Privacy Policy
We only collect the personal information we genuinely need to operate the marketplace safely, fulfil orders, meet our legal obligations and prevent fraud. We never sell your personal information
Nosco Management Solutions Ltd understands that your privacy is important to you and that you care about how your personal data is used. We respect and value the privacy of everyone who visits this website, www.own4less.co.uk ("Our Site") and will only collect and use personal data in ways that are described here, and in a way that is consistent with our obligations and your rights under the law.
Please read this Privacy Policy carefully and ensure that you understand it. Your acceptance of this Privacy Policy is requested when you first visit Our Site.
1. Definitions and Interpretation
1.1 In this Policy the following terms shall have the following meanings:
(a) "Account" means an account required to access and/or use certain areas and features of Our Site;
(b) "Cookie" means a small text file placed on your computer or device by Our Site when you visit certain parts of Our Site and/or when you use certain features of Our Site. Details of the Cookies used by Our Site are set out in Part 15, below;
(c) "Cookie Law" means the relevant parts of the Privacy and Electronic Communications (EC Directive) Regulations 2003, as amended; and
(d) "Fraud Prevention Agency" means any third-party organisation that provides fraud prevention, fraud detection, identity verification, or credit-risk screening services, engaged by Us, by Sellers, or by Our payment service providers.
2. Information About Us
2.1 Our Site is owned and operated by Nosco Management Solutions Ltd, a limited company registered in England under company number 07953780.
Registered Address: 5 High Street, Pontypridd CF37 1QJ.
Postal Address: 5 High Street, Pontypridd CF37 1QJ.
Email Address: admin@own4less.co.uk.
Telephone: 01443 485880.
VAT Number: 129 9492 68.
Data Protection Officer: The Data Manager, contactable using the details above, marked for the attention of "The Data Protection Officer".
Data Protection Registration Number (ICO): Z3105473.
3. What Does This Policy Cover?
This Privacy Policy applies only to your use of Our Site. Our Site may contain links to other websites. Please note that we have no control over how your data is collected, stored, or used by other websites and we advise you to check the privacy policies of any such websites before providing any data to them. In particular, each Seller on Our Marketplace is separately responsible for its own privacy policy — see Part 10 below.
4. What Is Personal Data?
Personal data is defined by the UK General Data Protection Regulation (the retained version of Regulation (EU) 2016/679, as it forms part of UK law by virtue of section 3 of the European Union (Withdrawal) Act 2018, as amended) (the "UK GDPR") and the Data Protection Act 2018 (collectively, "the Data Protection Legislation") as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.
Personal data is, in simpler terms, any information about you that enables you to be identified. Personal data covers obvious information such as your name and contact details, but it also covers less obvious information such as identification numbers, electronic location data, and other online identifiers. We do not knowingly collect any special category (sensitive) personal data about you.
5. What Are My Rights?
5.1 Under the Data Protection Legislation, you have the following rights, which we will always work to uphold:
(a) The right to be informed about Our collection and use of your personal data. This Privacy Policy should tell you everything you need to know, but you can always contact us to find out more or to ask any questions using the details in Part 16.
(b) The right to access the personal data we hold about you. Part 14 will tell you how to do this.
(c) The right to have your personal data rectified if any of your personal data held by us is inaccurate or incomplete.
(d) The right to be forgotten, i.e. the right to ask us to delete or otherwise dispose of any of your personal data that we hold.
(e) The right to restrict (i.e. prevent) the processing of your personal data.
(f) The right to object to us using your personal data for a particular purpose or purposes, including profiling carried out for fraud-prevention purposes (see Part 11).
(g) The right to withdraw consent. This means that, if we are relying on your consent as the lawful basis for using your personal data, you are free to withdraw that consent at any time.
(h) The right to data portability, in certain circumstances.
(i) Rights relating to automated decision-making and profiling. We explain in Part 11 below the limited circumstances in which we, or the fraud prevention agencies we work with, use automated means to assess risk, and your right to request human review of such a decision.
Further information about your rights can be obtained from the Information Commissioner’s Office (ICO) or your local Citizens Advice Bureau. If you have any cause for complaint about Our use of your personal data, you have the right to lodge a complaint with the ICO — we would, however, welcome the opportunity to resolve your concerns ourselves first, so please contact us using the details in Part 16.
