Last updated: 7 October 2026
This policy explains what personal data TIRIDRO collects, why, who we share it with and your rights. It applies to tiridro.uk.
1. Who is responsible for your data
The data controller is Alin Bortas, trading as TIRIDRO, under the UK GDPR and the Data Protection Act 2018.
TIRIDRO is a trading name of Alin Bortas, a sole trader based in England. TIRIDRO is not a registered company.
Address: 96 Edward Avenue, Braunstone Town, Leicester, LE3 2PD, United Kingdom
Email: [email protected]
2. What we collect
- Account details: name, email address, password (stored only as a secure hash, never in plain text), phone number and town or postcode if you add them, and your profile photo. If you sign in with Google we receive your name, email address and profile picture from Google.
- What you post: listings, photos, prices, product origin or community, Reels (videos, photos, audio, YouTube links), reviews, comments and messages.
- Orders and payments: what you bought or sold, delivery address, order and refund records, and payout status. Card and bank details are handled by Stripe; we do not see or store your full card number.
- Seller checks: information needed to approve sellers and, through Stripe, identity checks required by law for payouts. We do not see your ID documents for payouts; Stripe does.
- Student Hub and Education: student cards, enrolment letters or official confirmations, institution and course, and documents you send for the Education application service. These are stored privately and seen only by authorised administrators.
- Technical data: IP address, browser and device type, pages visited, and security logs. We use this to keep the site secure, stop fraud and spam, and understand which pages are used.
- Reel statistics: when a Reel is watched or its button is pressed we count it. To avoid counting the same person twice we keep a short-lived code made from the IP address and browser for up to 6 hours. These statistics show numbers only, never who watched.
- Newsletter: your email address and the date you confirmed, if you subscribe.
- Messages to us: what you send us by email or through the site.
3. Why we use it and our legal basis
- To run your account, listings, Reels, chat, basket, orders, payouts and returns β contract.
- To check sellers and Student Hub eligibility, prevent fraud and keep the site safe β legitimate interests and, where required, legal obligation.
- To keep order, payment and tax records β legal obligation.
- To send service emails (verification, orders, messages, approvals) β contract.
- To send the newsletter β consent, which you can withdraw at any time with the unsubscribe link.
- To improve TIRIDRO using statistics β legitimate interests.
4. What other people can see
Listings (photos, title, price, town, description) are public so buyers can find them. To protect members, visitors who are not signed in do not see sellers’ names, profiles, contact details, or the names of reviewers and Reel authors. Phone numbers and email addresses typed into a description are hidden from visitors. Signed-in members can see a seller’s profile and contact them.
5. Who we share it with
We do not sell your data. We share it only with providers who help us run TIRIDRO, under contracts that protect it:
- Namecheap β web hosting and our own email address.
- Cloudflare β security and faster loading of the site.
- Stripe β payments, payouts and identity checks for sellers.
- WooCommerce (software on our own server) β basket and orders.
- Google β sign in with Google, and Gmail, which we use to send and receive email.
- YouTube β only when you press play on a YouTube Reel; the video is then loaded from YouTube’s privacy-enhanced (youtube-nocookie.com) player.
- Delivery partners (for example Sendcloud and the carrier chosen) β name, delivery address and phone number needed to deliver an order.
- AI providers (such as Anthropic and fal.ai) β only the text or photos you choose to send when you press an AI button, such as “Write with AI”.
- GTranslate β to translate pages when you choose another language.
- The other user in a deal: the buyer and seller receive each other’s details needed to complete the order, such as the delivery address.
- Police, courts or regulators when the law requires it.
6. International transfers
Some providers (for example Cloudflare, Stripe, Google and AI providers) may process data outside the UK, mainly in the USA or the EU. When they do, they use safeguards recognised under UK law, such as the UK International Data Transfer Addendum or the UKβUS data bridge.
7. How long we keep it
- Account data: while your account is open. When you close it (My account β Leave TIRIDRO) your personal details are erased and your listings and Reels are taken down.
- Order, payment, refund and tax records: 6 years, as required by UK tax law.
- Student verification documents: only as long as needed for the check and to deal with any misuse.
- Security logs and visit records: normally up to 12 months.
- Newsletter: until you unsubscribe.
8. Your rights
You can ask to see your data, correct it, delete it, receive a copy, restrict or object to how we use it, and withdraw consent. Email [email protected]; we reply within one month. If you are unhappy with our answer you can complain to the Information Commissioner’s Office (ICO): ico.org.uk, 0303 123 1113.
9. Security
The site uses HTTPS, passwords are stored as secure hashes and private documents are kept in protected storage. No system is perfectly safe, so please use a strong password and never share one-time codes.
10. Children
TIRIDRO is for people aged 18 and over. We do not knowingly collect data from children; if you believe a child has created an account, please tell us.
11. Cookies
How we use cookies is explained in our Cookie Policy.
12. Changes
We update this policy when TIRIDRO changes. The date at the top shows the latest version.