PRIVACY POLICY

CNC Marketplace Ltd Registered in England and Wales Company Registration Number: 16351895 VAT Registration Number: 489741922 Contact Email: info@cncmarketplace.uk Website: www.cncmarketplace.uk

Last updated: April 2026


1. INTRODUCTION

1.1 CNC Marketplace Ltd (“CNC Marketplace”, “we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy.

1.2 This Privacy Policy explains how we collect, use, store, share and protect your personal data when you visit and use the CNC Marketplace website (“the Platform”) or use any of our services.

1.3 This Privacy Policy should be read alongside our Terms and Conditions and Cookie Policy, which also govern your use of the Platform.

1.4 We reserve the right to update this Privacy Policy at any time. Any changes will be published on this page with an updated date. We encourage you to review this Policy periodically.

1.5 By using the Platform you confirm that you have read and understood this Privacy Policy and consent to the use of your personal data as described herein.


2. WHO WE ARE

2.1 CNC Marketplace Ltd is the data controller responsible for your personal data collected through the Platform.

2.2 We are registered in England and Wales with company registration number 16351895.

2.3 If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at info@cncmarketplace.uk.


3. WHAT DATA WE COLLECT

3.1 We may collect and process the following categories of personal data:

Identity Data — including your full name, job title and company name.

Contact Data — including your email address, telephone number and business address.

Account Data — including your username, password and account preferences.

Transaction Data — including details of products and services you have purchased from us, payment amounts and transaction history.

Listing Data — including machine descriptions, photographs, videos and pricing information submitted by sellers.

Technical Data — including your IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform, and other technology on the devices you use to access the Platform.

Usage Data — including information about how you use the Platform, including pages visited, search queries made and time spent on the Platform.

Marketing & Communications Data — including your preferences for receiving marketing communications from us and your communication preferences.

Financial Data — please note that we do not store your full payment card details. All payment processing is handled securely by Stripe. Please refer to Stripe’s privacy policy for details of how they handle your financial data.


4. HOW WE COLLECT YOUR DATA

4.1 We collect personal data through the following means:

Direct interactions — when you register for an account, purchase a product or service, submit a listing, complete a contact form, correspond with us by email or telephone, or otherwise interact with the Platform.

Automated technologies — when you browse the Platform, we may automatically collect Technical Data and Usage Data through cookies and similar tracking technologies. Please refer to our Cookie Policy for further details.

Third parties — we may receive personal data about you from third parties including payment processors such as Stripe, analytics providers and search engine providers.


5. HOW WE USE YOUR DATA

5.1 We will only use your personal data where we have a lawful basis to do so. The lawful bases we rely on are:

Performance of a contract — where processing your data is necessary to provide you with the products or services you have requested.

Legitimate interests — where processing your data is necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

Legal obligation — where processing your data is necessary to comply with a legal obligation.

Consent — where you have given us explicit consent to process your data for a specific purpose.

5.2 We use your personal data for the following purposes:

To register and manage your account on the Platform. To process and fulfil orders for products and services. To publish and manage your machine listings on the Platform. To process payments and manage billing securely through Stripe. To communicate with you regarding your account, listings, orders and enquiries. To send you marketing communications where you have opted in to receive them. To improve and optimise the Platform and our services. To detect, investigate and prevent fraudulent or unlawful activity. To comply with our legal and regulatory obligations. To enforce our Terms and Conditions.


6. MARKETING COMMUNICATIONS

6.1 Where you have provided your consent, we may contact you by email with information about our products, services, promotions and platform updates that we believe may be of interest to you.

6.2 You may opt out of receiving marketing communications from us at any time by clicking the unsubscribe link in any marketing email or by contacting us at info@cncmarketplace.uk.

6.3 Please note that even if you opt out of marketing communications, we will continue to send you essential service communications relating to your account, listings and purchases.

6.4 We will never sell your personal data to third parties for their own marketing purposes.


7. SHARING YOUR DATA

7.1 We may share your personal data with the following categories of third parties:

Payment processors — Stripe, for the purpose of processing payments securely on our behalf.

