Privacy policy
GPUSED LTD – PRIVACY POLICY
Last updated: 28 June 2026
This Privacy Policy explains how GPUsed Ltd collects, uses, stores and shares personal information when you visit the GPUsed website, place an order, contact us, request a quote, sell an item to GPUsed, enter a raffle or otherwise interact with GPUsed.
This policy is written for customers, sellers, website visitors, business contacts and anyone else whose personal information GPUsed may process.
1. WHO WE ARE
1.1 GPUsed Ltd is the controller responsible for personal information processed in connection with the GPUsed website, orders, customer support, seller enquiries, buy-back enquiries, part-exchange enquiries, raffles and related business activity.
1.2 In this policy, “GPUsed”, “we”, “us” and “our” means GPUsed Ltd.
1.3 Contact details:
Email: max@gpused.co.uk
Website: https://www.gpused.co.uk
1.4 You can contact GPUsed if you have questions about this policy, want to exercise privacy rights or want to make a privacy request.
2. WHAT PERSONAL INFORMATION MEANS
2.1 “Personal information” means information that identifies you or can reasonably be linked to you.
2.2 This may include your name, email address, phone number, billing address, delivery address, payment-related information, order details, messages, quote requests, device information, IP address, cookie data and other information described in this policy.
3. INFORMATION WE COLLECT
3.1 Information you provide directly
GPUsed may collect information you provide when you:
- place an order;
- create or use a customer account, if available;
- contact GPUsed by email, form, phone, WhatsApp, social media or another channel;
- request a quote;
- sell an item to GPUsed;
- arrange a part-exchange, PX or trade-in;
- enter a raffle, prize draw or promotion;
- request support, a return, a refund or warranty assistance;
- submit photos, screenshots, documents, spreadsheets or product details;
- suggest a charity, make a donation choice or ask about donations.
This information may include:
- name;
- email address;
- phone number;
- billing address;
- shipping address;
- payment and checkout details;
- order number and order history;
- product information;
- quote details;
- payout details supplied by sellers;
- item serial numbers or product identifiers;
- photos or videos you send;
- message content;
- business name, VAT details or invoice details where applicable;
- raffle entry details where applicable;
- date of birth or age confirmation where required for age-restricted promotions.
3.2 Information collected automatically
When you use the GPUsed website, some information may be collected automatically through Shopify, cookies, analytics tools, browser data, device data, server logs, pixels, tags and similar technologies.
This may include:
- IP address;
- browser type and version;
- device type;
- operating system;
- time zone;
- pages viewed;
- products viewed;
- search terms;
- referring website;
- checkout activity;
- cart activity;
- approximate location derived from IP address;
- cookie identifiers;
- interaction with adverts, emails or website content.
3.3 Information from third parties
GPUsed may receive information from third parties where needed to run the business, prevent fraud, fulfil orders or provide support.
This may include information from:
- Shopify and Shopify-related services;
- payment providers;
- PayPal or card processors where used;
- fraud-prevention and risk-screening tools;
- delivery and courier companies;
- email, communication and customer support tools;
- analytics and advertising platforms;
- accounting and invoicing systems;
- review platforms;
- social media platforms, where you contact us through them;
- business customers or suppliers.
4. WHY WE USE PERSONAL INFORMATION
GPUsed uses personal information for the following purposes:
4.1 Orders and checkout
- to process orders;
- to take payment;
- to confirm purchases;
- to arrange delivery or collection;
- to provide invoices or receipts;
- to manage refunds, returns and warranty issues;
- to screen for fraud, payment risk or abuse.
4.2 Customer support
- to reply to enquiries;
- to resolve order issues;
- to check product compatibility where requested;
- to handle complaints;
- to process returns and warranty claims;
- to keep records of support conversations.
4.3 Seller quotes, purchases and part-exchange
- to assess items you want to sell to GPUsed;
- to provide quotes;
- to arrange courier collection or postage;
- to verify model, condition, ownership and working status;
- to process seller payments;
- to keep records of buy-back, part-exchange and trade-in transactions;
- to prevent fraud or the sale of stolen, fake, blocked or encumbered items.
