This Privacy Policy describes how EdVintage (the "Site", "we", "us", or "our") collects, uses, and discloses your personal information when you visit or make a purchase from the Site. We are committed to protecting your privacy and ensuring your personal data is handled in a safe and responsible manner.

1. Who We Are
EdVintage acts as the "controller" of your personal data. This means we are responsible for deciding how we hold and use personal information about you under the General Data Protection Regulation (GDPR) and UK data protection laws.

2. Information We Collect
We collect information you provide directly to us through the following methods:
Contact Information:** Name, email address, physical address, and phone number.
Transaction Details:** Payment information and purchase history.
User Interactions:** Information provided when you register for an account, leave comments, sign up for newsletters, or enter competitions.

Third-Party Information: If you provide data regarding a third party, you confirm that you have been appointed to act on their behalf and that they have consented to the processing and transfer of their data.

3. Cookies and Tracking Technologies
We use cookies and similar technologies (like web beacons and tags) to improve your experience and track site activity. These help us understand:
- Visitor frequency and location.
- Site traffic patterns and page engagement.

You will be asked for consent on your first visit. You can opt-out at any time via your browser settings, though some features of our site may be affected. For more details, please visit www.aboutcookies.org.

4. How We Use Your Information
We use your personal data to:
- Manage your account and identify you as a user.
- Process and fulfill your orders.
- Conduct market research and behavioral analysis to improve our services.

5. Sharing Your Information
We share data only with essential service providers to fulfill our contract with you, including:
- Order & Accounting: Tide, PayPal, and Stripe.
- Legal Requirements: Law enforcement agencies if required to prevent unlawful activity.
We do not share your information with any other third parties.
 

6. Data Retention
To remain compliant with UK tax law, we hold your personal information for a period of 6 years. We do not keep data longer than is strictly necessary for the purposes outlined.

7. Security
We have implemented robust security measures to prevent your data from being lost or accessed in an unauthorized way. Access is strictly limited to those with a genuine business need. While we strive to protect your info, please note that no method of transmission over the internet is 100% secure.

8. Your Rights
Under the GDPR, you have the following rights at no cost:
- Access: Request a copy of the data we hold.
- Correction: Request that we fix inaccurate information.
- Erasure: Request that we delete your data in certain situations.
- Portability: Move your data to another service provider.
- Objection: Object to direct marketing or automated decision-making.

To exercise these rights, please contact us with proof of your identity (such as a passport or utility bill).

9. International Transfers
We do not transfer your personal information outside of the European Economic Area (EEA).

10. How to Complain
If you have concerns, we encourage you to contact us directly. You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at https://ico.org.uk or by calling 0303 123 1113.

11. Policy Updates
This policy was published and last updated on 10th May 2021. We may update this document periodically; please check this page regularly to stay informed.