IT and platform service providers — companies that provide hosting, website infrastructure and technical support services to CNC Marketplace.

Analytics providers — companies that help us understand how users interact with the Platform, such as Google Analytics.

Referral partners — where you have requested an introduction to one of our referral partners, such as transport or finance providers, we will share relevant contact details with that partner for the purpose of fulfilling the introduction. We will always inform you before making such an introduction.

Legal and regulatory authorities — where we are required to disclose your data by law, court order or regulatory requirement.

7.2 We require all third parties to respect the security of your personal data and to treat it in accordance with applicable data protection law. We do not permit third parties to use your personal data for their own purposes.


8. INTERNATIONAL DATA TRANSFERS

8.1 Some of our third party service providers may be based outside the United Kingdom. Where we transfer your personal data outside the UK, we ensure that appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.

8.2 If you would like further information about international data transfers, please contact us at info@cncmarketplace.uk.


9. DATA RETENTION

9.1 We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements.

9.2 As a general guide, we retain personal data as follows:

Account data — for the duration of your account plus 6 years following closure of your account. Transaction and billing data — for 6 years following the date of the transaction, in accordance with HMRC requirements. Listing data — for the duration of the listing plus 2 years following the listing’s expiry or removal. Marketing data — until you withdraw your consent or opt out of marketing communications.

9.3 In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may retain such anonymised data indefinitely.


10. YOUR RIGHTS

10.1 Under UK GDPR, you have the following rights in relation to your personal data:

Right of access — the right to request a copy of the personal data we hold about you.

Right to rectification — the right to request that we correct any inaccurate or incomplete personal data we hold about you.

Right to erasure — the right to request that we delete your personal data in certain circumstances.

Right to restrict processing — the right to request that we restrict the processing of your personal data in certain circumstances.

Right to data portability — the right to request that we transfer your personal data to you or a third party in a structured, commonly used format.

Right to object — the right to object to our processing of your personal data where we are relying on legitimate interests as our lawful basis.

Right to withdraw consent — where we are processing your personal data on the basis of your consent, you have the right to withdraw that consent at any time.

10.2 To exercise any of your rights, please contact us at info@cncmarketplace.uk. We will respond to all legitimate requests within 30 days.

10.3 You will not be required to pay a fee to exercise your rights. However, we may charge a reasonable fee or decline to comply where requests are clearly unfounded, repetitive or excessive.

10.4 You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters, at www.ico.org.uk.


11. DATA SECURITY

11.1 We have implemented appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, alteration or disclosure.

11.2 All payment transactions are encrypted and processed securely through Stripe. We do not store full payment card details on our systems.

11.3 Access to your personal data is restricted to those employees, contractors and third parties who have a legitimate business need to access it.

11.4 We have procedures in place to deal with any suspected personal data breach and will notify you and the ICO of a breach where we are legally required to do so.

11.5 Whilst we take all reasonable steps to protect your personal data, please be aware that the transmission of data over the internet is not completely secure. Any transmission is at your own risk.


12. COOKIES

12.1 Our Platform uses cookies and similar tracking technologies to distinguish you from other users and to improve your experience on the Platform.

12.2 For detailed information about the cookies we use and how to manage your cookie preferences, please refer to our Cookie Policy available on the Platform.


13. THIRD PARTY LINKS

13.1 The Platform may contain links to third party websites. This Privacy Policy applies only to our Platform and we are not responsible for the privacy practices of any third party websites. We encourage you to review the privacy policies of any third party websites you visit.


14. CHILDREN’S PRIVACY

14.1 The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at info@cncmarketplace.uk and we will take steps to delete that data.


15. CONTACT US & COMPLAINTS

15.1 If you have any questions, concerns or complaints about this Privacy Policy or how we handle your personal data, please contact us at:

CNC Marketplace Ltd Company Registration Number: 16351895 Email: info@cncmarketplace.uk Website: www.cncmarketplace.uk

15.2 We take all privacy concerns seriously and will endeavour to respond to your enquiry within 30 days.

15.3 If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

Information Commissioner’s Office Website: www.ico.org.uk Telephone: 0303 123 1113