Privacy Policy

Your privacy matters. This policy explains what we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).

Data controller

Stichting Le@f, Ampèrestraat 9, 1976 BE Velsen, Netherlands. KVK 34140586. BTW NL815590921B01. Contact: Hello@thevintageguide.com.

What we collect

• Account data: email, display name, optional avatar.
• Usage data: pages viewed, items favourited, affiliate clicks.
• Communications: messages you send via the contact form or chat.
• Payment data: handled by Stripe; we never see full card numbers.

Legal basis

We process data on the basis of (i) performance of contract (running your account), (ii) our legitimate interest (operating and improving the service), and (iii) your consent (non-essential cookies, marketing).

Third parties

We share data with the following processors:

• Supabase — database, authentication, file storage (EU region).
• Stripe — payment processing for subscriptions.
• eBay Partner Network — affiliate click attribution.
• AI providers — to power the on-site assistant; only the message you send is shared.
• Cloudflare — hosting and edge compute.

Retention

Account data is kept until you delete your account. Affiliate click logs are kept for 24 months. Contact messages are kept for 24 months. Backups are rotated within 30 days.

Your rights

You can request access, correction, deletion, portability or restriction at any time by emailing us. You also have the right to lodge a complaint with the Dutch Autoriteit Persoonsgegevens.

International transfers

Some processors host data outside the EEA. Where they do, we rely on Standard Contractual Clauses approved by the European Commission.