Offa Privacy Notice
Last Updated: 17 July 2026
Offa Labs Ltd ("Offa", "the Company", "we", "us" or "our") respects your privacy and is committed to protecting your personal data. This privacy notice informs you how we process your personal data when you use our website and app and tells you about your privacy rights under applicable data protection laws, including the UK Data Protection Act 2018 and the UK General Data Protection Regulation (UK GDPR).
Controller for Personal Data
A "controller" is an organisation that determines the purposes and means of processing personal data. Unless we notify you otherwise, Offa is the controller of your personal data for our app and website.
Scope
This privacy notice applies to the processing of personal data by Offa in connection with:
- Users: Where we provide our marketplace services to you (buyer or seller via our app).
- Website visitors: Anyone browsing www.offa.app or interacting with our content online.
- Suppliers and service providers: Where you provide products or services to Offa to help us operate, maintain or enhance our platform.
Lawful Bases: How We Use Your Personal Data
We process your personal data only where permitted by law. Depending on the nature of our relationship, we rely on the following bases:
- Consent: For example, where you download our app, for cookies/analytics and for marketing.
- Performance of a contract: For example, to provide you with the marketplace features and services you request.
- Legal obligation: Where we must comply with a law, regulation or court order.
- Vital interests: In emergencies to protect life or safety.
- Legitimate interests: To improve our app, ensure safety, combat fraud, support customer service and operate as an effective business, provided your rights do not override these interests.
How We Collect Your Data
Directly from you
When you sign up, create a listing, send messages or interact with the platform.
Automatically
Through app telemetry, cookies (website), analytics and error reporting.
From third-party processors
Our infrastructure, analytics and AI providers capture data as part of providing their services to us.
From other users
Messaging, offers or reviews shared with you by other users.
Minimum Age and Children's Data
Offa is intended solely for individuals aged 18 and over and is not designed for or directed at children. We do not knowingly collect personal data from anyone under 18. If we become aware that an account belongs to a minor, the account will be terminated and associated personal data deleted.
User (Marketplace) Processing Information
When you use Offa as a buyer or seller, we process various types of personal data to provide our marketplace services, support your account and ensure trust and safety on the platform.
Categories of personal data we process
- Identity Data: Display name, username, profile photo, short bio, date of birth (optional), gender (optional).
- Contact Data: Email address, phone number, user ID.
- Location Data: Pickup addresses/locations for listings (full addresses stored, maps show approximate area only), and delivery addresses for shipped orders.
- Profile Data: User settings and preferences, favourites, ratings and reviews.
- Marketplace Content: Listings, chat messages, transaction history, offers, moderation reports.
- Financial and Transaction Data: Purchases and sales, amounts and fees, payment and payout status, refunds and disputes. Card details and bank details are collected and processed directly by our payment partner, Stripe — Offa never receives or stores your full card number or bank account details. Where sellers complete Stripe's identity verification, the documents you provide go to Stripe, not to Offa; we receive only the resulting account status (e.g. verified, pending, restricted).
- Technical Data: IP address, device information, app usage logs, error and crash logs.
- Usage Data: Clicks, screen navigation, analytics, session replay (with masking).
- Marketing and Communications Data: Preferences for receiving information from us.
- AI Data: Excerpts from public text or chats (pseudonymised) sent to external AI moderation services. We never send entire chat histories and personal identifiers are removed where possible.
Note: Offa displays only approximate, randomised locations for listings; exact addresses are never publicly shown. Phone numbers are not shared or exposed by the platform. Users may voluntarily share their contact information through the chat feature.
Use of Artificial Intelligence
We use AI services to help us moderate marketplace listings and images, flag suspicious or unsafe communications, assist with listing creation (e.g. suggesting categories and drafting descriptions you can edit), detect attempts to share contact details or move payment off-platform, and provide first-line responses in customer support. Only the minimum necessary pseudonymised data is sent to external providers. Most checks occur on-device or with personal identifiers removed. No automated decisions with legal or similar significant effects are made about you: automated checks may temporarily hold or decline content (such as a listing pending review), and all material decisions — including account suspensions and dispute outcomes — are reviewed by our staff.
How We Disclose Personal Information
We do not sell or rent personal data for advertising. We may share your personal data as follows:
Who we share data with
- Internally: Employees and contractors on a need-to-know basis.
- With other Offa users: Limited information (display name, profile details, listing or chat content) shared where necessary for transactions.
- With processors and service partners: Trusted vendors for hosting, analytics, AI moderation, and API services.
- With our payment partner: Stripe, which processes payments, holds funds under our buyer protection arrangements, pays out sellers, and carries out identity verification and fraud prevention. For those services Stripe acts as an independent controller under its own privacy policy (stripe.com/privacy).
- With delivery partners: Courier and shipping providers receive the names and addresses needed to create shipping labels and deliver parcels for shipped orders.
- With legal advisers: Auditors, insurers and consultants bound by duties of confidentiality.
- Where required by law: To comply with legal requests, regulations or court orders.
- In business transactions: If we enter a merger, acquisition or restructuring.
International Transfers
We may transfer and process your personal data outside of the United Kingdom / European Union. When we do so, we ensure the same level of protection as afforded by the UK Data Protection Act 2018 and the UK GDPR, using approved safeguard mechanisms.
Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. We limit access to those with a business need to know, and they are subject to a duty of confidentiality.
Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for legal, regulatory, tax, accounting or reporting requirements.
Your Data Rights
Under data protection laws, you have the right to:
- Request access to your personal data (subject access request);
- Request correction of incomplete or inaccurate data;
- Request erasure of your personal data;
- Object to processing based on legitimate interests;
- Request restriction of processing in certain circumstances;
- Request data portability in a structured, machine-readable format;
- Withdraw consent at any time (without affecting prior lawful processing); and
- Not be subject to automated decision-making (we do not carry out automated decision-making; AI moderation is always subject to human review).
To exercise any of these rights, please contact us at privacy@offa.app. We try to respond to all legitimate requests within one month.
Marketing Communications
We may send you marketing messages if you have opted in. You can always unsubscribe via the link in any message or by contacting us at privacy@offa.app. Opting out does not affect essential communications related to your app use.
Complaints
We encourage you to contact us first at privacy@offa.app if you have concerns about how your data is processed. You have the right to lodge a complaint with the ICO (www.ico.org.uk) or your local supervisory authority.
Changes to This Privacy Notice
We may update this notice from time to time in response to legal, technical or business developments. We will take appropriate steps to inform you of significant changes.
Contact Us
For questions or to exercise your rights, contact:
Email: privacy@offa.app Website: www.offa.app
Offa Labs Ltd Registered in England and Wales Company Number: 15162938