Privacy Policy

Last updated: 22 October 2026

This privacy notice explains how The Eggschange handles personal information when you use theeggschange.co.uk (“the Site”): our classified listings for poultry, hatching eggs and related items, and our shop for our own stock.

1. Who we are

• Controller: The Eggschange is owned and operated by Thomas Kitchen-Dunn, trading as Tailored Digital, 35 Ffordd Llanllechid, Llanllechid, Bangor LL57 3EE. He is the data controller for the personal information described in this notice.
• Contact: info@theeggschange.co.uk (general and data protection) · tom@theeggschange.co.uk (operations)

2. What data we collect

2.1 Account and profile

• Name, email address, username, password (stored hashed)
• Phone number (if you provide it for buyers/sellers to contact you)
• Profile or listing contact details you choose to show on ads
• Approximate location you add to listings. If you type a postcode, we use it to find your town and the first half of the postcode (for example “YO7”). We store only the town and that first half, never your full postcode. Listings show the town and an approximate area on a map (about 2 km across), not your address.
• Whether you’ve told us you’re registered with APHA as a poultry keeper (optional). If you tick this, a ‘Self-declared APHA registration’ badge shows on your listings and seller profile. We don’t check it. Untick it in your profile to remove it.
• If you choose “Continue with Google”, Google tells us your name, your email address, whether Google has verified that email, and a Google account ID number. We use these only to create or sign in to your Eggschange account and publish your listing. We don’t get your Google password, contacts or anything else from your Google account. Google’s own privacy policy covers what Google does: https://policies.google.com/privacy. You can always use your email and a password instead.

2.2 Listings and messages

• Listing content (titles, descriptions, photos, prices, categories)
• If you add an iPhone photo (HEIC) or a very large photo, your own browser converts it to a JPG and shrinks it before it is uploaded. This happens on your device. The photo isn’t sent anywhere else to be converted. Converting also removes the photo’s hidden location (GPS) data.
• If you use our hatching eggs form, we collect the same kind of listing details as on any other listing: breed, type of bird, egg colour, prices and photos. Breed suggestions come from a list built into the Site. What you type isn’t sent anywhere else.
• Enquiries and messages you send through the Site (if messaging is enabled)
• Listing status (active, expired, featured) and records of any optional extras you purchase (none are currently offered)

2.3 Shop orders (our own stock)

• Billing and delivery name, address, email, phone
• Order history and payment status

2.4 Email updates

• Your email address (and name, if given) if you sign up for new-listing alerts. We use it to send you a weekly digest of new listings. Every email has an unsubscribe link.

2.5 Technical and usage data

• IP address, browser type, device type, approximate location derived from IP
• Pages visited, referring URLs, timestamps
• Cookie and similar technology identifiers (see Cookies below)

2.6 Analytics and advertising pixels (only with your consent)

• Google Analytics (via Google Site Kit): aggregated usage statistics
• Meta (Facebook) Pixel: measures visits and conversions and helps us understand ad performance if we run Meta ads
• WooCommerce order attribution: records which link or advert brought you to the shop, saved with any order

2.7 Postcode lookups and maps

• Postcode lookup: when you type a postcode on the listing form, our server (not your browser) looks it up with postcodes.io, a free service that uses Ordnance Survey and ONS open data. Only the postcode is sent, not your name or anything else about you.
• Maps: the maps on listings and on the listing form come from OpenStreetMap. When a map is shown, your browser loads map images from the OpenStreetMap Foundation’s servers. If a listing has no map pin, your browser also asks OpenStreetMap’s Nominatim service to find the area from the listing’s location text. Like any website, these services receive your IP address and browser details. See the OpenStreetMap Foundation privacy policy.

3. Why we use your data (lawful bases)

4. Classifieds-specific notice

Listings are placed by individual sellers, not by us. Information you put in a public listing, including any contact details you choose to show, can be seen by anyone visiting the Site. When you contact a seller through the Site, the details you send go to that seller, who is responsible for how they use them. Please only share what is needed.

4A. Clubs and organisations we contact

We sometimes write to poultry clubs, breed societies, waterfowl and smallholder associations, and similar organisations. We tell them about The Eggschange and ask whether they’d like to let their members know. This section explains what we hold about the people we contact for those organisations.

Who is responsible. The controller is Thomas Kitchen-Dunn, trading as Tailored Digital, 35 Ffordd Llanllechid, Llanllechid, Bangor LL57 3EE. You can contact us at info@theeggschange.co.uk, or by post at the address above.

