Last updated: 24 September 2026
This policy explains how Echo Exchange (“we”, “us”) collects and uses your personal information when you use this website or sell music gear to us. We’ll keep it simple and we won’t use your details for anything you wouldn’t expect.
Who we are
Echo Exchange is a sole trader business run by its owner, buying used music gear from sellers in Sussex and across the UK. We are the “data controller” for the information described below. You can contact us at sales@echoexchange.uk.
What information we collect
- Enquiry details. When you fill in our Sell Your Gear form or email us: your name, email address, phone number (if you give one), details about the gear you want to sell (including any photos you send), and, if you choose to tell us, how you heard about us.
- Sale details. If you go ahead with a sale: your collection or return address, and the bank details we need to pay you.
- Website information. Like most websites, our hosting provider may record basic technical information such as your IP address and browser type in server logs, for security and to keep the site running.
We don’t use advertising or analytics trackers on this website.
Why we use your information
- To reply to your enquiry and give you a quote or offer.
- To collect, receive and pay for gear you sell to us.
- To keep records of what we buy and pay for, including for accounts and tax.
- To keep our website secure and working.
We only need this information to deal with your enquiry or sale. We won’t sell your details, and we won’t add you to a mailing list without asking you first. Our legal bases are taking steps at your request before a sale and carrying out the sale (contract), meeting our legal obligations such as tax records, and our legitimate interest in running the business securely.
Who we share it with
We only share information where it’s needed to do what you’ve asked:
- Our website hosting and email providers, who store and deliver the messages you send us.
- Courier and postal services, if we arrange a return or delivery.
- Our bank, when we pay you.
- Where required by law, for example to HMRC or the police.
Our homepage also displays a small feed of our public Instagram posts, so Instagram (Meta) may receive your usual browser information when that content loads. You can read Instagram’s own privacy information on their website.
How long we keep it
- Enquiries that don’t lead to a sale: up to 12 months, then we delete them.
- Records of completed purchases and payments: up to 6 years, because we need them for accounting and tax.
Your rights
You have the right to ask us for a copy of the information we hold about you, to have it corrected, to have it deleted (where we’re not required to keep it), to restrict or object to how we use it, and to ask for it in a portable format. To make a request, email sales@echoexchange.uk. We’ll respond within one month.
If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk. We’d appreciate the chance to put things right first.
Changes to this policy
If we change this policy, we’ll update the date at the top of this page.