Offa Privacy Notice
Last Updated: February 2026
Offa Labs Ltd ("Offa", "the Company", "we", "us" or "our") respects your privacy and is committed to protecting your personal data. This privacy notice informs you how we process your personal data when you use our website and app and tells you about your privacy rights under applicable data protection laws, including the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
Controller for Personal Data
A "controller" is an organisation that determines the purposes and means of processing personal data. Unless we notify you otherwise, Offa is the controller of your personal data for our app and website.
Scope
This privacy notice applies to the processing of personal data by Offa in connection with:
- Users: Where we provide our marketplace services to you (buyer or seller via our app).
- Website visitors: Anyone browsing www.offa.app or interacting with our content online.
- Suppliers and service providers: Where you provide products or services to Offa to help us operate, maintain or enhance our platform.
Lawful Bases: How We Use Your Personal Data
We process your personal data only where permitted by law. Depending on the nature of our relationship, we rely on the following bases:
- Consent: For example, where you download our app, for cookies/analytics and for marketing.
- Performance of a contract: For example, to provide you with the marketplace features and services you request.
- Legal obligation: Where we must comply with a law, regulation or court order.
- Vital interests: In emergencies to protect life or safety.
- Legitimate interests: To improve our app, ensure safety, combat fraud, support customer service and operate as an effective business, provided your rights do not override these interests.
How We Collect Your Data
Directly from you
When you sign up, create a listing, send messages or interact with the platform.
Automatically
Through app telemetry, cookies (website), analytics and error reporting.
From third-party processors
Our infrastructure, analytics and AI providers capture data as part of providing their services to us.
From other users
Messaging, offers or reviews shared with you by other users.
Minimum Age and Children's Data
Offa is intended solely for individuals aged 18 and over and is not designed for or directed at children. We do not knowingly collect personal data from anyone under 18. If we become aware that an account belongs to a minor, the account will be terminated and associated personal data deleted.
User (Marketplace) Processing Information
When you use Offa as a buyer or seller, we process various types of personal data to provide our marketplace services, support your account and ensure trust and safety on the platform.
Categories of personal data we process
- Identity Data: Display name, username, profile photo, short bio, date of birth (optional), gender (optional).
- Contact Data: Email address, phone number, user ID.
- Location Data: Pickup addresses/locations for listings (full addresses stored, maps show approximate area only).
- Profile Data: User settings and preferences, favourites, ratings and reviews.
- Marketplace Content: Listings, chat messages, transaction history, offers, moderation reports.
- Technical Data: IP address, device information, app usage logs, error and crash logs.
- Usage Data: Clicks, screen navigation, analytics, session replay (with masking).
- Marketing and Communications Data: Preferences for receiving information from us.
- AI Data: Excerpts from public text or chats (pseudonymised) sent to external AI moderation services. We never send entire chat histories and personal identifiers are removed where possible.
Note: Offa displays only approximate, randomised locations for listings; exact addresses are never publicly shown. Phone numbers are not shared or exposed by the platform. Users may voluntarily share their contact information through the chat feature.
Use of Artificial Intelligence
We use AI services to help us moderate marketplace listings, flag suspicious communications and provide non-decision-making features (e.g. suggesting categories, detecting price intent in chat). Only the minimum necessary pseudonymised data is sent to these external providers. Most checks occur on-device or with personal identifiers removed. No automated decisions with legal or similar significant effects are made about you. All material decisions are reviewed by our staff.
How We Disclose Personal Information
We do not sell or rent personal data for advertising. We may share your personal data as follows:
Who we share data with
- Internally: Employees and contractors on a need-to-know basis.
- With other Offa users: Limited information (display name, profile details, listing or chat content) shared where necessary for transactions.
- With processors and service partners: Trusted vendors for hosting, analytics, AI moderation, and API services.
- With legal advisers: Auditors, insurers and consultants bound by duties of confidentiality.
- Where required by law: To comply with legal requests, regulations or court orders.
- In business transactions: If we enter a merger, acquisition or restructuring.
International Transfers
We may transfer and process your personal data outside of the United Kingdom / European Union. When we do so, we ensure the same level of protection as afforded by the UK Data Protection Act 2018 and the UK GDPR, using approved safeguard mechanisms.
Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to those with a business need to know, and they are subject to a duty of confidentiality.
Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for legal, regulatory, tax, accounting or reporting requirements.
Your Data Rights
Under data protection laws, you have the right to:
- Request access to your personal data (subject access request);
- Request correction of incomplete or inaccurate data;
- Request erasure of your personal data;
- Object to processing based on legitimate interests;
- Request restriction of processing in certain circumstances;
- Request data portability in a structured, machine-readable format;
- Withdraw consent at any time (without affecting prior lawful processing); and
- Not be subject to automated decision-making (we do not carry out automated decision-making; AI moderation is always subject to human review).
To exercise any of these rights, please contact us at privacy@offa.app. We try to respond to all legitimate requests within one month.
Marketing Communications
We may send you marketing messages if you have opted in. You can always unsubscribe via the link in any message or by contacting us at privacy@offa.app. Opting out does not affect essential communications related to your app use.
Complaints
We encourage you to contact us first at privacy@offa.app if you have concerns about how your data is processed. You have the right to lodge a complaint with the ICO (www.ico.org.uk) or your local supervisory authority.
Changes to This Privacy Notice
We may update this notice from time to time in response to legal, technical or business developments. We will take appropriate steps to inform you of significant changes.
Contact Us
For questions or to exercise your rights, contact:
Email: privacy@offa.app Website: www.offa.app
Offa Labs Ltd Registered in England and Wales Company Number: 15162938