do not disclose your user name and password to any third parties. If you lose control of your password, you may lose substantial control over your personally identifiable information and may be subject to legally binding actions taken on your behalf, so you should change such password immediately and notify us of any unauthorised access to your account.
Your preferences: We hold information about the preferences you set for notifications, marketing communications and how our site is displayed or what content is displayed to you through our Service. We will use your preference settings for the purpose of providing notifications, sending marketing communications and displaying our Service in accordance with your choices.
Information about how you connect to and use our Site and Service: We collect information about how you use our Site and Service such as the pages you view on our Site and Service, the time you access our Site and Service and how long you use it for, the website from where you came to our Site or go to after leaving our Site (if applicable) and any selections and choices you make when using our Site and Service. We also collect information about any items you have searched for, listed, purchased, sold, bookmarked, liked or shared on the Site and Service.
We, and our third party analytics providers, process this data for the following purposes:
- to provide analytics data on the use of the Service, Site and App which we use for the legitimate interests of improving our Service, Site and App;
- to show you your timeline and search results on our Service and order such results in a way that is relevant to you using Depop’s internal algorithm based on your preferences and, where you have consented to us using your location data, your location;
- to display your items to the most relevant potential buyers using Depop’s internal algorithm;
- to send you tips and other notifications where we think this will improve your user experience of the Service;
- in the legitimate interests of determining the success of our marketing campaigns;
- to send you marketing about products and services we think may be of interest to you;
- in the legitimate interests of detecting or preventing any breach of our Terms of Service.
Information about your device: We collect information about the computer, tablet, smartphone or other electronic device you use to connect to our Service. This information can include details about the type of device, unique device identifying numbers, operating systems, browsers and applications connected to our Service through the device, your Internet service provider or mobile network, your IP address and your device’s telephone number (if it has one).
Typically, the information we collect about how you use or connect to our Service is associated with your device and not you as a named individual. However, if you are logged into a registered account you have with us this information may also be associated with you directly.
We use information about your device in order to optimise the presentation and functioning of our Service to you on your device and in the legitimate interests of ensuring that banned users are not able to access the Service by creating a new account.
Information about your location: Where you give us consent, we will collect and use information about your location, sometimes together with other personal information, to provide features of the Service that are relevant to you and your location. For example, this can include allowing you to search for items that are for sale in your local area. If you change your mind about allowing us to use information about your location in the future, you can update your preferences in your device settings.
Information provided by other users: Sometimes, other users of our Service provide information that is associated with you. Other users can provide information that is associated with you such as comments, feedback and likes relating to your items and messages they send to you. Other users may also share information relating to an item they have bought from you on the Service on other social media channels which link to the Service, but this will not result in any information that was not already public, being made public. Where users of our Service want to invite you to use our Service or to share information with you about our services we will use personal information that they provide about you to assist them in doing this; we will only do this where they indicate that you have provided your consent for them to communicate with you in this way.
Information about fraudulent or criminal activity relating to your account: We will use information about fraudulent or criminal activity relating to your use of our Service for the legitimate interests of detecting and preventing fraud or crime and to comply with our legal obligations. We may monitor, including by means of AI, the information you provide to detect potential fraud or breach of Terms of Service.
We shall not request from you any personal information, which is deemed sensitive data, including without limitation, information regarding religious or other beliefs, physical and mental health details, sexual life, racial or ethnic origin, trade union membership and/or offences, and we ask users of the Service not to supply us or any other user with any sensitive personal information, given the nature of the Service and that user profiles and comments are visible by other users. Where you do provide sensitive personal information to us on the Service you hereby confirm that you are deliberately making this information public of your own volition and accept that we may request that you remove such data from the Service.
Your marketing preferences
Email - From time to time we may contact you by email with information about our products and
If you do not want us to contact you by email, you can change your email marketing preferences by emailing us at email@example.com and letting us know that you do not want to receive marketing emails from us. You can also unsubscribe from our marketing emails by clicking on the unsubscribe link in the emails we send to you.
Push notifications – where you allow us to in your operating system settings, we will send you notifications relating to the Service.
You can change your push notification preferences at any time in your account settings.
Where you have given us permission to do so, we may share your information with selected third parties so that they can provide you with information about their products and services using email.
If, after you have given us permission to share your email address with selected third parties, you change your mind, you can change your email marketing preferences by emailing us at firstname.lastname@example.org and letting us know that you do not want us to share your email address with third parties for marketing purposes.
Advertising on the Service and third party websites
We or our advertising partners may show advertisements to you on the Service or on other websites.
To do this we or our advertising partners may collect information about how you use the Service or the types of other web pages, content and ads you, or others who are using the device you connect to this Service, interact with, visit or view. The information collected might also include the IP address of the device you connect to the Service.