4.4 Business and bulk transactions
- to handle business enquiries;
- to prepare invoices, purchase orders and quotes;
- to manage credit terms where agreed;
- to communicate with business customers, suppliers and sellers;
- to comply with tax, accounting and legal obligations.
4.5 Raffles, prize draws and promotions
- to process entries;
- to verify eligibility;
- to enforce entry limits;
- to contact winners;
- to announce winner references where required;
- to manage prizes;
- to comply with promotion terms and legal requirements.
4.6 Donations
- to record optional checkout donation choices;
- to reconcile donation amounts;
- to pass donation proceeds to the nominated charity;
- to respond to charity-related questions.
4.7 Marketing and advertising
Where permitted, GPUsed may use personal information to:
- send marketing emails or updates;
- show relevant adverts;
- measure advertising performance;
- understand customer interest in products;
- improve product pages, collections and website content.
You can unsubscribe from marketing communications where an unsubscribe option is provided.
4.8 Website operation and improvement
- to operate the website;
- to remember cart and checkout settings;
- to improve website performance;
- to understand how visitors use the website;
- to detect errors, misuse or abuse;
- to maintain security.
4.9 Legal, compliance and protection
- to comply with legal, tax, accounting and regulatory obligations;
- to respond to lawful requests;
- to enforce GPUsed terms and policies;
- to protect GPUsed, customers and others from fraud, disputes or unlawful activity;
- to manage chargebacks, claims and debt recovery.
5. LAWFUL BASES FOR PROCESSING
Where UK GDPR, EU GDPR or similar data protection laws apply, GPUsed relies on one or more lawful bases depending on the situation.
5.1 Contract
We process information where needed to provide products or services, process orders, manage returns, provide quotes, buy items from sellers, arrange part-exchange or fulfil another transaction with you.
5.2 Legal obligation
We process information where needed to comply with legal, tax, accounting, consumer protection, fraud-prevention, export, sanctions or regulatory obligations.
5.3 Legitimate interests
We process information where GPUsed has a legitimate business interest and that interest is not overridden by your rights and freedoms. This may include fraud prevention, business records, customer support, website security, product improvement, review handling, debt recovery and direct marketing to existing customers where lawful.
5.4 Consent
We rely on consent where required, such as for certain marketing communications, non-essential cookies or other processing where consent is the appropriate lawful basis.
5.5 Vital interests and public task
These bases are unlikely to apply in normal GPUsed activity, but may apply in rare circumstances where the law allows or requires it.
6. WHO WE SHARE PERSONAL INFORMATION WITH
GPUsed may share personal information with trusted third parties where necessary.
This may include:
- Shopify, which powers the GPUsed online store and checkout;
- payment processors and payment providers;
- PayPal, card processors or fraud-screening providers where used;
- delivery companies and couriers;
- accounting, bookkeeping and invoicing providers;
- customer support and communication tools;
- email providers;
- analytics providers;
- advertising platforms;
- review platforms;
- IT, hosting, security and website service providers;
- legal, tax, accounting, insurance and professional advisers;
- debt collection or dispute-resolution providers where necessary;
- law enforcement, regulators, courts or public authorities where required or permitted by law;
- nominated charities where donation records need to be reconciled, usually in aggregated or limited form where practical.
GPUsed does not sell customer personal information as a standalone business activity.
7. SHOPIFY
GPUsed uses Shopify to power the online store, checkout, order processing and related ecommerce features.
Shopify may process personal information as part of providing services to GPUsed, including checkout, payments, fraud prevention, hosting, analytics and store functionality.
You can read more about Shopify’s privacy practices on Shopify’s own privacy pages.
8. PAYMENTS
GPUsed does not usually receive full card numbers when payments are processed through Shopify or third-party payment providers.
Payment providers may process payment information, fraud checks, authentication, chargebacks and related payment data in accordance with their own terms and privacy notices.
