Privacy notice

1. Who is responsible

We Buy Mobile Phones is a trading name of I AM DROID LTD, a company registered in England and Wales under company number 12062250. Our registered office and business address is 58 James Street, Bradford, BD1 3PZ, United Kingdom.

I AM DROID LTD, trading as We Buy Mobile Phones, is the data controller for personal information used to run this phone-buying service. Write to the Privacy Team, I AM DROID LTD, 58 James Street, Bradford, BD1 3PZ, United Kingdom. A public support/privacy email address is still to be confirmed.

2. Information used

When you sign in, the site receives an account identifier, email and the name provided by ChatGPT sign-in. When you submit a sale, we collect your name, telephone number, postal address, device model, storage, optional IMEI, condition and repair answers, ownership declaration, notes and preferred payment method. If you choose PayPal, we collect its payment email.

We also hold sale messages, staff inspection notes, status history, tracking references, offer amounts, payment references and the terms version and declaration time. Hosting and security services may process IP addresses, browser information, access logs and authentication information. For bank-transfer payments, we collect the account holder name, six-digit UK sort code and eight-digit account number. These payout details are encrypted when stored and full details are accessible only to authorised staff for arranging your agreed payment. Customer account summaries show only the last four account-number digits. We also record whether you are a personal or business seller and the business name where applicable. We never collect online-banking passwords, card PINs or one-time security codes.

If you allow optional statistics, we count public page views and quote requests in aggregate daily totals. We do not store visitor identifiers, full URLs, search terms, referrers, IP addresses or device fingerprints in our analytics tables, and do not link those totals to customer accounts. Operational reports also summarise sales and payment references already held to provide our service. Use Privacy choices to stop optional statistics; your choice does not affect selling a phone.

You provide most sale information. Sign-in information comes from the identity service. Device-lookup results, inspection findings, payment confirmations and carrier updates may come from the relevant provider or team member. Do not include unrelated sensitive personal information in notes or messages.

3. Purposes and lawful bases

• Steps at your request before a contract and performance of the purchase agreement: identifying the device, reviewing your request, arranging inspection, communicating about your sale, paying you and arranging a return.
• Legitimate interests: protecting the service against misuse and fraud, checking proportionate ownership concerns, managing disputes and keeping a reliable audit trail. These interests must be balanced against your rights.
• Legal obligations: records or disclosures required by applicable tax, accounting, regulatory or law-enforcement duties. We do not rely on a blanket legal-obligation claim for all processing.
• Consent: an optional external IMEI lookup is requested separately. You can decline and use model search. Withdrawing consent does not undo a lookup already performed or affect processing supported by another lawful basis. The site does not currently run a marketing-signup programme.

4. Providers and sharing

The site uses OpenAI Sites/ChatGPT sign-in and Cloudflare hosting/database infrastructure to operate the service. Authorised staff access information for their work. Where used for your sale, carriers receive delivery details and payment providers receive the information necessary to make a payment. Professional advisers or public authorities receive information only where justified or required.

If external IMEI lookup is connected and you request it, the IMEI is sent to the configured IMEI.org service for model identification. It is not a battery-health, ownership or blacklist certificate. Model search can be used without that lookup. Catalogue and price-source requests ordinarily use model/variant details rather than customer names or postal addresses.

The application currently requests web-font resources from Google; this exposes normal connection information, such as IP address and browser headers, to the font provider. It does not by itself add Google Analytics or Google Ads tracking.

We do not sell customer contact lists. Supplier roles, agreements, sub-processors, data locations and international-transfer arrangements are still to be verified for public launch. We do not claim that all data stays in the UK or that a particular transfer safeguard is already in place. Before a restricted transfer, the applicable UK adequacy route or other lawful safeguard must be established. You may request information about relevant safeguards by writing to the Privacy Team at our business address.

5. Retention and security

Information is needed while a request is active, a device is in transit or custody, payment or return is outstanding, or a complaint is being resolved. Relevant transaction and payment records may need to be retained afterwards for applicable accounting obligations and legal claims. The appropriate period depends on the record type, applicable accounting and legal obligations, and any legal hold.

Before public launch, the operator must approve a category-by-category retention schedule and implement review, deletion or anonymisation. This edition has no automated retention purge, and a fixed deletion period is not promised. Request a review or erasure through the privacy contact; information that must lawfully be retained may be restricted rather than deleted.

The application checks sign-in and sale ownership before giving access to private sale records and restricts staff functions. No internet service is completely risk-free. Keep your sign-in secure. Never send banking passwords or a phone account password in a message.

6. Your information rights

Depending on the circumstances, you may request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent where consent is used. Rights can have legal exceptions; we explain a refusal and how you can challenge it. We may need proportionate information to verify identity. Requests are normally free and handled within the applicable statutory timeframe, usually one month, subject to lawful pauses or extensions.

Necessary sale information is required to arrange and complete a transaction. If you do not provide it, we may be unable to proceed. IMEI lookup is optional. You can ask for account closure, although this does not automatically delete records needed for a lawful ongoing purpose.

Indicative quotes may be calculated from variant, condition and pricing rules. The physical inspection and final offer are reviewed by the team and you decide whether to accept. The service does not complete a purchase solely through an automated quote.

7. Privacy questions and complaints

You can send a privacy question, rights request or complaint by post to the Privacy Team, I AM DROID LTD, 58 James Street, Bradford, BD1 3PZ, United Kingdom. For an existing sale, you may also use its message thread. You do not need an account or a sale to write to us. A public privacy email will be added once confirmed.

We must acknowledge a data-protection complaint within 30 days, investigate without undue delay, keep you informed as appropriate and explain the outcome. You may complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/. This does not remove other available remedies.

Contact the Information Commissioner’s Office ↗

8. Children and updates

The service is intended for sellers aged 18 or over. If you believe a child has provided personal information, contact us so it can be assessed and handled appropriately. Material privacy changes will be explained; we will not assume that agreement to sale terms supplies consent for unrelated marketing. See the Cookies notice for browser technologies.