This page is maintained by Camera Centre UK to answer common questions about how we handle your data on the trade-in service. It describes the controls we currently have in place it is not an independent certification or a guarantee.
Sign-in is handled by our authentication provider (Lovable Cloud, built on Supabase). Passwords are stored hashed we can never see your password.
New passwords are checked against a database of known breached passwords, and rejected if they appear there.
Admin and staff areas are gated by a separate role table checked on the server an ordinary account cannot see other customers' submissions, even by guessing URLs.
Your submissions, invoices, credit balance and profile live in a managed Postgres database hosted on Lovable Cloud.
Every customer-facing table has row level security enabled: the database itself only returns rows that belong to your account when you're signed in. This is enforced at the database layer, not just in the UI.
All traffic between your browser and our servers is encrypted in transit (HTTPS/TLS).
Sort code and account number are encrypted at rest with a key controlled by Camera Centre UK. They are never shown in plain text in the customer area, and they are only decrypted on the payout screen for authorised staff processing your payment.
Trade-in photos and generated invoices are held in private storage buckets they are not on a public URL. When you view them, we generate a short-lived signed link that only works for you.
- Contact details (name, email, phone) to send you your quote and updates.
- Postal address: for postage labels and payout paperwork.
- Item details & photos: so we can value what you're sending.
- Bank details: only if you choose bank transfer payout.
- ID / proof of ownership: where required for higher-value items.
We don't use advertising trackers or sell your details to anyone.
- Lovable Cloud (Supabase): hosting, database and authentication.
- Email delivery for transactional messages such as sign-in and quote updates.
We keep your account and trade in history for as long as your account is active. After a completed payout we may retain the transaction record and bank details for accounting to meet UK accounting and anti-fraud obligations.
You can ask us to close your account and delete personal data that we're not required to keep.
You have the right to:
- Ask what we hold about you.
- Correct anything that's wrong.
- Have your data deleted, subject to legal retention obligations above.
- Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Privacy questions or data requests: info@cameracentreuk.com
Camera Centre UK, 14–16 Morgan Arcade, Cardiff, CF10 1AF. 029 2039 4182
Last reviewed August 2026. Back to home.