9. DELIVERY AND COURIERS
GPUsed shares necessary delivery information with couriers and fulfilment providers so that orders, returns, collections and seller shipments can be arranged.
This may include your name, address, email address, phone number, order details, parcel details and delivery instructions.
10. SELLER PAYOUT DETAILS
If you sell an item to GPUsed, we may process payout details provided by you, such as bank account details or payment method details.
We use this information to make payment after checks and approval, keep transaction records and resolve payment issues.
You should only provide payout details through an agreed GPUsed communication channel.
11. PHOTOS, SCREENSHOTS AND PRODUCT INFORMATION YOU SEND
If you send photos, videos, screenshots, spreadsheets or product information to GPUsed, we may use them to assess condition, verify model details, handle quotes, process support requests, investigate issues or maintain transaction records.
Do not send personal, sensitive or unnecessary information unless it is needed for your request.
12. PERSONAL DATA LEFT ON DEVICES
If you send a computer, storage drive, SSD, HDD, phone, tablet, laptop or any other data-bearing device to GPUsed, you are responsible for removing personal information before sending it.
GPUsed may erase, wipe, format, test, reuse, repair, resell or destroy data-bearing items as part of processing, but you should not rely on GPUsed to protect or recover data left on a device.
GPUsed is not responsible for personal information left on items sent to GPUsed, except where the law says otherwise.
13. MARKETING COMMUNICATIONS
GPUsed may send marketing communications where permitted by law.
This may include updates about products, offers, selling opportunities, service changes, reviews or relevant GPUsed information.
You can unsubscribe from marketing emails using the unsubscribe link where provided, or contact GPUsed.
GPUsed will not intentionally send marketing to people who have opted out, except for service or transactional messages that are necessary for an order, quote, account, support issue or legal obligation.
14. BEHAVIOURAL ADVERTISING AND ANALYTICS
GPUsed may use analytics and advertising tools to understand website performance, measure campaigns and show relevant adverts where permitted.
This may involve cookies, pixels, tags, link tracking, device identifiers or similar technologies.
Advertising and analytics partners may process information such as pages viewed, products viewed, cart activity, approximate location, device information and interaction with adverts.
You may be able to manage advertising preferences through platform settings, browser settings, cookie tools or industry opt-out tools.
15. COOKIES AND SIMILAR TECHNOLOGIES
Cookies are small files or identifiers stored on your device. Similar technologies may include pixels, tags, scripts, local storage and device identifiers.
GPUsed and Shopify may use cookies and similar technologies to:
- run the website;
- keep items in your cart;
- operate checkout;
- remember preferences;
- secure the website;
- prevent fraud;
- understand website performance;
- measure adverts;
- personalise or improve the website where permitted.
Types of cookies may include:
15.1 Strictly necessary cookies
These are needed for website function, cart, checkout, security, consent management and basic ecommerce operation.
15.2 Preference cookies
These remember settings such as location, currency, display preferences or saved choices.
15.3 Analytics and performance cookies
These help GPUsed understand how visitors use the website and improve site performance.
15.4 Advertising and marketing cookies
These may help measure advertising, understand campaign performance or show relevant adverts where permitted.
You can manage cookies through your browser settings. Blocking some cookies may stop parts of the website, cart or checkout from working correctly.
Where consent is required for non-essential cookies, GPUsed aims to collect and respect that consent through the available cookie or consent tools used on the website.
16. COOKIE EXAMPLES
The exact cookies used can change depending on Shopify, apps, payment methods, analytics settings and advertising tools. Examples may include:
- cart, checkout and session cookies for Shopify checkout and cart functionality;
- secure session cookies for store security;
- consent cookies for privacy preferences;
- analytics cookies used by Shopify or analytics tools;
- advertising cookies or pixels used by advertising platforms where enabled.
For the most accurate live cookie list, check your browser cookie settings or any cookie preference tool displayed on the website.
17. DATA RETENTION
GPUsed keeps personal information only for as long as reasonably necessary for the purposes described in this policy.
Retention periods depend on the type of information and the reason it is held.
