Privacy policy
TAKAS TRADE LTD (“Takas”, “we”, “our”, or “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, process, store, disclose, transfer, and protect personal information when you access or use the Takas platform, website, mobile applications, artificial intelligence features, verification systems, and related services (collectively, the “Platform”).
Takas is a student-focused marketplace platform designed to facilitate interactions between members of educational communities. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
For the purposes of the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, and applicable privacy legislation, the data controller is TAKAS TRADE LTD, London, England, United Kingdom.
Email: info@takastrade.com
Website: https://takastrade.com
2. Information We Collect
2.1 Account Information
Information provided during registration may include: full name; username; email address; student email address; date of birth; profile information; and account and communication preferences.
2.2 Student Verification Information
To maintain the integrity of the student community, Takas may collect student identification cards, university-issued documents, enrolment confirmations, educational institution information, verification outcomes, verification history, and fraud-prevention indicators. Verification requirements may change over time as security measures evolve.
2.3 OCR Verification Information
Takas may use Optical Character Recognition (OCR) technologies and automated verification systems to process student verification documents. OCR systems may extract information appearing on submitted documents, including institution name, student status, document validity indicators, expiration information, and verification identifiers. Extracted information may be reviewed manually where necessary. Verification documents may be retained for fraud prevention, legal compliance, dispute resolution, and platform security purposes.
2.4 Marketplace Information
When users create listings, we may process item titles, descriptions, photographs, videos, categories, pricing information, listing history, transaction-related information, and reports associated with listings.
2.5 Communication Information
When users communicate through the Platform, we may process messages, support requests, moderation records, safety reports, dispute reports, and communications with Takas. Users should not assume communications are private beyond the protections described in this Privacy Policy and applicable law.
2.6 Device Information
We may automatically collect IP addresses, device identifiers, operating system information, browser information, app version information, crash diagnostics, security logs, and performance information.
2.7 Usage Information
We may collect information regarding searches performed, listings viewed, features used, navigation behaviour, engagement patterns, session activity, and safety-related activity.
2.8 Approximate Location Information
Where permitted by device settings and applicable law, Takas may process approximate location information to improve local marketplace discovery, support nearby listings, improve search relevance, enhance user experience, and improve safety systems. Takas does not require continuous background location tracking.
3. How We Use Information
We process personal information to administer accounts (creating, managing, authenticating, and supporting users); to verify student eligibility and maintain community integrity; to operate the Platform (displaying listings, enabling communication, and improving functionality); to protect safety and security (detecting fraud, preventing scams, investigating misconduct, protecting educational communities, and enforcing Platform policies); to power artificial intelligence systems; and to comply with legal obligations and protect legal rights.
4. Legal Basis for Processing
Where required by UK GDPR, we rely on one or more of the following legal bases:
Contract: processing required to provide Platform services to the user;
Legitimate interests: processing necessary to secure the Platform, prevent fraud, improve services, and protect users and educational communities (balanced against users' rights and freedoms);
Legal obligation: processing required to comply with applicable laws;
Consent: where legally required (for example, certain non-essential cookies and direct marketing). Users may withdraw consent at any time where processing is based on consent.
4.1 Special Category Data
Some verification documents may incidentally reveal information that constitutes special category data, and any use of facial images for identity matching may involve biometric data. Where Takas processes such data, it will rely on an appropriate condition under Article 9 UK GDPR and Schedule 1 of the Data Protection Act 2018 (such as substantial public interest, including the prevention and detection of unlawful acts and fraud), and will apply additional safeguards. Where required, Takas will seek explicit consent.
5. Artificial Intelligence and Automated Processing
Takas may use artificial intelligence, machine learning systems, automated moderation tools, behavioural analysis technologies, and fraud detection systems for AI Fast Listing, AI Fast Shop, listing categorisation, search optimisation, fraud prevention, trust and safety analysis, content moderation, spam detection, account risk assessment, prohibited item detection, and security monitoring.
Such systems may generate recommendations, predictions, classifications, rankings, or alerts. Users acknowledge that AI systems are not perfect and may produce inaccurate, incomplete, or incorrect outcomes. Takas does not guarantee the accuracy of AI-generated outputs, and users remain responsible for evaluating and verifying information before relying upon it.
6. Automated Decision Making
Certain Platform activities may involve automated processing, including fraud risk scoring, account security assessments, spam detection, listing moderation, prohibited item detection, and suspicious activity alerts. Automated systems may influence content visibility, listing restrictions, account reviews, and safety investigations.