6. What Data Do You Collect and How?
Depending upon your use of Our Site, we may collect and hold some or all of the personal and non-personal data set out in the table below. We do not collect any special category (sensitive) personal data.
| Data Collected | How We Collect the Data | | :---- | :---- | | Identity information including your name, salutation, gender and approximate age. | Online form as part of account setup, checkout or enquiry pages. | | Contact information including your address, email address, telephone number and social media contact information. | Online form as part of account setup, checkout or enquiry pages. | | Business information including business name, address and contact information (Sellers only). | Online form as part of the Seller onboarding and verification process. | | Profile information including login details, transaction history and your preferences. | Account setup, and recording of transactional data when you buy or sell on Our Site. | | Payment information, limited to confirmation of payment and the last four digits of a card where provided by Our payment provider. We do not collect or store your full card, bank account, or sort code details — these are collected and stored directly by Our third-party payment service provider (currently Ryft Pay, or such other provider as We may appoint from time to time — see Part 9). | Online form at Checkout, processed by the payment provider. | | Fraud and risk-screening information, which may include device and browser information, IP address, and information received from Fraud Prevention Agencies about you. | Automatically when you use Our Site, and from Fraud Prevention Agencies — see Part 11. |
7. How Do You Use My Personal Data?
Under the Data Protection Legislation, we must always have a lawful basis for using personal data. The following table describes how we will or may use your personal data, and our lawful bases for doing so:
| What We Do | What Data We Use | Our Lawful Basis | | :---- | :---- | :---- | | Registering you on Our Site and creating your Account. | Identity and contact details. | Performance of a contract with you. | | Enabling Buyers and Sellers to transact on Our Marketplace. | Identity, contact, business and transactional data. | Performance of a contract with you. | | Verifying Sellers before they are permitted to list on Our Marketplace. | Business and identity information. | Performance of a contract, and Our legitimate interest in maintaining a trustworthy marketplace of verified UK retailers. | | Providing and managing your access to Our Site. | Username and password information. | Performance of a contract with you. | | Preventing and detecting fraud, and verifying identity (including sharing data with Sellers and Fraud Prevention Agencies — see Part 11). | Identity, contact, transactional, device and risk-screening data. | Our legitimate interests, and the substantial public interest in the prevention and detection of crime (Data Protection Act 2018, Schedule 1, Part 2). | | Meeting statutory obligations, for example to HMRC and other government bodies, and helping Sellers meet obligations such as product warranties. | Transactional data. | Compliance with a legal obligation, and legitimate interests. | | Supplying products and services purchased from Sellers. | Identity and address details. | Performance of a contract with you. | | Managing payments for products that you purchase or sell, including sharing data with Our payment service provider. | Identity details and payment confirmation data. | Performance of a contract with you. | | Communicating with you about orders, Your Account, or Our Site. | Contact details. | Performance of a contract, and legitimate interests. | | Analysing use of Our Site (Google Analytics) to understand and improve how Our Site performs. | Usage and device data, collected via analytics Cookies. | Consent (see Part 15). | | Measuring and improving the effectiveness of Our advertising, including via the Meta (Facebook/Instagram) Pixel. | Usage and device data, collected via advertising Cookies. | Consent (see Part 15). | | Supplying you with information by email or post that you have opted in to receive. You may opt out at any time by emailing us or managing your preferences in the Account Settings menu. | Contact information. | Consent. |
With your permission and/or where permitted by law, we may also use your personal data for marketing purposes, which may include contacting you by email, telephone, text message or by post with information, news, and offers on products or services. You will not be sent any unlawful marketing or spam, and we will always obtain your express opt-in consent before sending you direct marketing, and before sharing your personal data with third parties for their own marketing purposes. You may opt out at any time.
We will only use your personal data for the purpose(s) for which it was originally collected unless we reasonably believe that another purpose is compatible with that original purpose. If we need to use your personal data for an unrelated purpose, we will inform you and explain the legal basis which allows us to do so.
