Privacy policy

Last updated: May 2026

This policy explains what personal data Moddet collects, why we collect it, how we use it, and your rights under UK GDPR.

1. Who We Are

Moddet Ltd is the data controller for personal data collected through the Moddet platform. Registered address: 128 City Road, London EC1V 2NX, United Kingdom. Contact: hello@moddet.co.

2. What Data We Collect

We collect the following categories of personal data:

  • Identity data: name, email address, account login details

  • Transaction data: order history, payment references (we do not store full card details)

  • Communication data: emails, enquiries, and support messages sent to us

  • Technical data: IP address, browser type, device information, pages visited

  • Marketing data: preferences, responses to campaigns, email open and click data

3. How We Collect Your Data

  • Directly from you when you create an account, place an order, or contact us

  • Automatically via cookies and analytics tools when you use our website (see Cookie Policy)

  • From third-party services including Google Analytics, Klaviyo, and Meta Pixel

4. How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your orders

  • To communicate with you about your orders and account

  • To send you marketing communications where you have consented or we have a legitimate interest

  • To improve our platform using analytics data

  • To comply with our legal obligations

5. Third Parties We Share Data With

We share data with the following categories of third parties:

  • Shipturtle — our marketplace platform provider, who processes order and vendor data on our behalf

  • Payment processors — to securely process transactions (we do not store card details)

  • Google Analytics — to analyse website traffic and user behaviour

  • Klaviyo — to manage and send email marketing communications

  • Meta (Facebook/Instagram) — via the Meta Pixel, to measure ad performance and support targeted advertising

  • Individual vendors — your name, delivery address, and order details are shared with the relevant vendor to fulfil your order

We do not sell your personal data to any third party.

6. Marketing Communications

We will only send you marketing emails if you have opted in or we have a legitimate interest in contacting you as an existing customer. You can unsubscribe at any time by clicking the unsubscribe link in any email or contacting us at hello@moddet.co.

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal and accounting obligations. Typically, customer account data is retained for 6 years following your last transaction, in line with UK tax record-keeping requirements. You may request deletion of your personal data at any time by contacting hello@moddet.co. We will action deletion requests within 30 days, subject to any legal obligations that require us to retain certain data.

Children's Data

The Moddet platform is not intended for use by children under the age of 13. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@moddet.co and we will delete it promptly.

 

 

International Data Transfers

Moddet uses third party services including Shipturtle, Google Analytics, Klaviyo, and Meta that may store or process your data outside the United Kingdom or European Economic Area. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Information Commissioner's Office, to protect your data in line with UK GDPR requirements.

Our Relationship with Shipturtle

The Moddet marketplace is powered by Shipturtle, which processes certain order and vendor data on our behalf as a data processor. When you place an order on Moddet, your name, delivery address, and order details are transmitted to Shipturtle to facilitate fulfilment. Shipturtle processes this data in accordance with their own privacy policy, available at shipturtle.com. For any questions about how Shipturtle handles your data, you may contact them directly.

 

 

Targeted Advertising & Your Right to Opt Out

Moddet uses Meta Pixel to measure the performance of advertising on Facebook and Instagram and to enable interest-based advertising. If you do not wish your data to be used for targeted advertising purposes, you can opt out at any time by:

  • Adjusting your cookie preferences via the Cookie Settings link in our website footer

  • Visiting your Facebook or Instagram ad preferences settings directly

  • Contacting us at hello@moddet.co to request we stop processing your data for this purpose

8. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

  • The right to access the data we hold about you

  • The right to correct inaccurate data

  • The right to request deletion of your data (subject to legal obligations)

  • The right to restrict or object to processing

  • The right to data portability

  • The right to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at hello@moddet.co. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. However, no data transmission over the internet can be guaranteed as completely secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice on the platform.