Every order protected — your payment is held by PUKI while you check the device.
Help & ContactSign upLog in

Privacy Policy

Privacy Policy

Last updated: 6 October 2026

This policy explains what personal information PUKI Devices collects, why we collect it, who we share it with, and what rights you have.

PUKI Devices is operated by Sindoor Ltd (Company No. 16442521), registered in England and Wales at 6 Butler Close, Edgware, HA8 5QQ. Our business address is 137 St Johns Road, Wembley, HA9 7JP.

Sindoor Ltd is the data controller for the personal information described in this policy.

Contact us about privacy: info@pukidevices.co.uk

  1. Information we collect When you create an account Your name Your email address A profile photo, if you add one Your password, which we store only in encrypted form When you buy Your delivery address Your order history Messages you send to sellers through the site Payment card details, which are collected and stored by Stripe, not by us. We receive only a confirmation that payment succeeded and the last four digits of the card. When you sell Your return address Your bank or payout details, which are collected and held by Stripe, not by us Identity information Stripe requires in order to pay you Details of the items you list, including photographs Automatically Your IP address Technical information about your browser and device Pages you visit on our site Cookies and similar technologies, as described in section 7 If you report a problem The reason you give for a dispute Any information you send us while we look into it
  2. Why we use your information, and our legal basis What we use it for Legal basis Creating and running your account Performance of a contract Processing orders and payments Performance of a contract Arranging delivery and shipping labels Performance of a contract Sending order emails and notifications Performance of a contract Handling disputes and refunds Performance of a contract Detecting and preventing fraud Legitimate interests Keeping the marketplace safe and working properly Legitimate interests Understanding and improving how the site is used Legitimate interests Meeting our legal and tax obligations Legal obligation Marketing emails, where you have opted in Consent

Where we rely on legitimate interests, we have considered whether those interests are outweighed by your rights, and we believe they are not. You can object to this processing — see section 8.

  1. Who we share your information with

We do not sell your personal information to anyone.

We share it with the following service providers, who process it on our behalf:

Who What they do Where Sharetribe Provides the marketplace platform that runs our site EU Stripe Processes payments and seller payouts EU / US Shippo Creates shipping labels when used US Render Hosts our website and services EU (Frankfurt) Neon Hosts our database UK (London) Google Email delivery, and the AI service described in section 4 EU / US

We also share information:

Between buyers and sellers, as necessary to complete an order. A seller sees the buyer's name and delivery address. A buyer sees the seller's name and, where relevant, a return address. With the authorities, where we are required to by law. With professional advisers, such as accountants or lawyers, where necessary.

Where information is transferred outside the UK, we rely on the UK's adequacy regulations or on standard contractual clauses approved for use in the UK.

  1. Our use of AI

We use an AI service provided by Google to help us understand and explain the status of orders on PUKI Devices.

What we send: order status information only — the stage an order has reached, timings, amounts, and the reason our system gives for an outcome.

What we never send: names, email addresses, postal addresses, contact details, listing titles or descriptions, messages, dispute text, payment references, or any identifier that could link the information to a particular person.

This is used only to help our own staff answer questions about an order. It is not used to make automated decisions about you, and it does not affect any refund, payout or dispute outcome. Those decisions are made by our own systems and by a person.

We also use AI to help generate listing descriptions and to assess photographs of items, using information that sellers provide about their own listings.

  1. How long we keep your information What How long Account information While your account is open, and for 12 months after you close it Order and transaction records 6 years, as required for tax and accounting Dispute records 6 years Messages between buyers and sellers While the account is open Email delivery logs 12 months Technical and security logs 12 months

After these periods we delete the information or make it anonymous.

  1. Your rights

Under UK data protection law you have the right to:

Be told what personal information we hold about you Get a copy of it Have it corrected if it is wrong Have it deleted, where we no longer need it Restrict how we use it, in some circumstances Object to our use of it, where we rely on legitimate interests Receive it in a portable format, so you can take it elsewhere Withdraw consent at any time, where you have given it

To exercise any of these, email info@pukidevices.co.uk. We will respond within one month.

Some rights are limited. For example, we must keep transaction records for six years for tax purposes, even if you ask us to delete your account.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk, or call 0303 123 1113.

  1. Cookies

We use cookies to:

Keep you signed in Remember what is in your basket Keep the site secure Understand how the site is used

You can block or delete cookies in your browser settings. If you block essential cookies, parts of the site will not work.

  1. Security

We protect your information by:

Encrypting all traffic to and from our site Storing passwords only in encrypted form Never storing full card numbers — these are held by Stripe Limiting who can access personal information Keeping records of changes to important data

No system is completely secure. If a breach occurs that is likely to affect your rights, we will tell you and the ICO as the law requires.

  1. Children

PUKI Devices is not for people under 18. We do not knowingly collect information about children. If you believe a child has given us their information, email info@pukidevices.co.uk and we will delete it.

  1. Changes to this policy

We may update this policy. When we make a significant change, we will update the date at the top and, where appropriate, tell you by email.

Questions? Email info@pukidevices.co.uk