8. How Long Will You Keep My Personal Data?
| Type of Data | How Long We Keep It | | :---- | :---- | | Identity, Contact, Business and Profile Information | For a reasonable period from the later of the time you created an Account, or when you last transacted with us or visited Our Site — usually up to six years, unless you ask us to delete it sooner (see Part 14). | | Payment Information | We do not retain full payment information ourselves — see Part 9. Confirmation of payment is retained as above. | | Transactional Information | Seven years, to comply with HMRC record-keeping requirements. | | Fraud and risk-screening information shared with or received from Fraud Prevention Agencies | For as long as necessary for fraud-prevention purposes, and in accordance with the retention periods set by the relevant Fraud Prevention Agency, typically up to six years from the date it is recorded. |
9. How and Where Do You Store or Transfer My Personal Data?
We take appropriate steps to ensure your personal data is stored securely, including limiting access to those employees, agents, contractors, and third parties with a legitimate need to know; maintaining procedures for dealing with data breaches, including notifying you and/or the ICO where we are legally required to do so; and using encryption and other technologies to protect your data.
Some of the third parties we use to operate Our Site — including Our payment service provider, Google Analytics, and the Meta Pixel — may store or process personal data outside the UK, including in the United States. Where this happens, we ensure an adequate level of protection is in place, for example by way of UK adequacy regulations, the UK International Data Transfer Agreement, or the UK Addendum to the EU Standard Contractual Clauses, as applicable. You can request further information about these safeguards by contacting us using the details in Part 16.
10. Do You Share My Personal Data?
10.1 We will share your personal data with the Seller(s) you transact with, to the extent necessary for them to fulfil your order. Your personal data will only be shared with Sellers from whom you have purchased items, or who you have purchased items from you (if you are a Seller). Each Seller is independently responsible, as a data controller in its own right, for how it uses your personal data — please refer to the relevant Seller’s own privacy policy.
10.2 We share your personal data with Our third-party payment service provider (see Part 9) to the extent necessary to process payments.
10.3 We use Google Analytics and the Meta Pixel on Our Site, which involves sharing certain usage and device data with Google LLC and Meta Platforms, Inc. respectively. These are only used where you have given Your consent — see Part 15.
10.4 Fraud prevention and detection. We take the prevention and detection of fraud very seriously. We may share your personal data (including identity, contact, transactional, and device/risk information) with:
(a) Sellers, where this is necessary to verify a transaction, investigate a suspected fraudulent order, or prevent loss; and
(b) Fraud Prevention Agencies and organisations, including specialist fraud-screening, identity-verification, and anti-money-laundering service providers engaged by Us or by Our payment service provider,
for the purposes of verifying identity, assessing the risk of fraud on a transaction, preventing fraud, money laundering, and other financial crime, and protecting Our Site, Sellers, and other Users. This processing is carried out on the basis of Our legitimate interests and the substantial public interest in the prevention and detection of crime. Fraud Prevention Agencies may in turn record details of Our enquiry, which may be seen by other organisations that carry out checks against records held by that agency. If a Fraud Prevention Agency determines that you pose a fraud or money-laundering risk, We or the relevant Seller may refuse to provide the services or goods requested, or may stop providing existing services to you. This may involve an element of automated decision-making; where it does, you have the right to request that a decision based solely on automated processing be reviewed by a person, to express your point of view, and to contest the decision, by contacting us using the details in Part 16.
10.5 We will not otherwise share any of your personal data with any third parties for their own purposes, subject to the following exceptions:
(a) If we sell, transfer, or merge parts of our business or assets, your personal data may be transferred to a third party. Any new owner of our business may continue to use your personal data in the same way that we have used it, as specified in this Privacy Policy.
(b) In some circumstances, we may be legally required to share certain personal data, which might include yours, if we are involved in legal proceedings or complying with legal obligations, a court order, or the instructions of a government authority.
10.6 If any of your personal data is shared with a third party, as described above, we will take steps to ensure that your personal data is handled safely, securely, and in accordance with your rights, our obligations, and the third party’s obligations under the law.
11. Fraud Prevention in More Detail
11.1 This Part 11 should be read together with Part 10.4 above and explains, in more detail, how and why we use Fraud Prevention Agencies.
11.2 We, Sellers, and Our payment service provider(s) may carry out checks against your personal data using Fraud Prevention Agencies to help make decisions, for example about the provision, administration or performance of goods and services offered on Our Marketplace, or where there are concerns about potential fraud or money-laundering.
11.3 The personal data you provide, together with data we hold about you, and data from third parties, may be used to prevent fraud and money-laundering, and to verify your identity.
