Privacy Policy
Last updated: July 12, 2026
1. General Information
Luxury Provider (hereinafter referred to as the "Platform") operates exclusively as an intermediary entity, connecting verified sellers ("Partners") with potential buyers ("Users") in a purely intermediary model. The Platform does not participate in transactions as a party, does not conduct direct sales, and is not the owner of the products offered.
The data controller is the Platform operator, based in Poland. All inquiries regarding data processing should be directed to: privacy@luxury-provider.com
2. Scope of Processed Data
In the course of Platform operation, we process the following categories of personal data:
- Contact data: email address, phone number (optional)
- Identification data: first and last name, company name (for Partners)
- Communication data: message content, correspondence history
- Technical data: IP address, login data, device identifiers
- Preference data: favorite products list, search history
- Verification data: identity documents (for Partners undergoing verification)
3. Purposes and Legal Bases for Processing
| Purpose of Processing | Legal Basis | Retention Period |
|---|---|---|
| Mediating contact between sellers and buyers | Art. 6(1)(b) GDPR (contract) | Until account deletion + 5 years |
| Identity and credibility verification of sellers | Art. 6(1)(f) GDPR (legitimate interest) | 5 years from end of cooperation |
| Newsletter and marketing communication | Art. 6(1)(a) GDPR (consent) | Until withdrawal of consent |
| Traffic and user behavior analysis | Art. 6(1)(f) GDPR (legitimate interest) | 26 months |
| Fulfillment of legal obligations | Art. 6(1)(c) GDPR (legal obligation) | As required by applicable law |
4. Data Sharing and Recipients
Personal data may be shared with the following categories of recipients:
- Verified sellers: to the extent necessary to establish contact regarding a specific offer
- External authentication companies: solely for product authenticity verification
- IT service providers: hosting, analytics, mailing systems (under data processing agreements)
- Public authorities: in cases required by law
The Platform does not sell personal data to third parties. Some of our service providers (e.g., hosting and analytics providers) may process data in countries outside the European Economic Area, including the United States. In such cases, we ensure an adequate level of protection through safeguards provided for in Chapter V of the GDPR, in particular European Commission adequacy decisions and Standard Contractual Clauses. A copy of the applicable safeguards can be requested at privacy@luxury-provider.com.
5. Information Sharing Mechanisms
The Platform enables users to share information in the following ways:
- Favorites list sharing: Users can generate public links to their favorite product lists. These links are accessible to anyone with the URL. The list contains only product identifiers, without the user's personal data.
- Contact with sellers: By selecting the contact option for an offer, the user consents to the transfer of their contact details (email, optional phone) to the verified seller handling that offer.
- Price alert system: The user's email address is used to send notifications about price changes for selected products.
6. User Rights
Every user has the following rights regarding the processing of personal data:
- Right to access data (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure ("right to be forgotten") (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
To exercise these rights, please contact us at: privacy@luxury-provider.com. We respond to requests within 30 days.
7. Data Security
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. Specifically:
- Encryption of data transmission (HTTPS/TLS protocol)
- Regular system and security updates
- Limited access to data only for authorized personnel
- Regular security audits
- Data backup
8. Cookies and Tracking Technologies
The Platform uses cookies and similar technologies for the following purposes:
- Technical (necessary): authentication, session maintenance, preference storage
- Analytical: traffic and user behavior analysis (Google Analytics, consent required)
- Functional: saving favorites list, display settings
- Marketing: content personalization, remarketing (consent required)
Users can manage cookie settings through the preferences panel or browser settings. Disabling technical cookies may affect Platform functionality.
9. International Users
The Platform is available worldwide. We process personal data of all users in accordance with the GDPR standard described in this Policy, regardless of the user's location. In addition, where local data protection laws grant users further rights — including, among others, the UK GDPR (United Kingdom), the Swiss Federal Act on Data Protection (Switzerland), or the California Consumer Privacy Act as amended by the CPRA (California, USA) — we honor requests made under those laws to the extent they apply.
In particular, we do not sell or share personal data within the meaning of the CCPA/CPRA, and we do not discriminate against users who exercise their privacy rights. Requests under any applicable privacy law may be submitted to privacy@luxury-provider.com.
10. Changes to Privacy Policy
We reserve the right to make changes to this Privacy Policy. Users will be informed of any significant changes by email or through a notification on the Platform. Changes take effect after 14 days from the date of publication.
11. Contact
For all questions and requests regarding personal data processing, please contact:
Data Controller
Email: privacy@luxury-provider.com