Terms of service

PrivacyPortal Ltd. Terms of Service

Last Updated: 3 October 2026

Introduction

These Terms of Service ("Terms") govern your access to and use of the PrivacyPortal website (the "Site") and any purchase you make from us. They form a legally binding contract between you and PrivacyPortal Ltd.

PrivacyPortal Ltd is a company registered in England and Wales (Company No. 14907634), with its registered office at 16 Commerce Square, Lace Market, Nottingham, NG1 1HS. In these Terms, "we", "us", and "our" refer to PrivacyPortal Ltd. "You" and "your" refer to the individual or entity using the Site or buying from us.

The Site is hosted on the Shopify platform.

By accessing the Site, placing an order, or using any of our services, you agree to these Terms. If you do not agree, please do not use the Site.

Read this first — your statutory rights are protected. Nothing in these Terms limits or excludes your rights under the Consumer Rights Act 2015, the Consumer Contracts Regulations 2013, the Digital Markets, Competition and Consumers Act 2024, or any other mandatory consumer protection law. Where these Terms appear to conflict with such rights, the statutory rights apply.

1. Eligibility

To use the Site or place an order, you must:

  • Be at least 18 years old (or the legal age of majority where you live, if higher);
  • Have the legal capacity to enter into a binding contract;
  • Provide accurate and complete information when ordering or registering an account;
  • Not be barred from receiving our products or services under any applicable law (for example, sanctions lists, export control laws, or the laws of your country).

We may verify your age, identity, or eligibility before accepting an order. We reserve the right to refuse service where eligibility cannot reasonably be confirmed.

2. Acceptable Use of the Site

You agree not to:

  • Use the Site for any unlawful purpose, or to solicit or facilitate unlawful acts;
  • Violate any applicable law or regulation, including data protection, intellectual property, sanctions, and export control laws;
  • Transmit malware, worms, ransomware, or other malicious code through the Site;
  • Attempt to probe, scan, or test the vulnerability of the Site, or breach security or authentication measures, except where you have prior written authorisation from us (e.g. responsible-disclosure researchers — contact admin@privacyportal.co.uk first);
  • Scrape, crawl, harvest, or systematically extract data from the Site, except for ordinary search-engine indexing;
  • Submit false, misleading, or fraudulent information (including impersonating another person, using stolen payment cards, or making fraudulent chargeback claims);
  • Harass, threaten, or abuse our staff, contractors, or other customers;
  • Interfere with or disrupt the operation of the Site, including by overwhelming it with requests.

Breach of this Section may result in suspension or termination of your access without notice, and (where your conduct is criminal) referral to law enforcement.

3. Acceptable Use of Our Devices and Services

The devices we sell and the services we provide are powerful tools intended for legitimate privacy, security research, education, and personal use. You agree to use them lawfully. Specifically, you agree not to use any device, software, or service supplied by us:

  • To gain unauthorised access to any computer, network, account, or data — which is a criminal offence under the Computer Misuse Act 1990 (ss.1–3A);
  • To intercept communications or carry out surveillance in breach of the Investigatory Powers Act 2016 or the Regulation of Investigatory Powers Act 2000;
  • To stalk, harass, or surveil any individual without lawful authority;
  • To evade financial sanctions, money-laundering controls, or tax obligations;
  • To distribute malware, run phishing operations, host unlawful content, or commit fraud;
  • To circumvent technological protection measures in breach of the Copyright, Designs and Patents Act 1988 for an unlawful purpose;
  • To breach the terms of service of any third-party platform in a way that constitutes "unauthorised access" under the Computer Misuse Act 1990;
  • For any other purpose prohibited by the law of the United Kingdom or the country where you use the device.

We do not, and cannot, monitor what you do with a device after we ship it. Responsibility for how you use it rests entirely with you. By placing an order, you confirm that you intend to use the device and any related services lawfully, and you accept full responsibility (civil and criminal) for any unlawful use.

If we become aware of credible evidence that a device has been used unlawfully (for example, through a court order, valid law-enforcement request, or chargeback investigation), we may cooperate with authorities to the extent required by law.

4. Account and Security

You may, but are not required to, register an account to make purchases. If you do:

  • You are responsible for keeping your username and password secure. We recommend a unique, high-entropy password and, where offered, two-factor authentication.
  • You are responsible for all activity carried out under your account.
  • You must notify us promptly at admin@privacyportal.co.uk if you suspect unauthorised access.