11.4 We and Fraud Prevention Agencies may also enable law enforcement agencies to access and use your personal data to detect, investigate, and prevent crime.
11.5 Where you have a right to object, further information, or wish to exercise your rights in respect of any automated decision described in this Part, please contact us using the details in Part 16, marked for the attention of the Data Protection Officer.
12. How Can I Control My Personal Data?
12.1 In addition to your rights under the Data Protection Legislation, set out in Part 5, when you submit personal data via Our Site, you may be given options to restrict our use of your personal data. In particular, we aim to give you strong controls on Our use of your data for direct marketing purposes.
12.2 You may also wish to sign up to one or more of the preference services operating in the UK: the Telephone Preference Service ("the TPS"), the Corporate Telephone Preference Service ("the CTPS"), and the Mailing Preference Service ("the MPS").
13. Can I Withhold Information?
You may access certain areas of Our Site without providing any personal data at all. However, to use all features and functions available on Our Site, including to place an order or verify a Seller Account, you may be required to submit or allow the collection of certain data. You may restrict Our use of Cookies — see Part 15.
14. How Can I Access My Personal Data?
If you want to know what personal data we have about you, you can ask us for details of that data and for a copy of it (a "subject access request"). All subject access requests should be made in writing to the details in Part 16. There is not normally a charge for a subject access request, unless the request is manifestly unfounded or excessive. We will respond within one calendar month, save that this may be extended by a further two months for complex requests, in which case we will keep you informed.
15. How Do You Use Cookies?
15.1 Our Site places and accesses certain first-party and third-party Cookies on your computer or device. All Cookies used by us are used in accordance with current Cookie Law. Before non-essential Cookies are placed on your device, you will be shown a consent banner, and non-essential Cookies (including analytics and advertising Cookies) will only be set if you actively consent. You may withdraw your consent at any time via Our cookie settings tool or your browser settings.
15.2 Strictly necessary Cookies. Certain features of Our Site depend on Cookies to function, and Cookie Law deems these to be "strictly necessary". Your consent is not sought for these, although you may still block them via your browser (Our Site may not then work properly):
| Name of Cookie | Purpose | Strictly Necessary | | :---- | :---- | :---- | | Session ID | To provide seamless navigation within Our Site, and identify that a Shopping Basket belongs to you. | Yes | | Cart UUID | To enable your purchases to be recorded in a cart prior to Checkout and payment. | Yes |
15.3 Analytics Cookies (consent required). Our Site uses Google Analytics to collect and analyse anonymised usage information, enabling us to understand and improve how Our Site is used.
| Name of Cookie | First / Third Party | Provider | Purpose | | :---- | :---- | :---- | :---- | | _ga | Third | Google | Analytics — distinguishes users. | | _gid | Third | Google | Analytics — distinguishes users. |
15.4 Advertising / marketing Cookies (consent required). Our Site uses the Meta (Facebook/Instagram) Pixel to help us understand and measure the effectiveness of Our advertising and to show you more relevant adverts on Meta platforms. The Meta Pixel will only load once you have given your consent via Our cookie banner.
| Name of Cookie | First / Third Party | Provider | Purpose | | :---- | :---- | :---- | :---- | | fr / _fbp | Third | Meta Platforms, Inc. | Advertising measurement and retargeting. |
15.5 In addition to the controls we provide, you can choose to enable or disable Cookies in your internet browser, and to delete Cookies at any time, although this may affect the functionality of Our Site.
16. How Do I Contact You?
To contact us about anything to do with your personal data and data protection, including to make a subject access request, please use the following details, marking any enquiry for the attention of The Data Protection Officer:
Email address: admin@own4less.co.uk
Telephone: 01443 485880
Postal Address: The Data Protection Officer, Nosco Management Solutions Ltd, 5 High Street, Pontypridd CF37 1QJ.
17. Changes to this Privacy Policy
We may change this Privacy Policy from time to time. This may be necessary, for example, if the law changes, or if we change our business in a way that affects personal data protection. Any changes will be immediately posted on Our Site and you will be deemed to have accepted the terms of the Privacy Policy on your first use of Our Site following the alterations. We recommend that you check this page regularly to keep up to date.
This Privacy Policy was last updated on 10th August 2026