Privacy Policy
Last updated: 01/11/2026
This policy explains how nixomarket ("we", "us") collects and uses personal data when you use https://nixomarket.com. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the UK GDPR.
Who we are (data controller)
- Controller: Nicu Adrian Ionita … trading as nixomarket
- Address: 10 Denham Green Lane , UB9 5LD
- Phone: +447435344589
- Company registration: not applicable (sole trader, not a registered company)
- VAT number: not registered for VAT
- Contact: contact@nixomarket.com
- Data protection contact: privacy@nixomarket.com
What data we collect
- Account data: name, email address, password (stored only as a secure hash), account type (individual or company), company name and VAT number for company accounts, country, city, postal code and phone number.
- Listings: the text, prices, location and photos you publish.
- Messages: messages you exchange with other users through the site.
- Plan requests and payments: the plan you requested, amounts and payment references.
- Consent records: when you accepted the terms and this policy, and your marketing choice.
- Technical data: a session cookie that keeps you signed in, and security logs (IP address of important account actions).
- Website design requests and agreements: when you ask for a website, we keep your request and create an agreement with your name, email, phone, address, company name (for businesses), the work and prices you chose and the boxes you ticked, to answer you and carry out the agreement (contract). The agreement can be opened with a private link that we email to you. Agreements are kept for 6 years, the time during which claims about a contract can be made (legal obligation and legitimate interest). If we prepare a website agreement for you individually (for example after a call or a message), we use the details you gave us for it, email it to you and keep it in the same way.
- Invoices and receipts: for each payment of a website agreement, and for every plan or upgrade you pay on the site, we make an invoice or receipt with your name, email, address and company name (if you gave them), what you paid for and the amount, and email it to you as a PDF. We keep invoices for 6 years, because UK tax law requires us to keep business records (legal obligation, Art. 6(1)(c)); they are kept for that time also if you delete your account.
- Promo video requests: when you ask for a promo video, we keep your name, email, phone, business name, the texts you write and the photos and logo you upload, to answer you and make the video (steps before a contract / contract). Only our team can see the photos; they are stored privately and deleted after 6 months, or earlier when your request is deleted.
- Spam protection: when you send the contact form, a report or a website quote request, we keep the IP address it came from for 30 days, to find and stop spam and abuse (legitimate interest). If an address or email is used for spam or abuse, we may block it from the site; it is then kept only while the block lasts, at most 1 year unless the abuse continues. Messages with links that look like spam may be held for checking and are deleted after 30 days.
- Visit statistics: we count page views and daily visitors to see how the site is used. We do this without cookies and without storing IP addresses: each visitor is counted with an anonymous code that changes every day and is deleted after 2 days. Only daily totals are kept (legitimate interest).
- Approximate location of visits: when you open the site, our server looks up from your IP address the approximate country and city it belongs to (for example "Manchester, United Kingdom"), in a database kept on our own server (IP to City Lite by DB-IP, CC BY 4.0), so your IP address is not sent to anyone for this. The IP address is used only for this look-up and is not stored; we keep only the number of visitors per country and city per day, which cannot identify you, for up to 13 months. We use it to know which countries and cities our visitors and customers come from, to plan our services and ads (legitimate interest, Art. 6(1)(f)). The location is approximate (often the town of your internet provider), it is never used to make decisions about you and it is not shared. You can object at any time by writing to us.
- AI chat assistant: the help chat on the site can be answered by an AI assistant, Claude, provided by Anthropic PBC (USA) as our processor. What you type in the chat and the page you are on are sent to Anthropic only to write the answer; Anthropic does not use this data to train its models. Transfers to the USA are covered by standard contractual clauses (and the UK addendum). We keep chat conversations for the number of days shown in the chat window (30 days unless we say otherwise), linked to your account if you are signed in, without your IP address, to answer questions and improve the assistant, then delete them automatically (legitimate interest). If you ask for a call back, we save your name, phone number and the conversation in our contact inbox to call you (steps before a contract / legitimate interest). Please do not type sensitive personal data in the chat.
- Google Ads conversion measurement (only with your consent): if you press Accept in the cookie banner, the Google Ads tag of Google Ireland Ltd records, with cookies and your browser's IP address and details, that a visit coming from one of our ads led to a new account or a website design request. Google receives this data as an independent controller and may transfer it outside the UK/EEA under standard contractual clauses. We use it only to measure our ads, not to show you personalised ads, and we do not use Google Analytics (consent, Art. 6(1)(a)). You can withdraw your consent at any time with Cookie settings at the bottom of every page.