We may suspend or close an account if it is linked to fraudulent activity, breach of these Terms, or material non-payment.

5. Products, Descriptions, and Pricing

5.1 Product Descriptions

We aim to describe each product accurately, including the device model, hardware condition, battery health, software state (root method, jailbreak method, custom ROM, installed modules), and any disclosed cosmetic wear. Photos are illustrative; on-screen colours may vary slightly from the physical product.

Devices are sold as professionally modified — see Section 9 below.

5.2 Pricing — total price shown upfront

All prices include VAT where applicable to UK customers. Mandatory service or configuration fees are included in the displayed price. Optional upgrades and delivery choices are shown before you select them.

Germany, Luxembourg and Cyprus: eligible delivery is £10.99 for postage and carrier handling, converted to your checkout currency. We do not add import VAT or sales tax to this delivery charge or collect an additional import-VAT payment at checkout. Germany uses Royal Mail in the UK with DHL/Deutsche Post completing delivery. We book a compatible prepaid service and pay the assessed import charges, including import VAT at our expense. The total payable is shown before you order; contact us before paying if a carrier requests covered charges again.

Germany and Cyprus automatic delivery is available for eligible baskets up to £10,000. Luxembourg automatic postal delivery is temporarily limited to £100 basket value, a conservative checkout limit within Royal Mail’s €150 PDDP limit. Higher-value Luxembourg orders require a confirmed prepaid carrier quotation before ordering. The £100 limit is a merchant service limit, not a tax exemption. No automatic rate is offered above the applicable limit.

Other international destinations: services marked Duties Paid by Recipient are Delivered Duty Unpaid (DDU), and destination import duties, taxes and carrier fees are paid by the recipient. FREE USPS Tracked (Royal Mail) to the United States is a duties-paid postal exception; UPS Express to the United States is DDU. Existing orders placed with the former Duties Covered option retain their original terms.

Prices may change. The price applicable to an order is the price displayed when we accept it, as explained in section 6. Your cancellation and statutory refund rights, including any refund of basic outbound delivery, are set out in our Return and Refund Policy. Refusal of delivery does not automatically remove those rights.

5.3 Errors

If a product is mispriced, miscatalogued, or shown with inaccurate specifications due to an error, we reserve the right to cancel the order before despatch and refund you in full. Where the error is obvious (e.g. a £900 device listed at £9), you cannot reasonably rely on the price as a binding offer.

5.4 Stock and Availability

All products are subject to availability. We may discontinue products, change specifications, or stop offering certain configurations. Where you have placed an order for an item that is no longer available, we will tell you and refund you in full.

6. Orders and Formation of Contract

6.1 How an Order Becomes a Contract

When you place an order on the Site, you are making an offer to buy. The order is not accepted, and no contract is formed, until we send you an order confirmation email. The order confirmation is the moment the contract is formed. An order acknowledgement (the automated "we've received your order" email) is not acceptance.

We may decline to accept an order, in which case no contract is formed and we will refund any payment taken. Reasons we may decline include suspected fraud, eligibility issues (Section 1), pricing errors (Section 5.3), unavailable stock, sanctions/export control concerns, or shipping address restrictions.

6.2 Quantity Limits and Resale Restrictions

We may limit the quantity of any item that any one person, household, payment card, or shipping address may order. We may decline orders that appear to be placed by resellers or for resale, unless you have a written reseller arrangement with us.

6.3 Standard configurations and personalised orders

Standard catalogue model, storage, colour, condition, OS, root manager and advertised software choices retain our 30-day cancellation period. Preparing a phone after ordering does not by itself make it bespoke. A personalised-goods exception applies only where the particular goods satisfy the legal definition, and we explain any such exception before purchase. See our Return and Refund Policy.

6.4 Remote Rooting / Jailbreaking Service

For our remote rooting/jailbreaking service, we will obtain from you, in writing, an express request to begin the service within the 14-day cancellation period and an acknowledgement that you will lose the right to cancel once the service is fully performed. This satisfies Regulation 36 of the Consumer Contracts Regulations 2013. Once fully performed, the service is non-refundable, except where we have failed to perform with reasonable care and skill (s.49 Consumer Rights Act 2015) or where it could not be completed at all.

