Privacy Notice
Last updated: 7 June 2026
1. Who we are
This Privacy Notice explains how Minidragon Ltd (“we”, “us”, “our”), the provider of MezzStock.com (the “Service”), collects and uses your personal data. Minidragon Ltd is the data controller for personal data processed in connection with the Service.
2. What personal data we collect
- Account data: name, email address, password (hashed), organisation name.
- Profile and supplier data: business name, contact details, address.
- Content you create: stock items, photos, surveys, designs, marketplace listings, enquiries and messages.
- Support communications: messages you send to us and our replies.
- Usage and device data: IP address, device identifiers, browser type, pages viewed and actions taken in the Service.
- Cookies and similar technologies: see “Cookies” below.
Payment details (card number, billing address) are collected directly by our payment processor Stripe and are not stored on our systems.
3. Why we use your data and our legal basis
| Purpose | Legal basis |
|---|---|
| Creating and managing your account and organisation | Performance of contract |
| Providing the Service and storing your content | Performance of contract |
| Processing payments, subscriptions, invoicing and tax (via Stripe) | Performance of contract; legal obligation |
| Providing customer support | Performance of contract; legitimate interests |
| Security, fraud prevention and abuse detection | Legitimate interests; legal obligation |
| Improving the Service and analytics | Legitimate interests |
| Service-related notices (e.g. billing, security) | Performance of contract; legal obligation |
| Marketing communications | Consent (you can withdraw at any time) |
4. Who we share data with
- Service providers / sub-processors who help us run the Service, including cloud hosting, database and storage providers, email delivery, analytics and customer support tooling.
- Stripe, our payment processor, for subscription management, payments, tax compliance and invoicing.
- Third-party marketplaces you choose to connect to (e.g. eBay), limited to the data needed to publish your listings.
- Other marketplace users for content you publish to the Super Stock Marketplace (such as listings and enquiries).
- Professional advisers (legal, accounting) where reasonably necessary.
- Authorities where required to comply with law, regulation or valid legal process.
5. International transfers
Some of our providers are located outside the UK / EEA. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK / EU Standard Contractual Clauses or adequacy decisions.
6. Data retention
We keep personal data for as long as your account is active and as long as needed to provide the Service. We may keep certain records longer where required by law (for example, financial and tax records). When data is no longer needed, it will be deleted or anonymised.
7. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, role-based access to your organisation’s data, and secure cloud infrastructure.
8. Your rights
Depending on your location, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate or incomplete data;
- request erasure of your data;
- restrict or object to certain processing;
- request portability of data you provided to us;
- withdraw consent where processing is based on consent;
- complain to your local data protection authority (in the UK, the ICO).
We will respond to verified requests within one (1) month, in line with applicable data protection law.
9. Cookies
We use cookies and similar technologies that are strictly necessary to keep you signed in and to provide core Service functionality. Where we use optional analytics or marketing cookies, you can manage your preferences via your browser settings or any cookie banner we display.
10. Children
The Service is intended for business users and is not directed to children.
11. Changes
We may update this Privacy Notice from time to time. Material changes will be notified by email or in-app.
12. Contact
To exercise your rights or ask a privacy question, contact Minidragon Ltd via the support details provided in-app.