Examples:
- order records may be kept for tax, accounting, warranty, refund, chargeback and legal purposes;
- support messages may be kept to resolve issues and keep a customer service history;
- seller quote and purchase records may be kept for fraud prevention, ownership, accounting and dispute records;
- raffle and promotion records may be kept to prove valid entry, winner selection and compliance;
- marketing records may be kept until you unsubscribe or object, subject to suppression lists;
- security, fraud and technical logs may be kept for limited periods unless needed for investigation.
GPUsed may retain some information for longer where necessary to comply with legal obligations, resolve disputes, prevent fraud or enforce terms.
18. INTERNATIONAL TRANSFERS
Some service providers used by GPUsed, Shopify or related ecommerce tools may process personal information outside the UK or EEA.
Where required, GPUsed relies on appropriate safeguards, such as adequacy regulations, standard contractual clauses or equivalent legal mechanisms used by the relevant service providers.
19. SECURITY
GPUsed uses reasonable organisational and technical measures to protect personal information.
No website, email system, payment system or online service can be guaranteed completely secure.
You should take care when sending information online and avoid sending unnecessary sensitive information.
20. YOUR RIGHTS
Depending on your location and the law that applies, you may have rights over your personal information.
These may include the right to:
- access your personal information;
- correct inaccurate information;
- ask for deletion of information;
- restrict processing;
- object to certain processing;
- request data portability;
- withdraw consent where processing is based on consent;
- complain to a data protection authority.
To make a privacy request, contact GPUsed using the contact details in this policy.
GPUsed may need to verify your identity before actioning a request.
Some rights are subject to limits, exemptions and competing legal obligations. For example, GPUsed may need to keep order records for tax, accounting, fraud prevention or legal reasons.
21. RIGHT TO OBJECT TO DIRECT MARKETING
You can object to direct marketing at any time.
You can unsubscribe from marketing emails where an unsubscribe link is provided, or contact GPUsed directly.
22. COMPLAINTS
If you have a complaint about how GPUsed handles personal information, please contact GPUsed first so we can try to resolve it.
You may also have the right to complain to the UK Information Commissioner’s Office.
ICO website: https://ico.org.uk
23. AUTOMATED DECISION-MAKING
GPUsed does not usually make decisions about customers based solely on automated processing that have legal or similarly significant effects.
Shopify, payment providers, fraud tools or advertising platforms may use automated systems to help identify fraud, payment risk, suspicious behaviour or advertising audiences.
If you believe an automated decision has affected you, contact GPUsed and we will review the matter where we are able to do so.
24. MINORS
The GPUsed website is not intended for children under 13.
GPUsed does not intentionally collect personal information from children under 13.
Some GPUsed promotions, including raffles or prize draws, may require entrants to be over 18.
If you believe a child has provided personal information to GPUsed, contact us so we can review and delete the information where appropriate.
25. DO NOT TRACK
Because there is no consistent industry standard for responding to “Do Not Track” browser signals, GPUsed does not currently alter data collection practices when such a signal is received.
You can manage cookies and tracking through browser settings, platform settings and any cookie tools available on the website.
26. LINKS TO OTHER WEBSITES
The GPUsed website may link to third-party websites, including payment providers, Shopify, review platforms, social media platforms, couriers, charities or manufacturers.
GPUsed is not responsible for the privacy practices of third-party websites.
You should read the privacy policy of any third-party site you visit.
27. CHANGES TO THIS POLICY
GPUsed may update this Privacy Policy from time to time.
The updated version will be posted on the GPUsed website with a revised “Last updated” date.
28. PLAIN ENGLISH SUMMARY
GPUsed uses personal information to run the website, process orders, arrange delivery, handle support, provide quotes, buy items from sellers, arrange part-exchange, prevent fraud, manage raffles, process optional donations, understand website performance and market products where permitted.
GPUsed shares information with trusted providers such as Shopify, payment processors, couriers, support tools, analytics tools, advertising platforms and professional advisers where needed.
You can contact GPUsed if you have a privacy question, want to exercise your rights or want to make a complaint.
END OF PRIVACY POLICY