Where a decision producing legal or similarly significant effects is based solely on automated processing, users have the right under Article 22 UK GDPR to obtain human intervention, to express their point of view, and to contest the decision. Takas combines automated and manual review for such decisions where required by law.
7. Trust and Safety Monitoring
Maintaining a safe student community is one of Takas' primary objectives. Takas may monitor and analyse listing activity, account activity, messaging activity, reports submitted by users, behavioural indicators, verification information, trust signals, and suspicious transaction patterns, through automated systems, manual review, or a combination of both, for fraud prevention, platform security, user protection, policy enforcement, and community safety.
8. Reports, Complaints, and Safety Investigations
Users may submit reports relating to scams, counterfeit goods, stolen goods, harassment, abuse, threats, safety concerns, and policy violations. Information submitted through reports may be retained for investigative purposes. Investigation outcomes may include warnings, listing removal, account restrictions, suspension, permanent termination, or disclosures permitted under this Privacy Policy.
9. Disclosures to Educational Institutions
Where Takas reasonably believes that a user has engaged in conduct that may endanger other students, educational communities, institutions, or the public (such as fraud, identity misuse, scams targeting students, harassment, threats, theft, criminal activity, or serious policy violations), Takas may disclose relevant information to educational institutions. Such disclosures shall be limited to information reasonably necessary and proportionate to address the concern. Nothing in this Privacy Policy obligates Takas to notify any institution, and disclosure decisions remain at Takas' discretion where legally permissible.
10. Law Enforcement and Regulatory Disclosures
Takas may disclose information where reasonably necessary to comply with legal obligations, respond to court orders or law enforcement requests, protect users, investigate unlawful activity, protect legal rights, or prevent fraud. Such disclosures may occur without prior notice where legally permitted.
11. Service Providers
Takas may engage trusted service providers (such as cloud hosting, email, verification, analytics, fraud detection, customer support, and infrastructure providers) to assist in Platform operations. Service providers act as processors and are required to process information only in accordance with our documented instructions, contractual obligations, and applicable law.
12. Payment Processing
Where payment functionality is provided, payment information may be processed by third-party payment providers, which may include Stripe, regulated payment institutions, banking partners, and payment processors. Takas does not store full payment card information. Payment information is processed by authorized payment providers in accordance with their own privacy policies and applicable regulatory requirements.
13. Analytics
Takas may use analytics technologies to understand Platform usage and improve performance, which may include Firebase Analytics, Firebase Crashlytics, Firebase Performance Monitoring, and operational analytics and security monitoring systems. Analytics information may include device identifiers, feature usage information, crash reports, performance metrics, and engagement statistics, and may be aggregated and anonymised where appropriate. Further detail on cookies and similar technologies is provided in the Cookie Policy.
14. International Data Transfers
Takas may process information in the United Kingdom, the European Economic Area, and jurisdictions where approved service providers operate. Where personal data is transferred outside the UK, Takas implements safeguards required by applicable law, which may include UK adequacy regulations, the International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or other approved transfer mechanisms.
15. Data Retention
Takas retains information only for as long as reasonably necessary for legitimate business, security, compliance, and legal purposes. Typical retention periods are set out below.
Data Type
Retention Period
Account Information
Duration of account + period required by legal obligations
Verification Information
Up to 6 years
OCR Verification Records
Up to 6 years
Safety Reports
Up to 6 years
Fraud Investigations
Up to 6 years
Support Requests
Up to 3 years
Analytics Data
As long as operationally necessary, then aggregated/anonymised
Security Logs
As long as operationally necessary
Takas may retain information for longer periods where required by law, the establishment or defence of legal claims, regulatory obligations, or fraud prevention needs.
16. Account Deletion
Users may request deletion of their account. Upon receiving a valid deletion request, Takas will delete or anonymise personal information where legally permitted. Certain information may be retained where necessary for legal obligations, fraud prevention, dispute resolution, security investigations, or enforcement of legal rights.
17. Your Rights
Subject to applicable law, users have rights to access, rectification (correction), erasure (deletion), restriction of processing, objection, data portability, and withdrawal of consent. Users also have the right not to be subject to certain solely automated decisions (see Section 6). Requests may be submitted using the contact details in Section 28. Takas may request verification of identity before responding and will respond within the time limits required by law (generally one month, extendable for complex requests).
