Privacy Policy
Version 1.0
Effective date: 1 September 2026
Last updated: 1 September 2026
1. Who we are
Pick Your Number is a UK-based marketplace for buying, selling and valuing memorable UK mobile telephone numbers.
Pick Your Number is a trading name operated by Nicky Crancher.
For UK data protection law, Nicky Crancher trading as Pick Your Number is the data controller responsible for the personal information described in this Privacy Policy.
Email: hello@pickyournumber.co.uk
Business correspondence address: Pick Your Number 203 Capstone Road, Bournemouth, BH8 8SA
In this Privacy Policy, “Pick Your Number”, “PYN”, “we”, “us” and “our” refer to Pick Your Number.
This policy explains what personal information we collect, why we use it, who we may share it with, how long we keep it and the rights you have.
2. Information we collect
The information we collect depends on how you use Pick Your Number.
Account and contact information
We may collect:
- your name;
- email address;
- mobile telephone number;
- account username or identifier;
- account preferences;
- billing or contact address where required;
- records relating to your account and its security.
Mobile number listing information
If you submit a mobile number for valuation or sale, we may collect:
- the mobile number;
- current or reported mobile network;
- whether the service is active;
- information about whether the number has previously been used;
- information about ownership or control of the number;
- number expiry or activation information where relevant;
- expected selling price;
- valuation information;
- listing notes;
- listing status;
- verification status;
- PAC-readiness or transfer status.
When you ask us to publicly list a mobile number for sale, you understand that the mobile number itself will be displayed publicly as part of the marketplace listing.
Public listing information may also include the asking price, number pattern, rating, tier, description, sale status and other information used to market the number.
We do not normally publish a seller’s personal name, email address or other private contact information as part of the listing.
We may also promote publicly listed numbers through Pick Your Number’s marketing channels, including social media and advertising.
3. Seller and mobile-number verification
Pick Your Number may take steps to verify that a seller controls the mobile number they are attempting to list or transfer.
This may include sending a one-time password or verification code by SMS to the relevant mobile number.
We may retain evidence such as:
- the number verified;
- date and time of verification;
- verification method;
- whether verification succeeded or failed;
- verification reference;
- account associated with the verification;
- relevant security information.
We do not intend to retain a successfully used OTP code after it is no longer required.
Verification of a number confirms evidence of control at the time of verification. It does not necessarily establish legal ownership of every right associated with that service.
4. Identity verification
We may require additional seller verification where this is reasonably necessary for security, fraud prevention, payment processing, regulatory requirements or higher-risk transactions.
Where identity verification is required, we intend wherever reasonably possible to use a specialist third-party identity verification provider rather than storing copies of identity documents ourselves.
The third-party provider may process information such as identification documents, photographs or identity information in accordance with its own privacy information and its contractual relationship with us.
Pick Your Number may retain limited information such as:
- identity verification completed: yes/no;
- verification provider;
- verification date;
- verification reference;
- outcome of verification.
Unless specifically necessary, we do not want customers to send passport copies, driving licences or other identity documents directly to us.
5. Buying and selling transactions
When a number is bought or sold through Pick Your Number, we may create an audit record relating to the transaction.
This can include:
- buyer and seller account details;
- number being transferred;
- price;
- order number;
- date and time of transaction events;
- payment status;
- seller acknowledgement;
- verification records;
- PAC submission status;
- PAC reveal status;
- transfer status;
- mobile network information;
- pre-transfer and post-transfer checks;
- buyer confirmation;
- seller payout information;
- refund or cancellation records;
- correspondence;
- dispute records;
- fraud or security information.
This audit trail helps us operate the marketplace, resolve problems, protect buyers and sellers, prevent fraud and provide evidence if a transaction is disputed.
6. PAC codes and mobile-number transfers
A Porting Authorisation Code (PAC) may be required to transfer a mobile number between networks.
Where Pick Your Number facilitates a transfer, we may process a PAC supplied by the seller.
PAC information is treated as sensitive transaction information.
A PAC may be securely made available to the relevant authenticated buyer once the appropriate transaction stage has been reached.
We do not publish PAC codes.
Our aim is to retain the evidence that a PAC was provided, released or used, rather than retaining the PAC itself indefinitely.