7. Payment

Payment is taken at the point of order via the payment methods shown at checkout (e.g. card via Shopify Payments or Stripe, PayPal, or USDC where offered). Payment processing is handled directly by the payment provider — we never see or store your full card or bank details.

If a payment is reversed, charged back, or fails after we have despatched goods, you remain liable to us for the price plus any reasonable costs incurred in recovering it. We may suspend further orders from any customer with unresolved payment issues.

8. Cancellation, Returns, and Refunds

Cancellations, returns, and refunds are governed by our Return and Refund Policy, which forms part of these Terms. In summary:

  • 30-day right to reject faulty or misdescribed goods — full refund (Consumer Rights Act 2015, s.20);
  • 30-day cancellation right for standard distance sales of non-customised goods (14 days under the Consumer Contracts Regulations 2013, which we extend to 30) — standard catalogue software preparation remains eligible. Only genuinely personalised goods or qualifying completed services can fall within the limited legal exceptions explained in our Return and Refund Policy;
  • Faulty goods route: email faulty@privacyportal.co.uk for fast handling;
  • All other returns: email support@privacyportal.co.uk for an RMA number and return form;
  • For parcels refused because of recipient-paid customs charges, contact us to establish the circumstances. Applicable cancellation and statutory refund rights still apply. Any deduction must be permitted by law and reflect actual, explained costs; see section 7 of our Return and Refund Policy.

Nothing in these Terms or that policy reduces your statutory rights.

8A. EU Recycling, Batteries and Packaging

Electrical equipment and batteries must be collected separately from household waste. The crossed-out wheeled-bin symbol identifies products requiring separate collection. Use an appropriate collection service. Do not remove an embedded phone battery yourself solely for recycling; a phone containing an embedded battery should be handled through the appropriate whole-device collection route.

EU customers retain the free take-back and collection rights provided by the law of their country. Where applicable, these include returning equivalent old equipment when purchasing replacement equipment. Separate waste batteries are subject to the applicable battery collection rules.

For help identifying the collection or take-back arrangements applicable to your country and product, email support@privacyportal.co.uk with your country and the type of device or battery. Contacting us is not a condition of exercising statutory rights. Please obtain safe transport instructions before posting electrical waste or batteries. Do not send damaged, leaking or swollen batteries, or devices containing them, through ordinary post; contact us for guidance on safe collection.

Separate packaging by material and follow the collection and recycling instructions applicable in your locality.

PrivacyPortal remains responsible for the WEEE, battery and packaging producer-responsibility obligations applicable to its sales, including any required registrations, authorised representation, reporting, financing and take-back arrangements. Any existing producer or compliance-scheme arrangements relied upon must legally cover the relevant products, supply and destination country. These Terms do not transfer our obligations to customers or restrict mandatory consumer rights. Recycling does not replace your cancellation, faulty-goods or other remedies under our Return and Refund Policy.

9. Devices prepared with custom software

Our pre-owned phones are opened and prepared with the software described in the listing before despatch. PrivacyPortal remains responsible for the device and preparation work as supplied, including applicable product-safety and consumer obligations.

App compatibility, update procedures and supported functions depend on the installed configuration. Disclosed limitations do not excuse a device that fails to match its description or remove your statutory rights. Any remaining manufacturer warranty is separate and depends on its terms, applicable law and the cause of a fault.

You control changes you make after delivery. If a later modification causes damage or a fault, we assess that cause and explain the evidence. Making a change does not automatically remove remedies for unrelated defects or problems present when supplied.

10. Intellectual Property

10.1 Our IP

The Site and its content (text, graphics, logos, images, product photography, software, and the "PrivacyPortal" name) are owned by us or licensed to us. You may view and use the Site for personal, non-commercial purposes. You may not reproduce, distribute, modify, or create derivative works from any of our content without our prior written permission, except as permitted by law (e.g. for personal study or fair dealing).

10.2 Open-Source and Third-Party Software

Installed software components retain their respective licences; the complete phone is not licensed under one blanket open-source licence. For example, Magisk uses GNU GPL version 3. Other components may use GPL, Apache, MIT or proprietary terms. Their copyright notices, licence conditions and any required corresponding-source obligations apply to the actual versions distributed. These licences do not transfer PrivacyPortal’s product-safety or consumer obligations to you. For licence or source-code enquiries about your supplied build, contact admin@privacyportal.co.uk with your order number.

