Elan Archive — Privacy Policy

Last Updated: 20th February 2026

Elan Archive is committed to protecting your privacy and handling your personal data with discretion and integrity.

This Privacy Policy explains how we collect, use, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

⸻

 1.⁠ ⁠Who We Are

Elan Archive is an independent luxury sourcing and resale business operating in the United Kingdom.

For the purposes of data protection law, Elan Archive is the “data controller” of your personal data.

Contact:
Email: enquiries@elanarchive.co.uk

⸻

 2.⁠ ⁠What Information We Collect

We may collect and process the following information:

Identity Information
• Full name
• Billing and delivery address
• Proof of identification (where required for high-value transactions)

Contact Information
• Email address
• Telephone number
• Social media handle (if communicating via platform)

Financial Information
• Bank details (for payments or payouts)
• Transaction history

Transaction Information
• Purchase history
• Wishlist preferences
• Sourcing requests

Technical Data (Website Use)
• IP address
• Browser type
• Cookies and usage analytics

⸻

 3.⁠ ⁠How We Use Your Information

We process your data for the following lawful purposes:
• To fulfil purchases and sourcing requests
• To communicate regarding transactions
• To comply with anti-fraud and anti-money laundering obligations
• To manage consignments and payouts
• To improve our services
• To comply with legal obligations

We only process data where there is a lawful basis to do so.

⸻

 4.⁠ ⁠Legal Basis for Processing

Under UK GDPR, we rely on:
• Contractual necessity (to fulfil a purchase or sourcing agreement)
• Legal obligation (anti-fraud, accounting, regulatory compliance)
• Legitimate interests (business operations and security)
• Consent (where applicable, e.g. marketing communications)

⸻

 5.⁠ ⁠Data Sharing

We may share your data with:
• Payment processors
• Insured courier services
• Authentication providers
• Professional advisers (legal/accounting)

We do not sell or rent your personal data to third parties.

⸻

 6.⁠ ⁠International Transfers

Where international shipping or service providers are involved, your data may be transferred outside the UK.

We ensure appropriate safeguards are in place where required.

⸻

 7.⁠ ⁠Data Retention

We retain personal data only as long as necessary for:
• Fulfilling contracts
• Legal and tax obligations
• Dispute resolution

Transaction records may be retained for up to 6 years in accordance with UK accounting requirements.

⸻

 8.⁠ ⁠Data Security

We implement appropriate technical and organisational measures to protect your data from:
• Unauthorised access
• Loss or misuse
• Disclosure

Access to client data is strictly limited.

⸻

 9.⁠ ⁠Your Rights

Under UK GDPR, you have the right to:
• Access your personal data
• Request correction of inaccurate data
• Request erasure (where legally permitted)
• Restrict processing
• Object to processing
• Data portability
• Lodge a complaint with the Information Commissioner’s Office (ICO)

ICO website: https://ico.org.uk

⸻

10.⁠ ⁠Marketing Communications

You will only receive marketing communications if:
• You have opted in; or
• You are an existing client and communications relate to similar services.

You may opt out at any time.

⸻

11.⁠ ⁠Cookies

Our website may use cookies to improve user experience and analytics.

You can control cookies through your browser settings.

⸻

12.⁠ ⁠Changes to This Policy

We may update this policy periodically. The most current version will always be available on our website.