Such data may be exchanged between us and our advertising partners to measure the success of advertising campaigns
We or our advertising partner use the information that is collected to make sure adverts you see either on the Service or other websites or apps (where our partner has advertising space) are more relevant to you.
The techniques our advertising partners use do not use obvious identifying information such as name, address, email address or telephone number. This information is used to recognise the device you are using but not to identify you as a named individual.
You can also find out more about this type of advertising from www.youronlinechoices.com.
Information available to other users through the Service
The Service is designed to help you interact with other users of the Service. As a result of this
some of the information generated through the Service is shared with other users of the Service
as described below.
1. User profile
When you create an account on the Service a user profile will be generated for you that makes the following information publicly available: user name, country and city location, your followers and who you are following, details about the items you are selling. If you add any of the following information to your profile this will also be made publicly available: profile picture, profile description and website address. We will not directly reveal user email addresses to other users, however we may pass your email address to a seller where you have purchased an item.
2. Item listings
When you list an item for sale on the Service information you add to the listing will be made publicly available such as the item photograph, price, item description, accepted payment method and delivery options. Any comments or likes other users add to your item listing will also be made publicly available as well as any reply comments or images you post. Other users may also share a link to an item they have bought from you via the Service on other social media channels which link to the Service, but this will not result in any information that was not already public, being made public.
3. Information about your activity on the Service
Some of your activities on the Services are public by default. These activities are when you follow a user, or a user follows you, when you comment on or like an item, when you list an item for sale, when your item is sold, or when you purchase an item.
4. Social networks you connect to the Service
Where you have chosen to do so we will post updates about your use of the Service to social networks you connect to the Service on your behalf.
Information we share with third parties
We may share your personal information with the following parties:
- Law enforcement, regulators and other parties for legal reasons – third parties who we are under a legal obligation to disclose your personal information to or who we need to disclose your personal information to protect our rights, property or safety or the rights, property or safety of others, detect and investigate illegal activities and breaches of any agreement we have with you.
- Buyers of our business – buyers of Depop Limited or any of its assets may have your personal information disclosed or transferred to them as part of the sale.
We will not sell or rent your personal information to a third party for marketing or other purposes without your consent. For further information on your marketing options see the “Your marketing preferences” section above.
Although the Depop API is publicly available, we do not permit third parties to use this for any purpose at present. The Depop API handles your personal data in exactly the same way as the Service.
Information that cannot identify you
Storing and transferring your personal information
- Timeframe – We will only retain your personal information for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.To determine the appropriate retention period for personal data we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.If you have an account with us your Personal Information will be kept by us for as long as your account remains active. If you deactivate your account your personal information will be kept for a reasonable period of time after this so that we can complete any activities already initiated or where we have a need to retain your personal information for legal or technical reasons (including back-up systems) for example to retain proof of transactions for the enforcement of our rights, and to enable the other party to a transaction to access records of past purchases or sales. Following this period we will either delete the information or change it to a form that does not identify you.For details of retention periods for other aspects of your personal information please contact us at email@example.com.
- Cookies and local storage – we may store information (which may include personal information) locally on your device using cookies and other browser and application storage methods. For further information please see our Cookies Policy.
Right to access your information: You are entitled to see the information held about you and to check that we are lawfully processing it, and we shall comply with our obligations under applicable data protection legislation in relation to any request by you. We may charge you a reasonable fee or refuse to comply with your request if it is clearly unfounded, repetitive or excessive. We try to respond to all legitimate requests within one month (once we have been able to verify your identity). Occasionally it may take us longer than this if your request is particularly complex or you have made a number of requests.
Right to request correction of your information: You may ask us to make any necessary changes to ensure that the data we hold about you is accurate and kept up to date. Please keep us informed if your personal information changes during your relationship with us.
Right to request erasure of your information: In certain circumstances you may also ask us to erase personal information relating to you. We may not always be able to comply with your request for specific legal reasons which will be notified to you, if applicable, at the time of your request. You can exercise your right to delete certain personal information about you by closing your account with us, although we may need to keep some information about you in accordance with the “Storing and transferring your personal information” section above.
Right to object to processing: You may object to use processing your personal information where we are relying on a legitimate interest where you believe it impacts on your fundamental rights and freedoms. We will consider any such objection, however in some cases we may demonstrate that our legitimate grounds override your rights and freedoms. You may also object to us processing your personal information for direct marketing purposes (see “Your Marketing Preferences” above for further information about how to do this).
Right to restriction of processing: You may ask us to suspend the processing of your personal information in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Right to request the transfer of your information: You have the right to request a transfer of certain of your personal information to you or a third party of your choice, which we will provide in a structured, commonly used, machine-readable format.
