LIST FORGE · PRIVACY
Privacy policy
Last updated: 9 August 2026
This policy explains how List Forge handles personal information when its owner or an authorised seller connects an eBay account or uses List Forge to prepare and manage commerce activity.
Who controls your information
The data controller is Jamie Tyler, a sole trader trading as Live At The Mill and List Forge, Manchester, United Kingdom.
Information we process
Depending on the features authorised and used, List Forge may process:
- eBay account identifiers, seller username, marketplace and account status;
- OAuth access and refresh tokens required to maintain the authorised connection;
- product, SKU, listing, inventory, price and photograph information;
- order, offer, fulfilment, delivery and marketplace-notification information;
- technical and security records needed to operate, diagnose and protect the service; and
- marketplace account-deletion notifications. Identifiers in these notifications are stored as one-way hashes rather than readable personal information.
List Forge does not ask for or store an eBay password. Sign-in and consent take place on eBay.
How and why we use information
We use information only to provide the features requested by the authorised user, including connecting the eBay seller account, preparing and managing listings, synchronising inventory, supporting fulfilment and responding to marketplace events. We also use limited records to secure the service, prevent misuse, troubleshoot problems and meet legal or marketplace obligations.
Our legal bases under UK data-protection law are performance of a contract, legitimate interests in operating and securing List Forge, compliance with legal obligations, and consent where consent is required.
Sharing
Information is shared only where needed with eBay, hosting and security providers, and other commerce or delivery services that the authorised user deliberately connects. We may also disclose information where required by law. We do not sell personal information or use it for third-party behavioural advertising.
Security and storage
Credentials and OAuth tokens are encrypted before storage. Access is restricted to authorised operations, and the private List Forge dashboard is kept separate from this public compliance and privacy service. Reasonable technical and organisational safeguards are used to protect information in transit and at rest.
Retention and deletion
Connection information is retained while the integration remains authorised and for only as long afterwards as necessary for security, dispute resolution or legal compliance. Commerce and accounting records may be retained for periods required by UK law. When eBay sends a valid marketplace account-deletion notification, List Forge identifies and deletes or anonymises affected personal information unless retention is legally required.
Your rights
Under UK data-protection law, you may have rights to access, correct, erase or restrict your personal information, object to certain processing, and receive portable information. You may withdraw consent where processing relies on consent. You can also revoke List Forge access from your eBay account settings.
If you are dissatisfied with our response, you may complain to the UK Information Commissioner’s Office at ico.org.uk.
International processing
Some service providers may process information outside the United Kingdom. Where this occurs, we require an appropriate lawful transfer mechanism and safeguards.
Changes to this policy
We may update this policy as List Forge develops or legal and marketplace requirements change. The current version and its update date will remain available at this address.