Conditions and privacy notice for selling your device

Last updated: 11/11/2026

This page explains how iPhoneHospital.iT buys used devices from private individuals through the “Sell your used device” page, and how we handle the personal data you give us. It applies together with the general privacy policy of the shop.

Part 1 – Conditions of sale

1. Who can sell

  • Private individuals aged 18 or over who are the lawful owners of the device.
  • We do not buy devices that are stolen, lost, leased, still being paid in instalments, locked to an iCloud or other account, or with a blacklisted IMEI.

2. Online estimate and offer

  • The price shown on the page is an estimate based on your answers: it is not yet an offer.
  • Within 24 hours we email you a free offer, without obligation. The offer is valid for 14 days.
  • You can accept or decline it with one click. If you decline, nothing else happens.

3. Identity check before shipping

  • After you accept, we ask for: front and back of an ID document, a selfie taken live with the document in your hand, your IBAN and, for devices with an IMEI, a photo of the screen showing the IMEI (*#06#).
  • We use them to make sure the seller is the owner, to prevent fraud and the resale of stolen goods, and to pay you.

4. Shipping

  • Shipping is free with our prepaid label. Pack the device well, without SIM cards, cases or screen protectors.
  • Before shipping, turn off “Find My”, sign out of your accounts and reset the device. We are not responsible for data left on the device; in any case we erase it again on arrival.
  • You can cancel the sale at any time before shipping, at no cost.

5. Inspection and new offer

  • We inspect the device within 48 hours of its arrival.
  • If it matches your description, we pay the agreed price.
  • If it does not, we send you a new, justified offer. If you do not accept it, we send the device back free of charge.
  • If “Find My” is still active, we contact you to turn it off remotely; until then we cannot proceed.

6. Payment

  • We pay by bank transfer to an IBAN in the name of the seller within 3 working days of the inspection.
  • If you prefer, you can receive a voucher to spend on our site, with a %s%% bonus.
  • Once the payment is made, the sale is final.

7. Devices reported as stolen or lost

  • We check every IMEI or serial number. If a device turns out to be stolen or lost, we do not pay for it, we keep it available to the authorities and we cooperate with them as required by law.

Part 2 – Privacy notice (Art. 13 GDPR)

Data controller

iPhoneHospital.iT – Via Antonio Cecchi 66, 10152 Torino, Italy – email: [email protected]

What data we collect

  • Contact details: name, surname, email, phone, town and province.
  • Device data: model, storage, condition, answers to the questions, photos, IMEI or serial number.
  • Only if you accept the offer: ID document (front and back), selfie with the document, photo of the IMEI screen, IBAN and account holder.
  • Technical data: a coded (non-reversible) form of your IP address, used only against spam and abuse.

Why we use it and on what legal basis

  • To give you the valuation, manage the purchase, the shipping and the payment: performance of the contract and of pre-contractual steps you request (Art. 6(1)(b) GDPR).
  • To verify your identity and ownership of the device and prevent fraud and the resale of stolen goods: our legitimate interest and legal obligations (Art. 6(1)(f) and (c)).
  • To meet tax and accounting obligations: legal obligation (Art. 6(1)(c)).
  • To tell you when the service reopens, if you asked us to: your consent (Art. 6(1)(a)), which you can withdraw at any time.

The selfie is compared with the document by a person, by eye. We do not use automatic facial recognition and we do not create biometric templates.

How long we keep it

  • ID document, selfie, IMEI photo and IBAN: deleted automatically 30 days after the request is closed.
  • Data of completed purchases: 10 years, as required by tax and accounting rules.
  • Requests that do not lead to a purchase: for the time needed to manage them; you can ask us to delete them at any time.
  • Waiting list email: until we send you the reopening email, or earlier if you ask us.

Who receives it

  • The courier (name, address and phone, for collection and any return).
  • Our bank, to make the transfer.
  • The providers that host the website and send our emails, as data processors.
  • Authorities, only when required by law (for example for a device reported as stolen).

We do not sell your data and we do not use it for advertising. If a provider processes data outside the European Union, this happens only with the safeguards required by the GDPR.

Is it mandatory?

The data marked as required is needed to give you the offer and to buy your device: without it we cannot proceed.

Your rights

You can ask to access, correct or delete your data, restrict or object to its processing, receive it in a portable format and withdraw your consent (Articles 15-22 GDPR), by writing to [email protected]. You can also lodge a complaint with the data protection authority (in Italy: Garante per la protezione dei dati personali, www.garanteprivacy.it).

Back to the page