Once a transaction is completed, cancelled or the PAC is no longer required, the PAC itself will normally be deleted as soon as reasonably practicable and no later than the applicable retention period described below.
Transaction audit records showing that the PAC was supplied or revealed may be retained for longer for fraud prevention, contractual, accounting and dispute purposes.
7. Payment information
Payments may be processed by third-party payment processors, merchant acquirers, banks or other authorised payment service providers.
Pick Your Number may receive and retain information such as:
- payment status;
- transaction reference;
- amount;
- currency;
- date;
- payment provider;
- limited billing information;
- refund information;
- chargeback information.
We do not intend to store customers’ complete payment card numbers, CVV security codes or other full card credentials on Pick Your Number systems.
Payment providers may process personal information under their own legal and regulatory responsibilities.
8. Valuations and AI-assisted processing
When you submit a mobile number for valuation, we may use software and AI-assisted tools to help:
- analyse number patterns;
- identify memorable features;
- compare characteristics;
- categorise a number;
- suggest a marketplace tier;
- assist with valuation;
- prepare draft listing descriptions.
AI-assisted tools may therefore process information submitted as part of the valuation or listing process.
Where practical, we minimise the personal information provided to such systems.
AI assistance may inform a valuation, but Pick Your Number does not currently intend to make decisions producing legal or similarly significant effects on individuals solely through automated processing.
Valuations are estimates and are not guarantees that a number will sell for a particular amount.
9. Communications and customer support
If you contact us, we may retain correspondence including:
- emails;
- website form submissions;
- support requests;
- complaints;
- transaction enquiries;
- valuation enquiries;
- dispute correspondence.
We use this information to respond to you, provide support and maintain an appropriate record of our interactions.
10. Technical and security information
When you use our website or account systems, we may automatically receive technical information such as:
- IP address;
- device and browser information;
- login records;
- timestamps;
- security events;
- failed login attempts;
- session information;
- approximate location derived from technical information;
- website request and error logs.
We use this information to operate and secure the website, diagnose problems, prevent abuse and investigate suspicious activity.
11. Cookies and website analytics
Pick Your Number may use cookies and similar technologies.
Some cookies are necessary for the website to function, for example for:
- shopping baskets;
- checkout;
- customer accounts;
- login sessions;
- security;
- fraud prevention;
- remembering privacy preferences.
We may also use Google Analytics or similar services to understand how visitors use the website and to improve Pick Your Number.
Where the law requires consent for the analytics technology or configuration we use, we will request consent before setting the relevant cookies or accessing information on your device.
Where we rely on a legal exception permitting analytics for statistical purposes, we will apply the conditions required by law, including appropriate transparency and a way to object where required.
We do not currently intend to use personal information for behavioural advertising or profiling without providing the appropriate information and obtaining consent where legally required.
Further information about the cookies in use will be provided through our cookie controls and/or Cookie Policy.
12. Marketing
We may contact customers about Pick Your Number products, services, listings or promotions where permitted by law.
Depending on the circumstances, this may be based on:
- your consent;
- an existing customer relationship where applicable;
- another lawful basis permitted by UK data protection and electronic marketing law.
You can unsubscribe from electronic marketing at any time.
We may retain a minimal suppression record after you unsubscribe so that we can ensure that your marketing preference continues to be respected.
Transactional and service communications — for example messages relating to your account, purchase, sale, security verification or transfer — are not marketing communications and may still be sent where required to provide the service.
13. Our lawful bases for using personal information
UK data protection law requires us to have a lawful basis for processing personal information.
Depending on the activity, we may rely on the following.
Contract
We process information where necessary to:
- create and administer your account;
- provide a valuation you request;
- list a number for sale;
- process a purchase;
- facilitate a sale;
- facilitate a number transfer;
- provide customer support relating to our services;
- issue or process refunds;
- administer seller payouts.
This includes processing necessary to take steps at your request before entering into a contract.
Legitimate interests
We may process information where necessary for legitimate business interests such as:
- protecting Pick Your Number, buyers and sellers;
- preventing and detecting fraud;
- verifying control of numbers;
- securing accounts and systems;
- maintaining transaction audit records;
- investigating suspicious activity;
- defending transactions and chargebacks;
- handling disputes;
- improving our services;
- operating and administering the marketplace.
