Privacy Policy

Who we are

Almari is a peer-to-peer community marketplace for Indian ethnic wear in the UK diaspora, operated by Almari (contact: hello@almari.uk, domain: almari.uk).

When this policy says "we", "us", or "Almari" it means the Almari platform and its operator.

What data we collect and why

We collect only what we need to run the marketplace. Nothing more.

When you register

• Your email address — to verify your account and send you transactional notifications
• A password — stored securely, never readable by us (handled by Supabase Auth)

When you complete your profile

• Your first name and last initial — shown to other members on listings and transactions. Your full surname is never stored or shown.
• Your body measurements (bust, waist, hips, height, UK shoe size) — used only to sort listings by fit for you. Only you can see your measurements. They are never shown to other members, never used for advertising, never sold.

When you add payment details (sellers only)

• Your PayPal email or username, or your Revolut username. This is stored securely and shared only with buyers who have placed a confirmed order with you. It is never shown publicly on your profile or in listings. We do not collect bank account numbers or sort codes.

When you add a delivery address (buyers)

• Your delivery address (lines 1 and 2, city, postcode) — stored securely and used only to complete orders you place. It is never shown publicly.
• A contact phone number or WhatsApp number — stored alongside your delivery address and used only to facilitate delivery of your order. It is never shown publicly or shared outside of the context of a specific transaction.

When you list an item

• Photos of the item — stored and displayed on your listing
• Item details — category, condition, colour, measurements, provenance (city, year, original price)
• Your reason for selling — a private motivation (never shown publicly) and a public phrase you select from a curated list

When you buy or sell

• Transaction details — what was bought, for how much, when, by whom
• Your payment reference (ALM-XXXXX) — generated by Almari and used to match your payment to your order
• Postage and tracking information entered by the seller

When you share feedback

• Voluntary free-text feedback you submit via the app — what you were trying to do, what felt confusing, and what would improve the experience. This is linked to your account so we can follow up if needed. Submitting feedback is entirely optional.

Automatically

• Basic usage data — which screens you visit, how the app performs. Used only to fix bugs and improve the experience. No advertising profiles built.

What we do not collect

• Your full surname (first name and last initial only)
• Bank account numbers or sort codes
• Your social media profiles
• Any data about your ethnicity, religion, or background
• Location data or GPS tracking
• Card numbers or banking credentials — payments are made directly between buyer and seller; Almari does not process or handle payment transactions

How we use your data

Data	Why we use it
Email	Account verification, transactional notifications (sale, dispatch, delivery)
Name	Shown to other members in transactions
Measurements	Sort listings by fit for you — no other use
PayPal / Revolut handle	Shared with buyers who place a confirmed order — no other use
Delivery address	Complete orders you place as a buyer — no other use
Contact phone number	Facilitate delivery for orders you place — no other use
Listing content	Display your listing to other members
Transaction history	Run the marketplace, resolve disputes, generate provenance certificates
Feedback	Improve the app and user experience
Usage data	Fix bugs, improve the app

We do not use your data for advertising. We do not sell your data. We do not share your data with third parties except as described below.

Who we share data with

We use a small number of trusted services to run Almari:

Service	What they receive	Why
Supabase	All platform data (stored in their EU infrastructure)	Database and authentication
Resend	Your email address and transaction details	Sending transactional emails (order confirmed, dispatched, delivered)
Expo / Apple / Google	Push notification tokens	Sending you app notifications
Cloudflare	Your IP address and basic request metadata	Hosting and securing the almari.uk website (CDN and DDoS protection). Cloudflare does not receive any of your account or transaction data from the app.

Each of these services processes data only as instructed by us, under their own data processing agreements. We do not sell data to any of them or allow them to use it for their own purposes.

Payment handles (sellers' PayPal email/username or Revolut username) are shared directly with buyers who place a confirmed order. This sharing happens within the Almari platform and is limited to that transaction.

Your delivery address and contact phone number are shared with the seller of a specific order only to the extent needed to arrange postage and delivery. They are not shared in any other context.

Your measurements are sensitive data

Body measurements are personal. We treat them accordingly:

• They are stored securely in your account
• Only you can see them
• They are used for one purpose only: sorting listings by fit
• They are deleted when you delete your account
• They are never shared, never sold, never used for any other purpose

How long we keep your data

Data	Retention
Account data (name, email)	Until you delete your account
Measurements	Until you delete your account
PayPal / Revolut handle	Until you remove them or delete your account
Delivery addresses	Until you remove them or delete your account
Contact phone number	Until you remove the associated address or delete your account
Listing data	Kept after account deletion — anonymised, not linked to you
Transaction records	Kept for 7 years (legal requirement for financial records) — anonymised after account deletion
Feedback	Until you delete your account, or until no longer needed for product improvement
Usage data	90 days

When you delete your account, your personal details are removed. Your listings and transaction records are kept in anonymised form to preserve the provenance chain for other members who were party to those transactions.

Your rights

Under UK GDPR you have the right to:

• Access — ask us what personal data we hold about you
• Correction — ask us to correct inaccurate data
• Erasure — ask us to delete your account and personal data
• Portability — ask for a copy of your data in a readable format
• Object — object to how we use your data

To exercise any of these rights, email us at hello@almari.uk. We will respond within 30 days.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data incorrectly.

Cookies

Almari is a mobile app. We do not use browser cookies. The app uses local device storage only to keep you logged in between sessions. The almari.uk website is served via Cloudflare, which may set a small number of technical cookies necessary for security and performance — no advertising or tracking cookies are set.

Children

Almari is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has registered, please contact us immediately at hello@almari.uk.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes via the app or by email. The date at the top of this page shows when it was last updated.

Contact

For any privacy question or to exercise your rights:

Email: hello@almari.uk
Website: almari.uk

---

Almari — From our cupboards to yours.