Privacy policy

Who we are

Restitch (“we”, “us”) runs the Restitch marketplace for buying and selling pre-loved clothing. We are the data controller for the personal data described here. Contact: support@restitch.online.

Data we collect

Account data: email address, username, display name, profile photo and bio.

Listing data: photos, descriptions, prices and other details you publish.

Transaction data: orders, shipping addresses, offers and reviews.

Messages you send to other members through Restitch.

Technical data: device, browser, IP address and essential cookies or local storage needed to run the service.

Why we use it (legal bases)

To provide the marketplace and process orders — performance of a contract.

To keep Restitch safe, prevent fraud and enforce our rules — legitimate interests.

To meet tax, accounting and legal obligations — legal obligation.

For optional cookies and marketing — your consent, which you can withdraw at any time.

Who we share it with

Other members, where needed for a sale (e.g. a seller sees the buyer's shipping address).

Service providers who host our app, store data, process payments, deliver email and power AI listing suggestions, under data processing agreements.

Stripe processes payments and seller identity verification. EasyPost and USPS receive shipping details needed for postage and delivery. If you use address suggestions, the address search you enter is sent to Google Places.

Authorities, where the law requires it.

We do not sell your personal data.

International transfers

Your data may be processed outside your country, including in the United States. Where data from the EU/EEA or UK is transferred, we rely on safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep account data while your account is open. Order records are kept as long as tax and accounting laws require. You can delete your listings at any time and ask us to delete your account.

Your rights

EU/EEA and UK (GDPR): access, correction, deletion, restriction, portability, objection, and withdrawing consent. You may also complain to your local data protection authority.

California (CCPA/CPRA) and other US states: to know, delete and correct your data, and to opt out of sale or sharing — we do not sell or share data for cross-context advertising.

To use any right, email support@restitch.online. We reply within 30 days.

Children

Restitch is not for children under 16. We do not knowingly collect their data.

Security

We use encryption in transit, access controls and private storage for photos. No system is perfectly secure, so please use a strong password.

Changes

We'll post updates here and tell you about significant changes.