Effective Date: 05 December 2025
This Privacy Policy explains how Trinkkets ("we", "us", "our") collects, uses, and protects your information when you visit our website, create an account, or use the Trinkkets service.
1. Who We Are
Trinkkets is an online subscription service that helps Etsy® sellers analyse and optimise their performance through market-research tools. Trinkkets Ltd is a company registered in England & Wales.
2. Data We Collect
We collect the following categories of personal data:
- Account information – such as your first name, email address, country, time zone, preferred currency, role, plan type, and the dates your account was created, activated, or deactivated. We also record which version of our Terms you accepted and when.
- Authentication and security information – including your password (stored only as a salted, hashed value), email-verification status and tokens, and password-reset tokens and expiry times. We never store your password in plain text.
- Subscription and billing information – such as your plan type, free-trial end date, and Stripe customer and subscription IDs. Your payment card details are processed by our payment processor (Stripe); we do not store full card numbers or CVC codes on our servers.
- Trial-fraud prevention data – in order to enforce our "one free trial per customer" policy, we keep a separate record containing a hashed version of your email address, your Stripe customer ID, the date of your first trial, and a Stripe card fingerprint.
- Log and usage data – such as signup and last-login timestamps, number of times you have logged in, IP addresses (which may be stored in hashed or truncated form), browser and device information, pages visited, actions taken within the app, and similar diagnostic information. When you are logged in, some of this data is associated with your account ID.
- Preferences and consents – including your choices about marketing emails, weekly summary emails, research participation, and whether your account is active, deactivated, or banned (and, where relevant, a brief reason for the ban).
- Etsy shop and listing data – when you use Trinkkets, we obtain shop- and listing-level information via the official Etsy API (for example: shop ID, listing IDs, titles, tags, categories, performance metrics, and similar). We do not collect or store Etsy buyer-level personal data.
- Website analytics data – as described in the Cookies section below, we use Google Analytics 4 (GA4) and similar technologies to understand how visitors use our website.
- Information you choose to provide – such as messages sent via our contact form, support requests, or feedback.
3. How We Use Your Information
We use your information to:
- Create and manage your Trinkkets account, provide access to the service, and personalise your experience (for example by using your time zone or preferred currency).
- Provide and administer free trials, paid subscriptions, billing, and account status (including enforcing our free-trial policy and preventing abuse).
- Send essential service communications, such as account verification emails, password-reset emails, billing notifications, and important product or security updates.
- Send marketing or product-update emails where you have given us consent, and manage your email preferences (including weekly summary emails, if you opt in).
- Analyse aggregated and pseudonymised usage patterns to understand how the service is used, improve existing features, and decide what to build next.
- Maintain the security and stability of our systems, monitor for fraud and abuse, and enforce our Terms & Conditions (for example by using IP- and card-based signals and our banned-account flags).
- Carry out optional research or product-improvement studies where you have explicitly opted in to research participation. Any external reporting is anonymised or aggregated.
- Comply with our legal and regulatory obligations, including record-keeping for tax and accounting purposes.
4. Legal Bases for Processing
We process your personal data under the following legal bases, as defined by UK GDPR:
- Contract – where processing is necessary to create and operate your account, provide the Trinkkets service, run free trials, and manage your subscription.
- Legitimate interests – for example to secure our platform, prevent abuse, enforce our free-trial policy, understand how the service is used, and improve our tools. We balance these interests against your rights and expectations.
- Consent – for sending marketing emails, optional weekly summaries, research invitations or participation, and for using non-essential cookies such as GA4. You can withdraw your consent at any time.
- Legal obligation – where we must retain certain information for tax, accounting, or other legal requirements.
5. Data Sharing
We do not sell or rent your personal data. We may share your data with trusted third-party service providers who help us operate Trinkkets, including:
- Hosting and infrastructure providers – who provide the servers, databases, and storage used to run our website and application.
- Payment processors – such as Stripe, which handles your payment card details and processes subscription payments. Stripe may act as an independent controller of your payment data.
- Email and communication providers – used to send account emails, notifications, and (where permitted) marketing messages.
- Analytics and monitoring tools – such as Google Analytics 4, logging, and error-tracking services that help us understand usage and maintain stability.
- Professional advisers – such as accountants or legal advisers, where reasonably necessary for the operation of our business.
These service providers are only given access to the data they need to perform their functions and are required to protect your information and process it only according to our instructions or their own legal obligations.
6. Cookies & Analytics
We use essential cookies that are necessary for the operation and security of the site (for example to keep you logged in and protect against cross-site request forgery). These are always active.
We also use Google Analytics 4 (GA4) to help us understand how visitors use our website. This allows us to improve the user experience by analysing general trends such as page views, navigation paths, and time spent on pages. GA4 may use cookies or similar technologies to collect non-personally identifiable information, including:
- Pages visited
- Approximate geographic location
- Device and browser type
- Time spent on the site
Analytics cookies are only set if you provide consent via the cookie banner. You can change or withdraw your consent at any time using the banner or cookie settings on our website. We do not use advertising or marketing cookies. If that changes, we will update this policy and request appropriate consent.
7. International Transfers
Some of our service providers are based outside the United Kingdom or the European Economic Area. Where we transfer personal data internationally, we take appropriate steps to ensure a similar level of protection, such as using standard contractual clauses approved by the UK or EU authorities or working with providers that rely on an adequacy decision.
8. How We Protect Your Data
We implement appropriate technical and organisational safeguards to protect your personal information against unauthorised access, alteration, disclosure, or destruction. This includes server-side security controls, access limitations, encryption in transit, and the use of salted, hashed passwords. As the platform evolves, we will continue to enhance these protections in line with industry standards and best practices.
9. Data Retention
We keep your personal data only for as long as necessary for the purposes described in this Policy, including to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. In particular:
- Account and subscription records are generally kept while your account is active and for a reasonable period afterwards (for example, up to six years) for tax, accounting, and audit purposes.
- Logs and usage data may be kept for a shorter period and then aggregated or anonymised.
- Trial-ledger records (such as hashed emails and card fingerprints) may be retained for longer so that we can enforce our free-trial policy and prevent abuse.
- If you request deletion of your account, we will deactivate it and remove or anonymise personal data that we are not required to keep.
10. Your Rights
Under UK data-protection law, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data, in certain circumstances.
- Request restriction of, or object to, certain types of processing.
- Request the transfer of your data to you or another service (data portability), where applicable.
- Withdraw consent at any time where we rely on consent (for example for marketing or analytics).
To exercise any of these rights, email us at contact@trinkkets.com. We may need to verify your identity before acting on your request.
If you are unhappy with how we handle your personal data, you also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would, however, appreciate the chance to address your concerns first.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the Effective Date at the top of this page. If we make material changes, we may also notify you by email or via the app. Your continued use of the service after an update means you accept the revised Policy.
12. Contact Us
Trinkkets Ltd
124 City Road
London
England
EC1V 2NX
Email: contact@trinkkets.com
Website: trinkkets.com