Apple's iOS, Google's stock Android software, and manufacturer software remain the property of those companies. Our installation of jailbreaks, custom ROMs, and root frameworks does not transfer any rights in those underlying components to you.

11. Your Content (Reviews, Comments, Feedback)

If you submit a product review, comment, suggestion, or any other content to us or via the Site ("Your Content"):

Where we display feedback imported from eBay alongside a product, a positive eBay feedback entry is shown as five stars by default under our display convention. This is an imported feedback signal, not a product-specific review or a separate star rating awarded by eBay. We identify imported feedback separately from first-party product reviews and ratings.


  • You confirm that you own or have the right to share Your Content, and that it does not infringe any third party's rights.
  • You grant us a non-exclusive, royalty-free, worldwide licence to use, display, and reproduce Your Content solely for the purpose of operating the Site and our business (e.g. displaying a product review on the relevant product page). This licence ends when you ask us to remove the content, except where we have a legal obligation to retain it.
  • We do not claim ownership of Your Content. You can ask us to remove your content at any time by emailing admin@privacyportal.co.uk.
  • We may moderate, edit, or remove content that is unlawful, abusive, defamatory, off-topic, fake, or breaches these Terms or the Digital Markets, Competition and Consumers Act 2024 (which prohibits fake reviews).
  • We are not obliged to publish Your Content, keep it confidential, or pay you for it.

12. Third-Party Services and Links

The Site may include third-party services (e.g. payment processors, shipping carriers, embedded videos) and links to third-party websites. We do not control these and are not responsible for them. Your use of any third-party service is governed by that third party's terms and privacy policy. Please review them before engaging.

13. Privacy

Your personal information is processed in accordance with our Privacy Policy, which forms part of these Terms. We comply with the UK General Data Protection Regulation, the Data Protection Act 2018, the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations 2003.

14. Service Availability

We aim to keep the Site available, but we do not guarantee uninterrupted operation. We may temporarily suspend access for maintenance, security updates, or other operational reasons. Where reasonably practicable, we will give advance notice.

15. Limitation of Liability — Consumers

This Section 15 applies to you if you are a consumer (i.e. an individual buying for purposes wholly or mainly outside your trade, business, craft, or profession). For business buyers, see Section 16 instead.

Nothing in these Terms limits or excludes our liability for:

  • Death or personal injury caused by our negligence;
  • Fraud or fraudulent misrepresentation;
  • Breach of the terms implied by sections 9, 10, 11, 13, 14, and 15 of the Consumer Rights Act 2015 (satisfactory quality, fitness for purpose, description, etc.);
  • Defective products under the Consumer Protection Act 1987;
  • Any other liability that cannot be limited or excluded by law.

Subject to the above:

  • We are responsible for loss or damage caused by our breach of contract or failure to use reasonable care and skill where that loss or damage was reasonably foreseeable. We do not impose a blanket cap equal to the order price on your mandatory consumer remedies.
  • We are not liable for losses that were not reasonably foreseeable to both parties at the time the contract was formed;
  • We are not liable for losses arising from your failure to comply with these Terms or any reasonable instructions we provide;
  • We are not liable for any loss caused by your unlawful use of a device or service (Section 3).

These limits do not affect your statutory rights as a consumer.

16. Business (B2B) Customers

This Section 16 applies if you are buying from us in the course of a business, trade, or profession (e.g. a penetration-testing firm purchasing Kali NetHunter devices, a journalism organisation procuring secure communication devices, or a corporate buyer).

16.1 Application of Consumer Law

Where you are buying as a business, the Consumer Rights Act 2015 and the Consumer Contracts Regulations 2013 do not apply. Instead, the Sale of Goods Act 1979 and Supply of Goods and Services Act 1982 govern the contract, subject to the modifications below.

16.2 Acceptance and Inspection

You must inspect goods within 7 days of delivery and notify us in writing of any defect, shortage, or non-conformity within that period. Failure to do so will be deemed acceptance. Faults arising in normal use after inspection will still be addressed under the SGA 1979 implied terms.

16.3 Warranties

Subject to your inspection obligations, we warrant that goods supplied to business buyers will conform to their description and be of satisfactory quality at delivery. All other warranties, conditions, and terms (whether express, implied by statute, common law, custom, or otherwise) are excluded to the fullest extent permitted by law. This exclusion is subject to the reasonableness test in the Unfair Contract Terms Act 1977.