Why we use it (legal bases)
| Purpose | Legal basis |
|---|---|
| Running your account, publishing listings, messaging | Contract (Art. 6(1)(b) GDPR) |
| Moderation, fraud prevention, site security | Legitimate interests (Art. 6(1)(f)) |
| Invoices and accounting records for paid plans | Legal obligation (Art. 6(1)(c)) |
| Counting sellers' sales and reporting sellers who reach the limits to HMRC | Legal obligation (Art. 6(1)(c)) |
| Marketing emails (only if you opt in) | Consent (Art. 6(1)(a)) |
| Measuring our Google Ads (only if you accept the cookies) | Consent (Art. 6(1)(a)) |
Who can see your data
Your listings, your public name, city and country are visible to everyone. Your phone number is shown on your listings only if you allow it in your profile. Your email address is never shown publicly. We do not sell personal data. Sellers who reach the yearly limits of the digital platform rules are reported to HMRC (see “Tax reporting of sellers” above). We use a hosting provider that processes data on our behalf under a data processing agreement. We send emails (messages from other users, notices about your ads and plan, password reset links) through an email delivery provider that acts on our behalf under a data processing agreement. You can turn off notification emails in your profile.
How long we keep it
We keep your account data while your account exists. When you delete your account, we delete your profile, listings, photos, favourites and messages straight away. Payment records are kept for as long as accounting law requires, without your profile. Sales counted for tax reporting, and the details sellers gave for it, are kept for 5 years after the end of the year they are about. Contact form messages are kept for up to 730 days and security logs for up to 365 days.
Your rights
You have the right to access, correct, delete and export your data, to object to or restrict processing, and to withdraw consent at any time. You can download all your data and delete your account yourself in My account → Privacy. For anything else, write to privacy@nixomarket.com. You also have the right to complain to your local data protection authority.
Cookies
We use cookies that are strictly necessary for the site to work and, only if you accept them, Google Ads cookies to measure our ads. See the Cookie Policy.
Changes
We will post any changes to this policy on this page and tell registered users about important changes.
Live ads may also be shared on our Facebook Page: the post shows the ad title, price, place, first photo and a link to the ad. The seller's name and contact details are not posted. On Facebook, Meta Platforms Ireland Ltd processes data under its own privacy policy.
Reviews: after you buy a plan or your ad goes live, we may share your name, email address and a reference with Trustpilot A/S, so that it can invite you to review us. Trustpilot processes this under its own privacy policy and you can ignore or opt out of its invitations. Members who turned off notification emails are not invited.
- Buy now orders: when you buy with Buy now, we keep the order (item, amounts, commission, delivery choice, status) and share your name, email and the delivery address and phone number you enter at checkout with the seller, so they can send you the item (contract). The card payment itself is processed by Stripe for the seller; we never see your card number. When you connect a Stripe account as a seller, Stripe collects your identity and bank details directly under its own privacy policy; we only receive your Stripe account ID and whether it can take payments. Order records are kept for as long as accounting law requires; delivery addresses and phone numbers are removed from them after 1 year.
- Auctions: when you bid, we keep the item, the most you offered, the time and the status of each bid, to run the auction and make the sale (contract). Other members see only a masked form of your name (for example J***n) and the current price; the seller and the winner see each other's details only through the Buy now order. Bids are deleted with the ad or with your account, and you can download them in My account → Privacy.
- Company accounts: the company name, business address, phone number, business email and registration and VAT numbers are shown publicly on the company's ads and seller page (Business seller information), because consumer law asks businesses to give them to buyers (legal obligation). The phone and email of individual members are not shown.
- Tax reporting of sellers: for every seller we count the sales paid with Buy now and the items marked as sold to a buyer from the site (item, price, date), per calendar year. Only from sellers who get close to the limits of the UK and EU digital platform rules (30 sales or €2,000 in a year) we ask for their full name, date of birth, home address, National Insurance or tax identification number (or, without one, place of birth) and VAT number; for businesses the legal name, address, registration and tax numbers. After the end of each year we report the sellers who reached the limits, with these details and their sales and our fees per quarter, to HM Revenue & Customs (HMRC), which may pass the information of sellers living in the EU to the tax authority of their country; the seller gets a copy. This is a legal obligation (Art. 6(1)(c) UK GDPR / GDPR: the Platform Operators (Due Diligence and Reporting Requirements) Regulations 2023 and Council Directive (EU) 2021/514). Only our team can see these details. We keep the sales records and the details for 5 years after the end of the year they are about, as the law requires, also if the account is deleted, and then delete them.
- Identity check for individual sellers: before an individual can sell items, we ask for a photo of an identity document and a recent proof of address, and the home address they enter, to check that sellers are who they say they are and to prevent fraud (legitimate interest and legal obligations against fraud). Only our team can see the documents. They are stored privately, never shown to other users, and deleted as soon as we have checked them; we keep only the result (verified or not) and the date.