Privacy Policy – Antique Buying Collective Ltd.

Effective date: 30 September 2024
Company: Antique Buying Collective Ltd (“ABC”, “we”, “us”)
Contact: • 0333 404 9531

1. Who we are

We are Antique Buying Collective Ltd, a UK-based company that appraises and buys antiques and collectibles sent to us via our Free Selling Pack. We are the “data controller” of your personal data.

2. What data do we collect

  • Information you give us:
    • Name, address, phone, email
    • Payment details (bank account, sort code, account name)
    • Details of items you send, your acceptance/decline of offers
    • Customer support messages (email, phone, WhatsApp, chat)
  • Information we collect automatically:
    • IP address, browser/device type, pages viewed, time/date
    • Cookie data (preferences, analytics, advertising identifiers)
  • Information from third parties (where lawful):
    • Address lookups (e.g. Royal Mail PAF)
    • Fraud checks or identity confirmation services

3. How we use your data and legal bases

We use your data to:

  • Provide our service (sending packs, receiving items, making offers, paying you) – legal basis: contract
  • Communicate with you about your items, offers, or returns – legal basis: contract / legitimate interests
  • Improve our website and services (analytics, testing) – legal basis: legitimate interests / consent where required
  • Marketing emails or SMS if you opt in – legal basis: consent
  • Comply with legal obligations (accounting, tax, anti-fraud) – legal basis: legal obligation

4. Cookies and similar technologies

We use cookies for:

  • Site functionality (e.g. remembering your pack request)
  • Analytics (e.g. Google Analytics)
  • Advertising and remarketing (with your consent)

You can manage cookies in your browser or via our cookie banner.

5. Marketing preferences

  • We will only send marketing if you opted in.
  • You can unsubscribe at any time via the link in emails or by contacting
    us.
  • We do not sell your personal data to third parties.

6. Sharing your data

We share data with trusted service providers who act as our “processors”:

  • WRoyal Mail and courier partners (to ship packs and items)
  • Payment providers/banks (to pay you)
  •  IT and hosting providers (website, email, database)
  • Analytics and marketing platforms (if you consent)

We require these providers to keep your data safe and only use it for our instructions.

7. International transfers

Some providers may process data outside the UK/EEA (e.g. cloud hosting). If so, we ensure safeguards are in place, such as UK adequacy decisions or Standard Contractual Clauses.

8. Retention

  • Customer records (transaction history, payments) – up to 6 years (for tax/legal reasons)
  • Marketing data – until you unsubscribe or withdraw consent
  • Website analytics/cookie data – usually no longer than 26 months

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption, restricted access, and staff training.

10. Your rights

Under UK GDPR you have rights to:

  • Access a copy of your data
  • Correct inaccurate data
  • Delete your data (where possible)
  • Restrict or object to processing
  • Withdraw consent (where applicable)
  • Data portability (for data you provided)

To exercise rights, email us at

11. Children

Our services are for adults only. We do not knowingly collect data from
children under 18

12. Automated decision-making

We do not make decisions that have a legal or significant effect on you
based solely on automated processing.

13. Changes to this policy

We may update this policy occasionally. Changes will be posted on our website with the effective date.

14. Contact and complaints

Questions:
If you are unhappy, you can also complain to the UK regulator: Information
Commissioner’s Office (ICO) at www.ico.org.uk.