When relying on legitimate interests, we consider whether our interests are outweighed by your rights and freedoms.
Legal obligation
We may process or retain information where necessary to comply with legal obligations, including:
- taxation;
- accounting;
- financial record keeping;
- law-enforcement requirements;
- court orders;
- regulatory obligations;
- data protection obligations.
Consent
Where we rely on consent, for example for certain marketing or website technologies, you may withdraw your consent at any time.
Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.
14. Who we share personal information with
We do not sell customer personal information to data brokers.
We may share information where reasonably necessary with organisations including:
- website hosting and infrastructure providers;
- email and communication providers;
- SMS and mobile verification providers;
- mobile-network or number verification services;
- payment processors and merchant acquirers;
- banks;
- identity verification providers;
- analytics providers;
- security and fraud-prevention providers;
- IT and website contractors;
- authorised business assistants;
- accountants and professional advisers;
- insurers;
- legal advisers;
- law-enforcement or regulatory authorities where required;
- courts or other parties where disclosure is legally required.
We seek to limit access to information to what is reasonably necessary for the recipient’s role.
15. Buyers and sellers
Some personal information necessarily passes between parties involved in a transaction.
For example, an authenticated buyer may receive information necessary to complete the transfer of a purchased number.
A seller may receive appropriate information about the status of an order or transfer.
We aim to avoid disclosing unnecessary private contact information between buyers and sellers.
PAC codes and similar transfer credentials will only be disclosed where necessary for the relevant transaction.
16. International processing
Although Pick Your Number is a UK business and our primary systems may be located in or operated from the UK, some organisations or authorised contractors that support us may process or access information from outside the UK.
This may include authorised contractors working from countries such as the Philippines, as well as technology providers operating internationally.
Where personal information is made available to a separate organisation outside the UK and UK data protection law treats this as a restricted international transfer, we will take steps to ensure there is an appropriate legal mechanism.
Depending on the circumstances, this may include:
- UK adequacy regulations;
- approved contractual safeguards;
- the UK International Data Transfer Agreement;
- an appropriate UK Addendum;
- another mechanism permitted by UK data protection law.
We also seek to minimise the information accessible to overseas contractors.
For example, a contractor responsible only for creating marketplace listings does not ordinarily need access to PAC codes, payment credentials, identity documents or unrelated customer transaction information.
17. How long we keep information
We do not keep personal information indefinitely simply because we have collected it.
Retention depends on why the information is required and whether we have continuing contractual, security, accounting or legal reasons to retain it.
Our current intended retention periods include the following.
Used or expired OTP codes
The actual OTP should be deleted or rendered unusable after successful use or expiry.
Failed OTP verification records
Normally retained for up to 90 days, unless required for a security or fraud investigation.
Successful mobile-number verification records
Normally retained while the listing remains active and for up to 12 months afterwards.
Where verification forms part of a completed sale, relevant evidence may instead form part of the longer transaction audit record.
PAC codes
The actual PAC will normally be deleted as soon as it is no longer required.
Unless there is a specific reason requiring shorter or longer retention, our target maximum is 30 days after completion, cancellation or expiry of the relevant transfer process.
Records showing that a PAC was provided, revealed or processed may be retained without retaining the PAC itself.
Failed or abandoned transactions
Normally retained for up to 12 months.
Completed transaction records
Core transaction, sale and audit records may normally be retained for up to 6 years after completion where required for contractual evidence, accounting, fraud prevention or dispute purposes.
Payment, accounting and tax records
Normally retained for up to 6 years, or for another period required by applicable tax, accounting or legal obligations.
Chargebacks and disputes
Relevant evidence may normally be retained for up to 6 years after the transaction or closure of the dispute where reasonably necessary.
General customer support correspondence
Where correspondence does not form part of a transaction or dispute, it will normally be retained for up to 2 years after the matter is closed.
Customer accounts
Account information will normally be retained while an account remains active.
Where an account is closed or becomes inactive, general account information may normally be deleted after 2 years, subject to information that we need to retain separately for completed transactions, taxation, disputes, fraud prevention or other legal reasons.
Identity verification
Where a third-party provider performs identity verification, Pick Your Number does not normally intend to retain the underlying identity document.
