Last updated 26 October 2026
Wobbla ("we", "us") runs Wobbla. We are the controller of the personal information described in this policy under UK data protection law (the UK GDPR and the Data Protection Act 2018).
For any privacy question, or to use any of your rights below, email info@wobbla.co.uk.
Wobbla is for businesses, but the people who use it (owners, buyers, store managers and staff) are individuals, and their details are personal information. This policy covers them, and also anyone who visits our site or joins our interest list.
Your name, email address, company or store name, and whether you are a brand or a retailer.
Your email address and a password (we only keep a scrambled version, never the password itself). For brands, your company name, logo, description, photos, and company registration and VAT numbers. For retailers, your store name, address, postcode, region, store photos, opening and activation details, the way your store is tiered, and company registration and VAT numbers if you give them. If one login runs several stores, the same applies to each store.
The activations, offers and products you list; bookings you request or receive, including any offer, counter offer, price or free stock terms; messages you send to other members; reviews you write; and files you upload, such as photos, spreadsheets, pasted product lists and supplier invoices.
Your name, email address and what you tell us through the contact form, and our replies.
Your IP address and basic request details in our server logs, used for security and to keep the site running. We also use your IP address to limit repeated sign in attempts and sign ups. For our own administrators, we keep a security record of the changes they make, including the time, what was changed and the IP address it came from. Our cookie page lists the cookies and browser storage we use.
When you visit a public page without being signed in, we add one to a daily visit count. To work out roughly how many different people that is, your IP address and browser type are mixed with the date and a secret into a one way code. The code cannot be turned back into your address, it is not linked to any account, and it is deleted after a day. We keep only the daily totals. This does not use cookies or browser storage.
If you are not signed in and you accept analytics cookies, Google Analytics also collects anonymous usage details about your visit: the pages you view, roughly where in the world you are, your device, browser and how you reached the site. We do not use it to identify you, and it is not used for members who are signed in.
| What we do | Our legal basis |
|---|---|
| Tell you about Wobbla and when it opens (interest list) | Your consent. You can withdraw it at any time. |
| Create and run your account, check and approve applications, and let brands and retailers book and talk to each other | Contract, meaning what we need to do to provide the service you asked for. |
| Send service emails, such as password resets and booking updates | Contract. |
| Show your profile to other members, check company details and keep the marketplace trustworthy (including reviews and dispute handling) | Our legitimate interest in running a safe, trusted marketplace. |
| Count visits to the site using Google Analytics, only if you accept analytics cookies | Your consent. You can withdraw it at any time on the cookie preferences page. |
| Count how many people visit the public pages each day, without cookies and without identifying anyone | Our legitimate interest in understanding how many people find the site. |
| Keep the platform secure, prevent misuse and fix faults (logs, sign in limits, admin records) | Our legitimate interest in security and reliability. |
| Read an uploaded invoice to list products for you | Contract, at your request. |
| Keep records we must keep for tax, accounting or legal reasons, and respond to legal requests | Legal obligation. |
We do not make decisions about you by purely automated means that have legal or similarly significant effects.
Other members. What you put in your public profile (such as your brand or store name, logo, photos, description, store location and the activations you list) can be seen by members of the platform. Bookings, offers and messages are visible to the people involved in them. Company registration and VAT numbers are used for checks and invoicing, are visible to our administrators, and are not part of your public profile.
Companies that help us run the service. They may only use your information to provide their service to us:
| Provider | What they do for us |
|---|---|
| Render | Hosts the website and application. |
| Supabase | Stores our database and the photos and files you upload. |
| Resend | Sends our emails to you. |
| Anthropic | Reads supplier invoices that a retailer chooses to upload, to pull out the product lines. The invoice is sent for that purpose only and is not kept by Wobbla. |
| Google (Google Analytics) | Counts visits to the site, only for visitors who accept analytics cookies and are not signed in. |
| Postcodes.io | Looks up a postcode when a retailer fills in their store address. |
Others. We may share information where the law requires it, to protect our rights or the safety of others, or with a buyer if the business is sold, in which case this policy would continue to apply to your information. We do not sell your information and we do not share it for advertising.
Some of the companies above may handle information outside the UK. Where they do, we rely on safeguards that UK law recognises, such as the UK's approved international data transfer terms or a UK adequacy decision for the country concerned.
We keep interest list details until you ask us to remove them or we no longer need them to contact you. We keep account information while your account is open, and afterwards only for as long as we need it for legal, accounting, security or dispute reasons. Booking and message records may be kept for that purpose after an account closes. Password reset links expire after an hour. Once we no longer need information we delete it or make it anonymous. Backups are overwritten on their normal cycle.
The site is served over an encrypted connection. Passwords are stored in scrambled form. Repeated failed sign in attempts are slowed down. Access to the admin area is limited to named administrators and their actions are recorded. No system is perfectly secure, so if something goes wrong that affects your information we will tell you and the Information Commissioner's Office where the law requires it.
We use the cookie and browser storage the site needs to work. If you are not signed in and you accept analytics cookies, we also use Google Analytics to count visits. It stays off unless you accept, and you can withdraw your consent at any time. We do not use advertising cookies. You can see exactly what we use, and manage your choices, on the cookie preferences page.
You can ask us to:
You can withdraw consent at any time, and every marketing style email we send will make it easy to say you no longer want to hear from us. To use any of these rights, contact us using the details at the top of this policy. We will normally reply within one month. Some information, such as records of bookings between two members, may need to be kept for a while for legal or dispute reasons, and we will explain if that applies.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.
Wobbla is a business service and is not meant for anyone under 18. We do not knowingly collect information from children.
We may update this policy as the platform develops. The date at the top shows when it was last changed, and we will tell account holders about important changes.