18. Security Measures
Takas implements technical, organisational, and administrative safeguards designed to protect personal information against unauthorized access, misuse, loss, destruction, alteration, or disclosure, which may include encryption technologies, access controls, authentication systems, role-based permissions, monitoring systems, fraud detection systems, audit logging, secure infrastructure, incident response procedures, and security reviews. Access is restricted to authorized personnel and approved service providers with a legitimate operational need. Despite reasonable safeguards, no system can be guaranteed to be completely secure, and users acknowledge that use of internet-based services involves inherent security risks.
19. Security Incidents and Data Breaches
Takas maintains procedures designed to identify, investigate, contain, and respond to security incidents. Where required by applicable law, Takas will notify the Information Commissioner's Office and affected individuals of qualifying personal data breaches within the timeframes required by the UK GDPR (including, where applicable, within 72 hours of becoming aware of a notifiable breach). Nothing in this Privacy Policy guarantees that security incidents will never occur.
20. User Security Responsibilities
Users are responsible for protecting account credentials, maintaining device security, preventing unauthorized access, using strong passwords, and reporting suspicious activity. To the extent permitted by law, Takas shall not be responsible for losses resulting from credential sharing, weak passwords, compromised devices, user negligence, or unauthorized access caused by user actions.
21. Children's Privacy
The Platform is intended exclusively for individuals who are at least eighteen (18) years old. Takas does not knowingly collect personal information from individuals under the age of eighteen. If Takas becomes aware that personal information relating to a person under eighteen has been collected, Takas may suspend the account, remove content, delete information, and take any action reasonably necessary to comply with applicable law. Parents, guardians, or educational institutions who believe information has been collected from a minor should contact Takas immediately.
22. Third-Party Services
The Platform may contain integrations, links, services, or technologies operated by third parties, such as payment processors, verification providers, cloud infrastructure providers, analytics services, authentication services, and communication services. Takas is not responsible for the privacy practices of third parties, and users should review applicable third-party privacy policies before interacting with such services.
23. Cookies and Similar Technologies
Takas may use cookies, device identifiers, local storage technologies, SDKs, and similar technologies for authentication, security, analytics, performance monitoring, fraud prevention, and feature functionality. Where required by the Privacy and Electronic Communications Regulations (PECR) and UK GDPR, Takas will obtain appropriate consent before deploying non-essential technologies. Full details are set out in the Takas Cookie Policy.
24. Anonymised and Aggregated Information
Takas may generate anonymised, aggregated, statistical, and de-identified information from Platform activity, and may use such information for platform improvement, analytics, operational insights, fraud prevention, safety enhancement, artificial intelligence improvement, business intelligence, and research. Information that no longer identifies an individual may be used without further notice.
25. Future Features and Technologies
As the Platform evolves, Takas may introduce additional verification methods, payment solutions, trust and reputation systems, safety technologies, artificial intelligence capabilities, marketplace functionality, and community features. Where required by law, Takas will update this Privacy Policy to reflect material changes in data processing activities.
26. Right to Complain
If users believe that Takas has not handled personal information appropriately, they may contact Takas using the details in Section 28. Users also have the right to lodge a complaint with the UK Information Commissioner's Office (“ICO”) at ico.org.uk.
27. Changes to This Privacy Policy
Takas reserves the right to modify, update, replace, or amend this Privacy Policy at any time. Where material changes occur, Takas may provide notice through the Platform, email communications, account notifications, or website announcements. The most current version shall always govern Platform use.
28. Contact Information
For privacy-related requests, questions, concerns, or complaints, users may contact TAKAS TRADE LTD, London, England, United Kingdom.
Privacy: info@takastrade.com
Legal Enquiries: info@takastrade.com
Support: info@takastrade.com
Website: https://takastrade.com
29. Limitation of Liability
Nothing in this Privacy Policy excludes or limits liability that cannot lawfully be excluded, including liability for death or personal injury caused by negligence, for fraud, or under the data protection legislation. Subject to the foregoing and to the maximum extent permitted by applicable law, Takas shall not be liable for the actions of third parties, service interruptions, unauthorized access beyond reasonable controls, security incidents caused by third parties, failures of external infrastructure, payment processor failures, telecommunications failures, internet disruptions, or user misconduct.
30. Final Acknowledgement
By creating an account, accessing the Platform, submitting information, completing verification procedures, communicating through the Platform, using artificial intelligence features, or otherwise using Takas services, users acknowledge that they have read and understood this Privacy Policy.
This document forms part of the Takas legal framework and should be read together with the Takas Terms and Conditions, Privacy Policy, Cookie Policy, Community Guidelines, Prohibited Items Policy, Buyer Protection Policy, and Seller Protection Policy.
TAKAS TRADE LTD · London, England & Wales, United KingdomContact: info@takastrade.com