PRIVACY POLICY

Privacy Policy

Last updated: 11 August 2026

1. Who we are

This Privacy Policy explains how Leretage ("we", "us", "our") collects, uses and protects personal data when you visit leretage.com (the "Website").

Leretage is an early-stage technology project developing a demand-first platform for luxury and vintage resale, built from Madrid, Spain, and operating across Europe. The Leretage trademark is registered in France (INPI n° 25 5169480).

Until the incorporation of the operating company, the data controller responsible for the processing of personal data is:

Shamil Mamin
Email: hello@leretage.com

When we determine the purposes and means of processing personal data, we act as the data controller under the EU General Data Protection Regulation (EU) 2016/679 ("GDPR").

2. Personal data we collect

We collect the following categories of personal data.

2.1 Information you provide

When you submit a buyer request, a piece for sale, a professional application, or otherwise contact us, we may collect:

• your name;
• your email address and, where provided, phone/WhatsApp number;
• details of the piece you are seeking or selling (house, model, category, condition, budget or price, city/country);
• photographs you choose to upload;
• any other information you choose to include in your message.

Providing this information is voluntary, though some fields are required to process your request.

2.2 Information collected automatically

When you browse our Website, we may automatically collect certain technical information, including:

• IP address;
• browser type and version;
• operating system;
• device information;
• pages visited;
• date and time of access;
• time spent on pages;
• interactions with the Website;
• cookie identifiers and similar technologies.

We do not intentionally collect special categories of personal data (such as health data, political opinions, religious beliefs or biometric data).

3. Why we process your personal data

We only process personal data where we have a lawful basis under Article 6 GDPR.

Matching buyer requests with sellers

We process the details of your request or the piece you wish to sell in order to search our private and professional seller or buyer network and inform you of relevant matches.

Legal basis: Performance of a contract / steps prior to entering into a contract (Article 6(1)(b) GDPR).

Your private space

We use your email address to issue secure login links and let you track the status of your requests.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR).

Operating the Website

We process technical data to provide access to the Website, ensure security, prevent fraud and abuse, and maintain and improve performance.

Legal basis: Legitimate interests (Article 6(1)(f) GDPR).

Responding to enquiries

If you contact us, we use your information to respond and communicate with you.

Legal basis: Legitimate interests (Article 6(1)(f) GDPR).

Website analytics

If analytics cookies are enabled, we use aggregated information to understand how visitors use our Website and improve user experience.

Legal basis: Consent (Article 6(1)(a) GDPR), collected through our cookie banner.

We do not use personal data for automated decision-making or profiling producing legal or similarly significant effects.

4. The demand map

Approved buyer requests may appear as aggregated, anonymised markers on our public demand map. We never display your name, email address, exact address or any other contact details on the map — only the house, category, approximate city and a general indication of demand.

5. Cookies

Cookies are small text files stored on your device. We use:

• Strictly necessary cookies required for the Website to function.
• Analytics cookies to measure Website traffic and improve our services.
• Preference cookies to remember your choices (such as language).

Non-essential cookies are only placed after obtaining your consent through our cookie banner. You can change your preferences at any time via "Cookie Settings" in the footer. Additional information is available in our Cookie Policy.

6. Sharing personal data

We may share personal data only where necessary with:

• website hosting and infrastructure providers;
• analytics providers;
• email service providers;
• relevant private or professional sellers/buyers, strictly to progress a specific match, and only with your awareness;
• professional advisers;
• competent public authorities where required by law.

All service providers process personal data only on our documented instructions and are subject to appropriate confidentiality and data protection obligations. We do not sell personal data. Where possible, data shared for business or reporting purposes is aggregated or anonymised.

7. International data transfers

Some of our service providers may process personal data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are implemented, including adequacy decisions adopted by the European Commission, or Standard Contractual Clauses approved by the European Commission.

8. Data retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Typical retention periods include: buyer requests and pieces submitted for sale — for the duration of the matching process and up to 3 years after our last communication; analytics information — according to the retention settings of the analytics service used; legal records — where required by applicable law or to establish, exercise or defend legal claims. After the applicable retention period expires, personal data is securely deleted or anonymised.

9. Your rights

If you are located in the European Union or European Economic Area, you have the following rights under the GDPR: right of access; right to rectification; right to erasure ("right to be forgotten"); right to restriction of processing; right to data portability; right to object; right to withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at: hello@leretage.com. We will respond within the time limits required by applicable law. You also have the right to lodge a complaint with your local supervisory authority — for example the Spanish Agencia Española de Protección de Datos (AEPD), or the French Commission Nationale de l'Informatique et des Libertés (CNIL).

10. Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. However, no Internet transmission or electronic storage method is completely secure, and we cannot guarantee absolute security.

11. Children's privacy

Our Website is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can remove the information.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page together with an updated "Last updated" date. Where required by law, we will provide additional notice of material changes.

13. Contact

If you have any questions regarding this Privacy Policy or our data processing practices, please contact us:

Leretage
Email: hello@leretage.com