Privacy

Who runs this

UNIGET is run by a student at the University of Sheffield. It is not run by, endorsed by, or affiliated with the University of Sheffield. For anything on this page, email privacy@uniget.co.uk.

What we collect

Only what the site needs to work.

• Your email address, so you can sign in and so we can tell whether you are a University of Sheffield student.
• Your password, which we never see. It is stored scrambled by our sign-in provider and cannot be read back, by us or anyone else.
• Your phone number, only if you choose to give one. It is optional and you can remove it at any time.
• What you list — the title, description, price, category, condition, area, dates, and any photos you upload.
• Your building, if you choose to add it.
• Ordinary technical records kept by the services that host the site, such as the time of a request and the address it came from. We do not use analytics or advertising trackers.

Who can see what

This matters more than the list above, so it is spelled out.

• Anyone on the internet can see your listings — title, description, price, category, condition, photos and the general area. Browsing does not require an account.
• Signed-in students only can see the exact building of a listing, and can use the button that opens a WhatsApp chat with a seller. Since sign-up is restricted to Sheffield and Sheffield Hallam addresses, that means every account.
• Your phone number is never shown on the site. When another student uses the message button, WhatsApp opens a chat with you — and at that point they can see your number, the same as with any WhatsApp message. There is no way to message through WhatsApp without this.
• Your email address is never shown to other users.

Why we are allowed to hold it

Most of it because you asked us to provide this service, and it cannot work otherwise — you cannot sell a desk without telling people about the desk.

We also keep a record of items that changed hands, so we can show how much furniture was reused instead of thrown away. That is a legitimate interest of ours, and you can object to it using the contact address above.

Where it is kept

Inside the European Economic Area. Our database and photo storage are hosted by Supabase in Frankfurt, Germany. Our emails are sent through Resend in Ireland. The site itself is hosted by Vercel. These companies process data on our instructions and are not allowed to use it for their own purposes.

How long we keep it

• Your account, until you ask us to delete it.
• Listings you delete are removed, along with their photos.
• Listings marked sold disappear from the site but are kept, so we can count how many items were reused. If you would rather we did not keep yours, delete the listing instead of marking it sold, or ask us.

What you can ask for

Under UK data protection law you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to stop using it in a particular way, or ask for it in a portable form. Email privacy@uniget.co.uk and we will respond within one month.

If you are unhappy with how we handled it, you can complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

We use one kind of cookie, which keeps you signed in. It is required for the site to work, so there is no banner asking you to accept it. We do not use advertising or analytics cookies.

Changes

If this page changes in a way that matters, the date at the top will change and we will say so on the site.