Privacy policy

TUF Network UK operates www.tufnet.uk. This page explains what we collect about you, why we collect it, who we pass it to, how long we keep it, and what you can ask us to do. The data controller is TUF Network UK, and you can reach us at tufnetwork.uk@gmail.com.

What you give us

• Creating an account: your email and password — or, if you sign in with Google, the email and name Google gives us.
• Profile details: name, display name, who you are, city, housing status, language preference, topics you follow, and partner services you might need. Students also give their university, entry year, current stage and subject; workers give their industry and job title.
• Contact details (optional): LINE ID, Instagram, WhatsApp or phone. These are shown to signed-in members only when you have set a listing to be contacted that way.
• What you post: marketplace items, rental posts and photos, and any reports you send us.
• The questions you type into the TUF assistant.

What the system records automatically

• Activity records — for example “posted a rental listing” or “edited a merchant in the back office” — covering the event name, time, page path and your member ID. Free text you type is not included.
• Error reports: technical details from when something breaks, which may include your IP address.
• Anonymous traffic counts: page views only. No cookies, no cross-site tracking, and nothing that maps back to a person.
• Contact-reveal records: who viewed which listing’s contact details and when, used to block abuse (30 per hour, 100 per day).

Why we need it

• To run accounts, login and member features, and to show the items and rentals you post — on the basis of performing our service agreement with you.
• To prevent abuse, handle reports, track errors and keep the service stable — on the basis of our legitimate interest in a usable, safe platform.
• To send events, partner offers and the newsletter — on the basis of your consent, which you can withdraw at any time by unticking the box in your account.

Who receives your data

We do not sell your data and we do not hand it to advertisers. To keep the site running, the following services process data on our behalf:

• Supabase (Ireland, eu-west-1): database, authentication and photo storage.
• Vercel: site hosting and anonymous traffic counts.
• Sentry (EU region): error tracking.
• Resend: verification and notification emails.
• Google: only when you choose to sign in with a Google account.

Data is held mainly inside the EU. Where the services above involve a transfer outside it, that transfer relies on the safeguards required by UK and EU data protection law.

How long we keep it

• Account and profile details: for as long as the account exists, and removed once you ask us to delete it.
• Activity records: cleared automatically after 180 days.
• What you post: you can take it down yourself, or ask us to delete it.
• Error reports: cleared by Sentry under its own retention policy.

What we store on your device

• If you are only browsing, we write nothing to your device. This site uses no cookies and no advertising or retargeting trackers.
• Once you sign in, your browser keeps a login token so you do not have to sign in again. It is required for login to work at all, and it is cleared when you sign out.
• While you are bulk-listing on the marketplace, unfinished drafts are held in your own browser so you can pick up where you left off. They are cleared once you submit or discard.

Your rights

• See the data we hold about you and get a copy of it.
• Correct anything inaccurate (you can edit most fields yourself in your account).
• Ask us to delete your account and your data.
• Ask us to restrict, or object to, how we process your data.
• Ask for your data in a portable format.
• Withdraw consent for marketing at any time, without affecting processing before you withdrew it.

To exercise any of these, email tufnetwork.uk@gmail.com. The team handles these by hand for now, so that no account is deleted by mistake. If you think we have handled your data badly, you can also complain to the UK Information Commissioner’s Office (ICO, ico.org.uk).

Age and automated decisions

TUF is for students and workers in the UK; please do not register if you are under 13. We do not make decisions about you by purely automated means where those decisions would have legal or similarly significant effects.

Changes to this policy

When this page changes we update the “last updated” date above. If a change materially affects your rights, we will tell members separately.