1 · WHO WE ARE

Vintology (trading as Vintology, operated by MetrixCRM) is the data controller for the personal data described here. Our contact details are on the Contact page. For any data-protection request, email privacy@vintology.shop.

2 · DATA WE COLLECT

We only collect what we need to run the marketplace:

• Order data — name, delivery address, email, phone, and the items you buy, needed to fulfil and track your order.
• Account data — if you create an account, your email and a hashed password.
• Contact messages — the details you send through the contact form, used only to reply to you.
• Payment data — processed by our payment provider; we never see or store your full card number.
• Technical data — IP address, browser type, and pages viewed, for security and basic analytics.
• Preferences — your chosen language, currency and theme, stored in a cookie.

3 · WHY WE USE IT (LEGAL BASIS)

Under the GDPR we rely on:

• Contract — to take payment and deliver the items you order.
• Legal obligation — to keep tax and accounting records.
• Legitimate interests — to secure the site, prevent fraud, and understand how it is used.
• Consent — for optional analytics and marketing cookies, which you can withdraw at any time.

4 · WHO WE SHARE IT WITH

We share the minimum necessary with: our payment processor (payments), courier partners (delivery), Shopify (inventory and order fulfilment for Shopify-connected listings), and our hosting provider. We do not sell your personal data to anyone.

5 · COOKIES

We use essential cookies to keep your cart, language, currency and theme working. Analytics cookies (such as Google Analytics) only run with your consent. You can clear or block cookies in your browser settings at any time; the cart may stop working until you re-enable them.

6 · HOW LONG WE KEEP IT

Order and payment records are kept for as long as tax law requires (typically 6–7 years). Contact messages are kept for up to 12 months so we can follow up, then deleted. Account data is kept until you ask us to close your account.

7 · YOUR RIGHTS

You can, at any time:

• Access — get a copy of the personal data we hold about you.
• Rectify — correct anything that is wrong.
• Erase — ask us to delete your data, where we are not legally required to keep it.
• Restrict or object — limit how we use it.
• Portability — receive your data in a machine-readable format.
• Withdraw consent — for any processing based on consent.

To exercise any right, email privacy@vintology.shop. If you are unhappy with our response, you can complain to your local data-protection authority (in the UK, the ICO).

8 · SECURITY & CHANGES

We use HTTPS, hashed passwords, and access controls to protect your data, but no method is perfect — please use a strong, unique password. We may update this policy; the date below shows the latest version. Questions? Get in touch.

Last updated: 16 October 2026.