Legal
Privacy Policy
Last updated: 5 November 2026
The short version
- We use your details to run your account, take your orders and get them to you.
- We never sell your personal data and we don't show third-party adverts.
- Card details are handled by Stripe. We never see or store your full card number.
- You can ask us for a copy of your data, or to delete your account, at any time by emailing contact@squadbid.com.
This policy explains how SquadBid ("SquadBid", "we", "us") collects, uses, shares and protects personal data when you use the SquadBid mobile app (Android and iOS) and the website at squadbid.co.uk (together, the "Service"). SquadBid is a UK community group-buying service: neighbours order together from time-limited deals and collect from a local collection point or get home delivery.
We are the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. If you have any questions, contact us at contact@squadbid.com.
1. Information we collect
Information you give us
- Account details: your name and mobile phone number (we send a one-time code by SMS to sign you in), and optionally your email address and profile photo.
- Delivery and collection details: postcode, delivery address, chosen collection point and time slot, and, if someone else collects for you, their name and phone number.
- Orders and payments: what you order, order history, refunds, wallet balance and transactions. Card payments are processed by Stripe; we receive a payment reference and the last details needed to match the payment, not your full card number.
- Community content: messages and posts you share in Squads, deal forums, product questions, chats with friends, and support conversations.
- Requests and feedback: product requests, supplier recommendations, collection point requests, refund requests and reports.
- Shopping assistant: if you use our in-app assistant, the messages you send it.
Information collected automatically
- Location: if you allow it, your device location so we can show nearby collection points, deals and Squads. You can use the Service without sharing precise location by entering a postcode instead.
- Device and app information: device type, operating system, app version, and a push notification token so we can send you order updates.
- Usage information: pages and screens viewed, features used, and basic diagnostics, which help us fix problems and improve the Service.
We do not collect your contacts unless you choose to invite friends, and then only the contacts you pick are used to send the invitation.
2. How we use your information
- To create and secure your account and sign you in.
- To take, pay for, pack and hand over or deliver your orders, and to handle refunds and wallet credit.
- To show you relevant deals, collection points and Squads near you.
- To send you service messages and push notifications about your orders, baskets and deals.
- To run community features such as Squads, forums and chat, and to keep them safe.
- To provide customer support.
- To understand how the Service is used, plan stock with our suppliers, and improve the Service.
- To prevent fraud and misuse, and to meet our legal, tax and accounting obligations.
We do not sell your personal data, and we do not use it for third-party advertising.
3. Our legal bases
- Contract: to provide your account and fulfil your orders.
- Legitimate interests: to keep the Service secure, prevent fraud, understand usage, plan supply and improve the Service, balanced against your rights.
- Consent: for device location, push notifications and optional marketing messages. You can withdraw consent at any time in your device or app settings.
- Legal obligation: to keep financial records and respond to lawful requests.
4. Who we share your information with
We share only what each party needs to do its job:
- Collection point hosts and delivery drivers: your name, order and collection slot, and for home delivery your address and phone number, so they can hand over your order.
- Other members: your name and profile photo, and anything you post, are visible to other members in the Squads, forums and chats you take part in.
- Service providers who process data on our behalf under contract:
| Provider | What for |
|---|---|
| Amazon Web Services | Hosting our servers, database and website (UK region, London) |
| Stripe | Card payments and refunds |
| Twilio | Sending sign-in codes by SMS |
| OneSignal | Push notifications |
| PostHog (EU) | Product analytics |
| Microsoft Clarity | Website usage insights |
| Google Maps Platform | Maps, address lookup and distances |
| Anthropic, OpenAI, Google | Answering messages you send to the shopping assistant (we remove phone numbers and email addresses before sending) |
- Legal and safety: where required by law, or to protect the rights, safety and property of our customers, SquadBid or others.
- Business changes: if SquadBid is involved in a merger, acquisition or sale of assets, your data may transfer as part of it, under this policy.
5. International transfers
Our main systems are hosted in the UK. Some service providers process data outside the UK, for example in the United States. Where this happens we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
6. How long we keep your information
- Account and profile: while your account is open, and deleted when you ask us to delete it.
- Orders, payments and refunds: 6 years after the end of the financial year they relate to, as UK tax law requires.
- Sign-in codes: a short time only; they expire within minutes.
- Support conversations and community content: while your account is open, unless you delete them sooner.
- Analytics data: up to 24 months.
7. Deleting your account and data
You can ask us to delete your SquadBid account and personal data at any time:
- Email contact@squadbid.com with the subject "Delete my SquadBid account", from the email on your account, or include the mobile number you sign in with.
- We may contact you to confirm the request comes from you.
- We delete your account and personal data within 30 days. Any wallet balance is refunded or settled before deletion.
We keep only what the law requires us to keep, such as order and payment records for tax purposes, and delete it when that period ends.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you and get a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to certain processing, including direct marketing;
- receive your data in a portable format;
- withdraw consent at any time, where we rely on consent.
To use any of these rights, email contact@squadbid.com. We respond within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
9. Your choices and permissions
- Location: turn it off in your phone's settings at any time; you can still enter a postcode.
- Push notifications: turn them off in your phone's settings.
- Profile: update your name, email, photo and addresses in the app under Profile.
10. Security
We use encryption in transit (HTTPS), access controls that limit data to staff who need it, and secure hosting. No service is completely secure, so please keep your phone and sign-in codes private and tell us straight away if you think your account has been misused.
11. Children
The Service is not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If we make significant changes, we will tell you in the app or by message.
13. Contact us
SquadBid, United Kingdom
Email: contact@squadbid.com