Privacy Policy
Last updated: February 24, 2026
Important: The following document is a general template for a privacy policy. It requires customization by a legal professional to match the specific data processing procedures of Luxury Provider. It does not constitute legal advice.
1. General Information
Luxury Provider (hereinafter referred to as the "Platform") operates exclusively as an intermediary entity, connecting verified sellers ("Partners") with potential buyers ("Users") in a purely intermediary model. The Platform does not participate in transactions as a party, does not conduct direct sales, and is not the owner of the products offered.
The data controller is the Platform operator, based in Poland. All inquiries regarding data processing should be directed to: privacy@luxury-provider.com
2. Scope of Processed Data
In the course of Platform operation, we process the following categories of personal data:
- Contact data: email address, phone number (optional)
- Identification data: first and last name, company name (for Partners)
- Communication data: message content, correspondence history
- Technical data: IP address, login data, device identifiers
- Preference data: favorite products list, search history
- Verification data: identity documents (for Partners undergoing verification)
3. Purposes and Legal Bases for Processing
| Purpose of Processing | Legal Basis | Retention Period |
|---|---|---|
| Mediating contact between sellers and buyers | Art. 6(1)(b) GDPR (contract) | Until account deletion + 5 years |
| Identity and credibility verification of sellers | Art. 6(1)(f) GDPR (legitimate interest) | 5 years from end of cooperation |
| Newsletter and marketing communication | Art. 6(1)(a) GDPR (consent) | Until withdrawal of consent |
| Traffic and user behavior analysis | Art. 6(1)(f) GDPR (legitimate interest) | 26 months |
| Fulfillment of legal obligations | Art. 6(1)(c) GDPR (legal obligation) | As required by applicable law |
4. Data Sharing and Recipients
Personal data may be shared with the following categories of recipients:
- Verified sellers: to the extent necessary to establish contact regarding a specific offer
- External authentication companies: solely for product authenticity verification
- IT service providers: hosting, analytics, mailing systems (under data processing agreements)
- Public authorities: in cases required by law
The Platform does not sell personal data to third parties. Data is not transferred to countries outside the European Economic Area.
5. Information Sharing Mechanisms
The Platform enables users to share information in the following ways:
- Favorites list sharing: Users can generate public links to their favorite product lists. These links are accessible to anyone with the URL. The list contains only product identifiers, without the user's personal data.
- Contact with sellers: By selecting the contact option for an offer, the user consents to the transfer of their contact details (email, optional phone) to the verified seller handling that offer.
- Price alert system: The user's email address is used to send notifications about price changes for selected products.
6. User Rights
Every user has the following rights regarding the processing of personal data:
- Right to access data (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure ("right to be forgotten") (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
To exercise these rights, please contact us at: privacy@luxury-provider.com. We respond to requests within 30 days.
7. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. Specifically:
- Encryption of data transmission (HTTPS/TLS protocol)
- Regular system and security updates
- Limited access to data only for authorized personnel
- Regular security audits
- Data backup
8. Cookies and Tracking Technologies
The Platform uses cookies and similar technologies for the following purposes:
- Technical (necessary): authentication, session maintenance, preference storage
- Analytical: traffic and user behavior analysis (Google Analytics, consent required)
- Functional: saving favorites list, display settings
- Marketing: content personalization, remarketing (consent required)
Users can manage cookie settings through the preferences panel or browser settings. Disabling technical cookies may affect Platform functionality.
9. Changes to Privacy Policy
We reserve the right to make changes to this Privacy Policy. Users will be informed of any significant changes by email or through a notification on the Platform. Changes take effect after 14 days from the date of publication.
10. Contact
For all questions and requests regarding personal data processing, please contact:
Data Controller
Email: privacy@luxury-provider.com
This document is a general template and requires customization by a legal professional.