Verification status and references may be retained while reasonably necessary for seller verification and, where linked to a transaction, may form part of the transaction audit record.
Security logs
Security and technical logs will normally be retained for a limited period appropriate to their security purpose, unless required for an investigation or dispute.
Marketing suppression records
A minimal record of an unsubscribe or objection may be retained for as long as reasonably necessary to ensure that we continue to respect that preference.
We periodically review retention periods and may securely delete or anonymise information when it is no longer required.
Information held in backups may remain until the relevant backup is securely overwritten or expires through our normal backup cycle.
18. Security
We take reasonable technical and organisational measures to protect personal information from:
- unauthorised access;
- loss;
- misuse;
- alteration;
- accidental disclosure;
- unlawful disclosure;
- destruction.
Measures may include:
- access controls;
- administrator multi-factor authentication;
- role-based permissions;
- encrypted connections;
- secure hosting;
- logging;
- backups;
- security monitoring;
- limiting contractor access;
- secure payment providers;
- specialist identity verification providers.
No internet-based service can guarantee absolute security.
If a personal data breach occurs, we will investigate it and make notifications to affected individuals and/or the Information Commissioner’s Office where required by law.
19. Your data protection rights
Depending on the circumstances, UK data protection law may give you the right to:
Access
Ask us for a copy of personal information we hold about you.
Correction
Ask us to correct inaccurate or incomplete information.
Erasure
Ask us to delete personal information in certain circumstances.
This right is not absolute. For example, we may need to retain transaction or accounting records despite an account deletion request.
Restriction
Ask us to restrict how we use information in certain circumstances.
Objection
Object to certain processing, particularly processing based on legitimate interests or direct marketing.
Data portability
Receive certain information you provided to us in a portable format where the legal requirements apply.
Withdraw consent
Where processing is based on consent, you can withdraw that consent.
Automated decision-making rights
You may have rights relating to decisions made solely through automated processing that produce legal or similarly significant effects.
Pick Your Number does not currently intend to make such significant decisions solely through automated processing.
20. Exercising your rights
To exercise a data protection right, contact:
Please explain what you are requesting and provide enough information for us to identify the relevant account or records.
We may need to take reasonable steps to verify your identity before releasing or changing personal information.
We will respond within the period required by data protection law. In most cases, this will be within one month.
You will not normally be charged for exercising your data protection rights.
21. Data protection complaints
If you are concerned about how Pick Your Number has handled your personal information, please contact:
We will provide a way for you to make a data protection complaint.
We will acknowledge receipt of a data protection complaint within 30 days and will investigate and respond without undue delay.
Where appropriate, we will keep you informed while the complaint is being investigated.
We hope that we can resolve any concern directly.
You also have the right to raise a complaint with the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
22. Information about other people
If you provide personal information relating to another person, you should only do so where you have an appropriate reason and authority to provide it.
You should not submit another person’s mobile number for sale without having the appropriate right to control and transfer that number.
23. Special category information
Pick Your Number does not ordinarily need information about matters such as:
- health;
- racial or ethnic origin;
- religion;
- political opinions;
- sexual orientation;
- biometric information used for identification.
Please do not provide this type of information unless it is genuinely necessary for a particular matter.
Where a specialist identity provider processes biometric or similar information as part of identity verification, its handling of that information will be governed by the applicable legal arrangements and privacy information.
24. Children’s information
Pick Your Number is not designed as a service for children and we do not intentionally seek to collect children’s personal information.
If we become aware that personal information relating to a child has been provided in circumstances where it should not have been, we may take steps to restrict or delete that information.
25. Changes to this Privacy Policy
Pick Your Number may update this Privacy Policy as the business, technology, payment providers, verification systems or legal requirements change.
The latest version will be made available through the Pick Your Number website.
Where a change materially affects how we use personal information, we will take reasonable steps to bring the change to the attention of affected users where required.
The version number and last-updated date shown at the top of this policy will indicate when it was most recently changed.
26. Contact us
For questions about this Privacy Policy, personal information held by Pick Your Number, your data protection rights or a data protection complaint, contact:
Pick Your Number
Operated by Nicky Crancher
Email: hello@pickyournumber.co.uk
Business correspondence address: Pick Your Number 203 Capstone Road, Bournemouth, BH8 8SA