Privacy Policy
Heritage by MyLuthier Ltd.
Registered Address: 49 Little Britain, EC1A 7BH London
1. Introduction
Heritage by MyLuthier Ltd. ("We", "Us", "Our") is committed to protecting the privacy and confidentiality of all personal data provided by buyers and sellers ("You", "Your"). This Privacy Policy outlines how we collect, use, store, and protect your information in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
2.1 For Buyers:
- Personal Information: Name, address, email, phone number.
- Payment Information: Bank details, credit/debit card information (processed securely).
- Instrument Preferences: Purchase history, preferred makers/models.
2.2 For Sellers:
- Personal Information: Name, address, email, phone number.
- Instrument Details: Maker, type, year, serial number, provenance documentation.
- Payment Information: Bank details for disbursement of sale proceeds.
2.3 Automatically Collected Information:
- IP addresses, browser type, and usage data collected through our website for analytics and security purposes.
3. How We Use Your Information
3.1 To Facilitate Transactions:
- Buyers: To process payments and deliver instruments.
- Sellers: To list, market, and sell instruments on your behalf.
3.2 To Maintain Confidentiality:
- We act as an intermediary, ensuring that buyer and seller identities remain confidential unless otherwise required by law or mutually agreed.
3.3 For Communication:
- To provide updates, confirmations, or customer service.
- To send newsletters or promotional content (with your consent).
3.4 For Compliance and Legal Obligations:
- To maintain accurate financial records.
- To comply with regulatory requirements (e.g., anti-money laundering laws).
4. How We Share Your Information
4.1 Third Parties:
- Service Providers: Payment processors, couriers, and marketing platforms.
- Legal and Regulatory Authorities: If required to comply with legal obligations or resolve disputes.
4.2 Confidential Transactions:
- Buyer and seller information will only be disclosed to the other party with written consent or as required by law.
4.3 Aggregated Data:
- Non-personal data may be shared for research or marketing purposes without identifying any individual.
5. Data Retention
We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, and resolve disputes:
- Buyers: For up to 7 years following your last transaction.
- Sellers: For up to 7 years following the sale of your instrument.
6. Your Rights
6.1 Access:
- You have the right to request access to the personal data we hold about you.
6.2 Correction:
- You can request corrections to any inaccurate or incomplete data.
6.3 Deletion:
- You have the right to request the deletion of your personal data, subject to legal retention requirements.
6.4 Objection:
- You may object to the processing of your data for specific purposes, such as marketing.
6.5 Data Portability:
- You can request a copy of your data in a machine-readable format.
To exercise any of these rights, please contact us at heritage@myluthier.co.
7. Security of Your Information
We implement robust security measures to protect your personal data, including:
- Encrypted storage of sensitive information.
- Secure payment processing through third-party providers.
- Restricted access to personal data for authorized personnel only.
8. International Data Transfers
If we transfer your data outside the UK or EEA, we ensure that appropriate safeguards are in place, such as:
- Standard Contractual Clauses (SCCs).
- Transfer to countries with adequate data protection standards.
9. Updates to this Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be communicated via our website.
10. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us:
By engaging with Heritage by MyLuthier Ltd., you acknowledge and agree to the practices outlined in this Privacy Policy.