Right to withdraw consent: Where we are relying on your consent to process your personal information you may withdraw this consent at any time (which you can do by changing the settings in your mobile device in relation to location data or by changing the privacy settings on your social networks in relation to information we collect from those networks).
Right to opt-out of behavioural analytics: If you do not want us to conduct behavioural analytics for the purposes of Depop’s internal algorithm used to display relevant sellers and items to you or to display your items to the most relevant potential buyers, you must close your Depop account and cease using our Service. This is because it is essential to Depop to suggest the right items and sellers to you and to display your items to the right buyers which we can only do by learning about your tastes and preferences and the types of products you list.
To exercise any of the above rights, or if you have any questions relating to your rights, please contact us by using the details set out in the “Contacting us” section below. We may need to request specific information from you when you exercise your rights to confirm your identity and to speed up our response. We may not be able to fulfil your request if we are not able to identify you.
Most of the personal information we hold about you is either available directly from viewing your account and looking back over your own activities or is available from the social networks that you have connected to our Service. If you think that there is other personal information which you think we hold, please contact us using the contact details set out in the “Contacting us” section below. Please provide as much information as you can about the personal information you are looking for and we will be happy to try and help you find it.
Links to third party sites
The Service may, from time to time, contain links to and from third party websites of our partner networks, advertisers, partner merchants, retailers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for their policies. Please check the individual policies before you submit any information to those websites.
Our policy towards children
Depop is a General Audience Site and our Service is only available to persons aged 13 and over.
The Service is not directed to persons under 13 and we do not knowingly collect personal information from children under 13. Children under 13 years of age are prohibited from providing any personal information to the Site. If you become aware that your child has provided us with personal information without your consent, then please contact us using the details below so that we can take steps to remove such information and terminate the child’s account.
Your California Privacy Rights
Pursuant to California’s “Shine The Light law (California Statute § 1798.983), California residents are entitled, once a year and free of charge, to request the disclosure of certain categories of personal information to third parties for their own direct marketing purposes in the preceding calendar year, if any. You may request this information by contacting us at firstname.lastname@example.org and indicate in the email subject line, “California Shine The Light Request.” Please include your mailing address, state of residence and email address with your request.
For California residents under the age of 18 and registered users of our App or Site, California law (Business and Professionals Code § 22581) provides that you can request the removal of content or information you posted on the App or Site. Any such request should be sent to us at email@example.com along with a description of the posted content or other information to be removed. Be advised, however, that applicable law may not permit us to completely or comprehensively remove your deleted content or for other reasons as set forth in this California law.
California Consumer Privacy Act
The California Consumer Privacy Act (CCPA), effective January 1, 2020, gives California consumers enhanced rights with respect to their personal information that is collected by businesses. First, California consumers may opt out of having their personal information sold to other persons or parties. Second, they have a right to know:
1. What specific pieces of information a business has about the consumer;
2. Categories of personal information it has collected about the consumer;
3. Categories of sources from which the personal information is collected;
4. Categories of personal information that the business sold or disclosed for a business purpose about the consumer;
5. Categories of third parties to whom the personal information was sold or disclosed for a business purpose; and
6. The business or commercial purpose for collecting or selling personal information.
In addition, California consumers can request that the personal information a business has collected about them be deleted from the business’s systems and records.
Depop does not presently sell any personal information to third parties for any purpose.
To make a “request to know” or request to delete your personal information, send us an e-mail at firstname.lastname@example.org. (Please put either “Request to Know” or “Request to Delete” in the subject heading of your email.) You may also submit these requests via an online form (available here) or by mailing your request to address in the United States:
Data Protection Officer
168 Mott Street, New York, NY 10013
We will honour these requests for US individuals whether or not you would qualify as a California consumer under the CCPA.
We will confirm receipt of your request within 10 days along with a description of what steps we will take to verify and respond. We must provide the requested information or delete your personal information within 45 days of receipt of your request but can use an additional 45 days, but we must let you know the additional time is needed.
When contacting us, we may ask you to provide certain, limited personal information, such as your name, email address and/or username to verify your request and to match with our records and systems. This is to protect against fraud. We will not retain this personal information or use it for any other purpose. And we need to search our records and systems only for the preceding 12 months.
Do Not Track
We currently do not honour browser-based Do-Not-Track signals.
Changes to this policy
Notice to you
If you reside in Australia
Our Data Protection Officer will consider the complaint and advise you of their decision in writing within a reasonable time from receipt of the complaint. If you are not satisfied after lodging a complaint with us and have given us reasonable time to respond, then you have the right to lodge a complaint with the Office of the Australian Information Commissioner - contact details here.