Privacy Policy

1. Who is responsible for your data

EVintiques is the data controller for the marketplace at evintiques.shop. This policy explains what we collect, why, and the rights you have under UK GDPR and the Data Protection Act 2018. Independent dealers you buy from are separately responsible for the data they hold about their own customers.

2. What we collect

When you buy

• Your name, email, delivery and billing address, and phone number, so your order can be fulfilled.
• Your order details. Card payments are processed by Stripe — we receive confirmation of payment and the last digits of your card, but never your full card number.

When you sell

• Your account and store details, contact information, listings, orders and payout information.

Automatically

• Basic technical data needed to run the site securely (for example your IP address for rate-limiting sign-ups). Your basket is stored in your own browser, not on our servers.

3. Why we use it, and our legal basis

• To fulfil your order and connect you with the dealer — to perform our contract with you.
• To operate your account and let you sign in — to perform our contract with you.
• To take payment and prevent fraud — our legitimate interest in running the marketplace safely, and our legal obligations.
• To respond to you when you get in touch — our legitimate interest in supporting users.

We do not sell your personal data, and we do not use it for advertising.

4. Who we share it with

• The dealer you buy from, so they can fulfil and deliver your order. They may only use it for that order.
• Stripe, our payment processor, to take payment securely.
• Our hosting and technical providers, who help us run the site under confidentiality obligations.
• Authorities, where we are legally required to disclose information.

5. Cookies and tracking

We keep this light. We use only what is needed to make the site work — a secure sign-in cookie when you log in, and your browser’s own storage for your basket and saved pieces. We do not run advertising or cross-site tracking cookies. If that changes, we will ask for your consent first.

6. How long we keep it

We keep order and account data for as long as you have an account and as long as we are required to for tax, accounting and legal reasons (generally six years for transaction records), then delete or anonymise it.

7. Your rights

You can ask us to:

• show you the data we hold about you,
• correct anything that is wrong,
• delete your data, where we do not need to keep it,
• restrict or object to how we use it, and
• give you a copy to take elsewhere.

Email hello@evintiques.shop to exercise any of these. You also have the right to complain to the Information Commissioner’s Office (ico.org.uk) if you think we have handled your data wrongly, though we would rather you gave us the chance to put it right first.

8. Changes

We will update this policy as the marketplace grows; the “last updated” date shows the current version. Where a change is significant we will make it clear.