LEGAL

Privacy notice

Last updated: 24 September 2026

This notice explains how Buy. Scan. Sorted. uses personal information when you visit the website, join early access or use the application.

Who we are

Buy. Scan. Sorted. is operated by Steven Jackson, a sole trader. Steven Jackson is the controller responsible for the personal information described in this notice.

Email: hello@buyscansorted.com

Who may use the service?

The application is intended only for people aged 18 or over. We do not knowingly offer accounts to children.

Information we collect

Website and early access

If you join early access, we collect your first name, email address, main selling platform, marketing choice, source and the date you joined.

Account and application records

We process the identity and email connected to your account. We also store the records you choose to create, which may include purchases, stock, listing drafts, marketplace links, sales, fees, postage, returns, refunds, tax-year summaries and seller-badge progress.

Connected eBay account

If you choose to connect an eBay seller account, eBay uses OAuth to ask for your permission. Buy. Scan. Sorted. then stores an encrypted eBay refresh token, the account's immutable eBay seller identifier and the permissions eBay granted. The refresh token is used only on the server to obtain short-lived access tokens; access tokens are not saved.

With the read-only permissions shown during eBay consent, the service may retrieve your active eBay listings and relevant order or sale details so they can be staged for your review in Buy. Scan. Sorted. Imported marketplace data is kept separate from your stock records and is not silently merged into them.

Images and documents

We process item photographs, receipt images, finished-package photographs, postage proof and sale, dispute or refund evidence that you upload. Receipt images may contain payment references or other information, so please cover information that is not needed before uploading.

AI and receipt reading

When you ask us to analyse an item or receipt, the relevant image and instructions are sent to specialist AI or document-reading providers to return the requested result. Do not upload faces, identity documents, bank-card details or other unnecessary personal information.

Technical information

Our hosting, authentication and security services may process IP address, browser or device information, request logs, sign-in information and error data needed to operate and protect the service.

Why we use information and our lawful bases

• Provide the service: to authenticate you, save your records, process requested scans and generate listing drafts. This is necessary to perform our agreement with you.
• Protect and improve the service: to prevent misuse, diagnose faults and maintain security. We rely on our legitimate interests where these do not override your rights.
• Early-access and product emails: we rely on the consent you give by ticking the sign-up box. You can withdraw it at any time.
• Legal requirements: to meet legal obligations and establish, exercise or defend legal claims where necessary.

We do not sell your personal information.

Who receives information?

We use service providers for hosting, authentication, databases, file storage, email, AI item analysis and receipt reading. They may process information only as needed to provide their services to us. Our current receipt-reading service uses Microsoft Azure, and AI listing assistance uses OpenAI services.

If you follow a link to eBay, Etsy, Vinted or another marketplace, that marketplace is a separate controller and its own privacy terms apply. Buy. Scan. Sorted. does not receive live marketplace account information simply because you save or follow a listing link. It receives eBay account information only if you separately complete the eBay connection and consent process.

When you connect eBay, eBay receives the information needed to authorise and operate that connection. eBay may also send Buy. Scan. Sorted. a Marketplace Account Deletion notification. We use the immutable seller identifier in that notification only to locate and remove the matching connected-eBay data, and retain a limited non-personal processing record so that duplicate notifications can be handled safely.

International transfers

Some providers may process information outside the UK. Where required, we use recognised safeguards such as UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to approved standard contractual clauses.

How long we keep information

Application records remain available while your account is active, until you delete them or ask us to do so. This includes connected-eBay listings and order or sale data. When you use the permanent account-data deletion control, the app removes the saved records and uploaded files connected to that account, except limited information we must keep for legal, security or fraud-prevention reasons.

You can revoke Buy. Scan. Sorted.'s access from your eBay account. You can also email hello@buyscansorted.com to ask us to disconnect the account and remove the stored connection credentials and imported eBay data. If eBay sends a valid Marketplace Account Deletion notification, we remove the matching connected-eBay credentials and staged marketplace data.

Early-access details are kept while the programme is active and while you remain subscribed. If you unsubscribe, we may retain the minimum information needed to honour that choice. Technical and security records are kept only for a proportionate period.

Your rights

Depending on the circumstances, you may ask us to access, correct, erase or restrict personal information, object to certain processing, or provide eligible information in a portable format. Where we rely on consent, you may withdraw it without affecting earlier lawful processing.

Email hello@buyscansorted.com to make a request or privacy complaint. We may need to confirm your identity. We will acknowledge a data-protection complaint within 30 days and respond without undue delay.

Complaints

Please contact us first so we can try to resolve your concern. You may also complain to the UK Information Commissioner’s Office through its complaints service.

Security

We use access controls and technical and organisational safeguards designed to protect information. No online service can promise absolute security, so keep your account and email access secure and contact us if you suspect unauthorised use.

Changes

We may update this notice when the service, providers or law changes. The latest version and update date will remain available here, and material changes will be brought to account holders’ attention where appropriate.