16.4 Remedies

Our sole obligation in respect of defective goods supplied to business buyers will be, at our option, to (a) repair the goods, (b) replace them with conforming goods, or (c) refund the price paid. We have no other liability to a business buyer in respect of defective goods.

16.5 Limitation of Liability — Business Buyers

Nothing in these Terms limits our liability for: death or personal injury caused by our negligence; fraud or fraudulent misrepresentation; or any other liability that cannot be limited by law.

Subject to the above:

  • We are not liable to a business buyer for any indirect, special, consequential, or punitive loss; loss of profit; loss of revenue; loss of business; loss of contracts; loss of goodwill; loss of anticipated savings; or loss of, damage to, or corruption of data;
  • Our total aggregate liability to a business buyer arising out of or in connection with all contracts between us in any 12-month period is capped at the greater of (i) the total amount paid by you to us under those contracts in that period, and (ii) £1,000.

16.6 Indemnity (Business Buyers Only)

You agree to indemnify us against any third-party claim, loss, liability, cost, or expense (including reasonable legal fees) arising from your use of any device or service supplied by us in breach of Section 3 (Acceptable Use of Our Devices and Services), or otherwise unlawfully.

This indemnity does not apply to consumer buyers.

17. Force Majeure

We are not liable for any failure or delay in performance caused by events outside our reasonable control, including (without limitation): acts of God, war, terrorism, civil unrest, pandemic, government action, sanctions, network or infrastructure failure, supply-chain disruption, or carrier failure. We will use reasonable efforts to resume performance promptly. Where the event continues for more than 30 days, either party may cancel any affected order, in which case we will refund any payment taken for goods not yet despatched.

18. Termination

These Terms apply for as long as you use the Site or have an active order or account with us.

We may suspend or terminate your access to the Site, your account, or any pending order if you breach these Terms in a serious or repeated way (including breach of Section 2 or Section 3), or if we are required to do so by law or by a competent authority. Where reasonable, we will notify you and give you a chance to remedy the breach.

You may stop using the Site at any time. Closing your account does not affect any orders already in progress, or our right to retain records required by law (e.g. tax records).

Sections that by their nature should survive termination (including liability, indemnity, IP, and governing law) will continue to apply.

19. Governing Law and Jurisdiction

These Terms and any dispute or claim (including non-contractual claims) arising out of or in connection with them are governed by the laws of England and Wales.

The courts of England and Wales have exclusive jurisdiction, except that:

  • If you are a consumer resident in Scotland or Northern Ireland, you may also bring proceedings in your local courts;
  • If you are a consumer resident outside the UK, the mandatory consumer protections of your country of residence may also apply, and you may have the right to bring proceedings in your local courts.

20. Changes to These Terms

We may update these Terms from time to time. The "Last Updated" date at the top will reflect the most recent change. For significant changes, we will give prominent notice on the Site and (where appropriate) by email.

Changes apply only to orders placed after the change takes effect. The version of the Terms in force at the time of your order continues to govern that order.

21. General

  • Entire agreement. These Terms, together with our Return and Refund Policy, Privacy Policy, and Shipping Policy, form the entire agreement between you and us in relation to your use of the Site and any purchase from us. They supersede any prior version.
  • Severability. If any provision is held to be unlawful or unenforceable, the rest of the Terms will continue to apply.
  • No waiver. A failure or delay by us in exercising any right does not waive that right.
  • No assignment by you. You may not transfer your rights or obligations under these Terms without our written consent. We may transfer ours to a successor in connection with a merger, sale, or reorganisation.
  • Notices. Notices to you will be sent to the email address on your order or account. Notices to us must be sent to admin@privacyportal.co.uk and, for legal notices, also to our registered office.
  • Third-party rights. A person who is not a party to these Terms has no rights under the Contracts (Rights of Third Parties) Act 1999 to enforce any term.
  • Headings. Headings are for convenience only and do not affect interpretation.

22. Contact

PrivacyPortal Ltd 16 Commerce Square Lace Market Nottingham NG1 1HS United Kingdom

Nothing in these Terms excludes any mandatory product-safety, consumer or other obligation that applies to PrivacyPortal. Your statutory rights remain protected.