Privacy Policy

We take online security extremely seriously and have taken rigorous precautions at your information is processed with confidentiality and accuracy. See below to read more about our privacy policy.

Effective date: 16/03/2024


Legacy Antiques and Collectibles Ltd is a private limited company incorporated in (and subject to the laws of) England and Wales with registration number 06483737.

Our registered address is No. 18 Fromefield, Frome, Somerset, BA11 2HE.

For any queries relating to the details set out within this privacy policy, please contact us on the above address, or via email at A “data controller” is the person or legal entity which determines the purposes for which and the manner in which personal data is processed. Legacy Antiques and Collectibles Ltd is the data controller in respect of this website.


Personal data, or personal information, means any information about an individual from which that person can be identified. It does not include data where the identity has been removed (anonymous data).

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

    • Identity Data includes first name and last name.
    • Contact Data includes postal address, email address and telephone number.
    • Technical Data includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website.
    • Profile Data includes your username and password.
    • Usage Data includes information about how you use our website.
    • Marketing and Communications Data includes your preferences in receiving newsletters from us.

Where we need to collect personal data by law, or under the terms of a contract we have with you, and you fail to provide that data when requested, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we may have to cancel a product or service you have with us, but we will notify you if this is the case at the time.


We will only collect your personal data and use this information where it is needed for us to be efficient in providing you with the goods and services that you have requested from us. We do not pass your information onto third parties for their benefit.

We need to keep your personal data for as long as is necessary for us to operate our business and to comply with legal and regulatory obligations. We will keep your data for as long as is needed for you to be able to shop with us in the future.

We rely on one or more of the following legal bases for processing your personal data:

    • To perform our contract with you or to enter into a contract with you.We need your personal data to fulfil our contract with you or to assess whether we will enter into a contract with you, whether this is in selling and delivering goods and services to you.
    • To fulfil our legitimate interests or the legitimate interests of a third party.When we process personal data to fulfil our legitimate interests, we will use it in a way in which you would reasonably expect, and which will have a minimal privacy impact. When we or third parties are relying on legitimate interests, we will balance our interests against your interests and the privacy impact of the processing on you and we will process your personal data responsibly.

Examples of our legitimate interests are: direct marketing, fraud prevention, preventing and investigating crime, and IT security.

    • To comply with legal obligations to which our business is subject. We have to comply with relevant law and regulation in order to provide services to you and we will need to process your personal data in order to comply with these obligations.
    • Consent. We only rely on consent as a legal basis for processing your personal data in connection with our use of non-essential cookies (including functional and analytical cookies) and when sending you our newsletters where you have requested us to do so. You have the right to withdraw consent to marketing at any time by contacting us or unsubscribing via any link or instructions contained in the direct marketing communication you receive from us.


We employ other companies or individuals and may work in partnership with certain third parties. We only share information that allows them to provide their services to us or to facilitate them providing their services to you, with utmost regard for the security of your personal information. Most commonly, these third-party service providers are:

    • Companies that analyse customer information to help us better understand how you use our services, or to tailor products, services and offers that may be relevant to you.
    • Companies that provide Marketing assistance (including management of email marketing operations, and services that deploy marketing on the internet or social media platforms, such as Facebook and Google), as well as analysis of the effectiveness of our marketing campaigns.
    • Payment card processors that process credit and debit card payments.
      External companies that provide delivery services.
    • Companies that help us track and record the way you navigate our website, so that we can understand your online experience and use it to improve our services and offer a personalised experience.
    • Companies that help us provide our website and improve its functionality so that we can provide you with a high-quality experience whenever you shop with us.

We will only transfer your personal data to third parties who adhere to appropriate data security standards.

This privacy policy does not cover any third-party websites, apps, or services that you use or access from our website.


You have a number of rights under data privacy laws. You can have errors corrected, restrict how your information is used, object to the way your information is processed, and control how it is used for marketing. You can also request a copy of what data we hold and make a complaint if you feel you have not been treated fairly.

We have processes in place to enable you to exercise your rights.

Right of Access

This is known as Subject Access Request. If you want to know if we are processing personal information relating to you and have access to any such personal data, you can contact us using the information above.

Right to Rectification

If you believe that we hold inaccurate information about you, you can log into your account and alter this information, or alternatively contact us and we will correct this information. We may ask for further proof to ensure that the personal data is being corrected properly before we agree to change it.

Right to Erasure

You have the right to ask for your personal data to be erased in certain circumstances. However, this right does not apply if we need to retain the information to comply with our legal obligations.

Right to Restriction

You have a right to request that the processing of data is restricted in certain circumstances. However, we will still continue to process the personal data for storage purposes for the purposes of legal cases.

Right to Object

Where we are relying on legitimate interests as a legal basis to process your data, you have a right to object to processing on grounds relating to your particular situation.

If you object to our use of your personal data for marketing purposes, you can opt out in your account by amending your preferences.

Where we need your data for legal purposes to fulfil our legal obligations, we will continue to use your data even if you have objected.

Automated Processing

We use automated processing in relation to the information we hold about you to make recommendations of products and services we think you would be interested in and to improve your experience when you visit our website.

Right to Portability

In certain circumstances, you can request that we provide to you your personal data in a commonly used format. If you wish to make a request, you can contact us using the information above.

Right to Complain to the Information Commissioner

You have the right to lodge a complaint with the ICO if you are unhappy with how we have used your data.

The ICO’s address:
Information Commissioner’s Office
Wycliffe House
Water Lane

Helpline number: 0303 123 1113
ICO website:


When it comes to preventing fraud and money laundering we will use your personal data so that we can minimise any risk to you while you shop.

The personal data we collect from you may include:

Your Name
Date of birth
Residential address
Work address
Email addresses
Telephone numbers
Identifiers assigned to your computer or other internet connected device including your IP address.

Where we are obliged to, we will use your data to prevent fraud and money laundering and will pass this information on to any legal entity that requires it for this purpose. They can hold your information for up to six (6) years.

Automated Decisions

As part of the processing of your personal information, decisions may be made by automated means. This means we may automatically decide that you pose a fraud or money laundering risk if:

    • Our processing reveals your behaviour to be consistent with money laundering or known fraudulent conduct or is inconsistent with your previous submissions.
    • You appear to have deliberately hidden your true identity.

Consequences of Processing

If we or a fraud prevention agency determine that you pose a fraud or money laundering risk, we may refuse to provide our services to you that you have requested.

A record of any fraud or money laundering risk will be retained by the fraud prevention agencies and may result in others refusing to provide services or employment to you. If you have any questions, please contact us.

Data Transfers

Whenever fraud prevention agencies transfer your personal data outside of the European Economic Area, they impose contractual obligations on the recipients of that data to protect your personal information to the standard required.

They may also require the recipient to subscribe to international frameworks intended to enable secure data sharing.

In some cases, the personal data we collect from you may be transferred outside the European Economic Area (“EEA”) and such destinations may not have laws which protect your personal data to the same extent as in the EEA. We are required by data protection law to ensure that where we or our “processors” transfer your personal data outside the EEA, it is treated securely and is protected against unauthorised access, loss or destruction, unlawful processing and any processing which is inconsistent with the purposes set out in this Privacy Policy.


If you have any queries about data protection or would like a full list of companies who may receive your information, please write to us and we will provide everything you need.

To unsubscribe from marketing offers and updates, please access your account and change your preferences. Alternatively, you can contact us using the information above.