What we hold. The organisation’s name, the contact route it publishes (a role email address such as secretary@ or info@, or the address of its website contact form), and any name or job title given with that address (for example “Club Secretary”). We also record when we wrote, any reply, and any request not to be contacted. We don’t buy contact lists. We don’t use personal or free-webmail addresses for this outreach, and we don’t add anyone to our listing-alert emails or any newsletter.

Where it comes from. Publicly available sources only: the organisation’s own website, or a public directory that lists it, such as The Poultry Club of Great Britain’s breed-club and affiliated-society pages. Each email says where we found the contact.

Why we use it, and our lawful basis. We use it to tell the organisation, once, about a free listing option that may help its members, with at most one follow-up if there’s no reply. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)). Our interest is letting relevant organisations know about a free service for their members. We keep the contact to a minimum, use only routes the organisation publishes for enquiries, and stop as soon as asked.

Who we share it with. No one, except our email provider, which processes messages on our behalf.

How long we keep it. For up to 12 months from our last contact, and then we delete it. If you ask us not to contact you, we keep only the minimum needed (the organisation, the contact route and the date) on a do-not-contact list, so that we don’t write again.

Your rights, including opting out and objecting. You can object to this use of your details at any time, and we’ll stop. To opt out, reply “no thanks” to any email from us or email info@theeggschange.co.uk. You have an absolute right to object to direct marketing (UK GDPR Article 21). You can also ask for a copy of the details we hold, or ask us to correct or delete them. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113), though we’d appreciate the chance to sort it out first.

5. Payments (Stripe)

Card payments in our shop are processed by Stripe. Your card details are entered into Stripe’s secure form and go directly to Stripe; we do not see or store your full card number. Stripe also uses the payment information for fraud prevention.

6. Cookies and similar technologies

• Strictly necessary: login session, security, listing session, basket/checkout. Always on. If you tap Continue with Google, Google’s sign-in script loads and Google may set its own cookies to sign you in.
• Analytics: Google Analytics (usage statistics) and WooCommerce order attribution. Only if you accept.
• Marketing / measurement: Meta (Facebook) Pixel. Only if you accept.

You can change your choice at any time using the Cookie settings link at the bottom of every page. Our Cookie Policy lists the cookies we use and what they do.

7. Who we share data with

• Hosting / CDN: 20i and StackCDN (site hosting and content delivery)
• Postcodes and maps: postcodes.io (postcode only, sent from our server) and the OpenStreetMap Foundation (map images and area lookups, loaded by your browser)
• Payment: Stripe
• Email: the email provider we use to send account, order and listing-alert emails
• Sign-in: Google, only if you choose Continue with Google (name, email, account ID)
• Analytics / ads: Google (Analytics, Site Kit) and Meta (Facebook Pixel), subject to their terms and only with your consent where cookies are involved
• Professional advisers: accountants, lawyers, insurers where necessary
• Authorities: when required by law or to protect rights and safety

We do not sell your personal data.

8. International transfers

Some of our providers (for example Google, Meta and Stripe) may process data outside the UK. Where they do, they rely on recognised safeguards, such as UK adequacy regulations or approved contract terms.

9. How long we keep data

• Accounts & listings: while your account is active and for a reasonable period after deletion/expiry for security, dispute handling, and legal records (typically up to 6 years for transactional records where needed)
• Shop orders: as required for tax and accounting (usually 6 years)
• Listing alerts: until you unsubscribe
• Support emails: as long as needed to resolve the query, then routine deletion/archiving
• Analytics: in line with the retention settings of each tool

10. Your rights (UK GDPR)

• Access your personal data
• Rectify inaccurate data
• Erase data (in certain cases)
• Restrict or object to processing
• Data portability (where applicable)
• Withdraw consent (where processing is based on consent)
• Complain to the Information Commissioner’s Office (ICO): ico.org.uk

To use any of these rights, email info@theeggschange.co.uk.

11. Children

The Site is intended for adults. We do not knowingly collect personal data from children.

12. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted (HTTPS) connections, hashed passwords and restricted admin access. No website can be completely secure, so please use a strong, unique password.

13. Third-party links

The Site may link to other websites. We are not responsible for their content or privacy practices, so please read their privacy notices.

14. Changes

We may update this notice from time to time. The date at the top of this page shows when it was last updated.

15. Contact

Questions about this notice or your personal data: info@theeggschange.co.uk.