Privacy Notice

Last updated: 30 August 2026

1. Who we are and our roles

Live Tray
Independent UK sole trader service is the controller of account, security, billing and service-administration information. For buyer and order information processed through a seller workspace, the seller will generally be the controller and Live Tray will generally act as its processor. The exact roles depend on use and will be reflected in a Data Processing Agreement before commercial launch.

2. Our privacy principles

• collect only information needed for the seller workflow
• use information only for clear operational, security and legal purposes
• avoid unnecessary and sensitive information
• do not sell personal information or buyer databases
• do not build advertising profiles or track buyers across unrelated sellers
• retain identifiable information only as long as reasonably necessary
• apply appropriate technical and organisational safeguards

3. Information we may process

• account details, authentication identifiers and workspace membership
• seller and marketplace account identifiers
• buyer usernames and identifiers visible in authorised sales
• auction, listing, sale and order identifiers
• prices, timestamps, tray assignments and sales history
• packing, shipping status and tracking references
• device identifiers, capabilities, version and connection health
• support messages, audit events and security logs
• information entered manually by an authorised user
• user-initiated audio, image, OCR, camera or screen-processing inputs where enabled
• subscription, billing status and Stripe customer references

Live Tray is not intended to collect special-category or other sensitive information. Do not submit it unless necessary and lawful.

4. Where information comes from

Information may come from you, authorised team members, your Desktop Agent, the live-selling content you choose to process, connected eBay Live or Whatnot workflows, support communications and service-generated logs.

5. Why we process information

• create, authenticate and secure accounts
• separate workspaces and enforce authorised access
• capture and reconcile legitimate seller sales
• assign trays and support labels, packing and dispatch
• prevent duplicate or missed orders
• provide sales history and operational statistics
• provide support and diagnose reliability problems
• detect misuse, protect the Service and maintain audit records
• administer subscriptions, invoices and payments
• comply with legal, tax and regulatory obligations

Buyer information is not intentionally used for direct advertising, cross-seller profiling, behavioural surveillance, ranking or data resale.

6. Lawful bases

Depending on the activity, we rely on performance of a contract to provide requested account and Service functions; legitimate interests in operating, securing and improving the Service and preventing fraud; legal obligations for tax, accounting and lawful requests; and consent where a feature or law specifically requires it. Where sellers act as controllers, they are responsible for selecting and documenting their lawful basis for customer information.

7. Recipients and service providers

Information is shared only where reasonably necessary with authorised workspace members and providers of hosting, database, authentication, email, error monitoring, customer support, payment and approved AI-processing services. Current core providers include OpenAI/ChatGPT Sites for website hosting, Supabase for authentication and operational data, and Stripe for payments. eBay and Whatnot operate independently under their own terms. We may disclose information where required by law or to establish, exercise or defend legal claims.

8. International transfers

Some providers may process information outside the United Kingdom. Where UK data-protection law restricts a transfer, we will rely on an adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum, as applicable. Details of applicable safeguards may be requested through the contact route below.

9. Retention

We keep account and operational information while an account is active. After closure, information is deleted or anonymised according to a documented schedule, except where longer retention is reasonably required for security, backup recovery, disputes, fraud prevention, tax, accounting or legal obligations. Payment records may need to be retained for statutory tax periods. The final production schedule will state specific periods before paid launch.

10. Automated recognition

Live Tray may use OCR, audio recognition or similar automation to assist the seller workflow. It is not intended to make solely automated decisions that produce legal or similarly significant effects on buyers. Users must verify important operational results.

11. Security

We use encrypted connections, authentication, workspace separation, row-level access controls, restricted privileged credentials, security headers, audit records and operational monitoring. No internet-connected service can guarantee absolute security. Users must protect their passwords and devices.

12. Your rights

Depending on the circumstances and lawful basis, you may request access, correction, deletion, restriction, objection or portability. Where consent applies, you may withdraw it as easily as it was given. The right to object to direct marketing is absolute. Signed-in users may submit an access, export or deletion request through their account. Buyer requests concerning seller-controlled order information should normally be directed first to the relevant seller.

13. Complaints

Please contact us first so we can investigate. You may also complain to the UK Information Commissioner’s Office at ico.org.uk.

14. Changes

We will update this notice when our Service, providers, processing or legal obligations change. Material changes will be brought to account holders’ attention.

15. Privacy contact

Live Tray
Independent UK sole trader service

Email privacy@live-tray.com. Signed-in users may also use Account → Data & privacy or Account → Beta Ops.