Our legal status under UK data protection law is that of a data controller and in this capacity we will securely store and process your personal data which you have provided to us. Data controller is a legal term used in the Data Protection Act 1998 (the "Act") to signify the person who controls what to do with any given personal data. As data controller we have registered with the Information Commissioner's Office and our registration number is ZA226270.
You can browse our Site without telling us who you are or disclosing any personal data. Once you give us your personal data, you are not anonymous to us. If you choose to provide us with personal data, you consent to the transfer and storage of that information on our servers.
We may collect the following information which may contain personal data:
Full name, email address, phone number, physical contact information, type of objects owned, and (depending on the service used) sometimes financial information, such as credit card or bank account numbers;
transactional information based on your activities on the Site (such as applying, searching, and registering on our Site);
community discussions, chats, dispute resolution, correspondence through our Site, and correspondence sent to us;
other information from your interaction with our Site, including services, content and advertising (such as device ID, computer and connection information, statistics on page views, traffic to and from the Site, ad data, IP address and standard web log information);
additional information we ask you to submit to authenticate yourself or if we believe you are violating site policies (for example, we may ask you to send us an ID or bill to verify your address, or to answer additional questions online to help verify your identity or ownership of an item you list);
information from other companies, such as demographic and navigation data;
other supplemental information from third parties (for example, if you incur a debt to Vastari, we will generally conduct a credit check by obtaining additional information about you from a credit bureau, as permitted by law); and
information that we can infer and derive from our observations of your use of the Site.
We don't sell or rent your personal data to third parties for their marketing purposes without your explicit consent. We may combine your personal data with information we collect from other companies and use it to improve and personalize our Service (including our content and advertising). If you don't wish to receive marketing communications from us or participate in our ad-customization programs, simply indicate your preference by emailing firstname.lastname@example.org. You can also unsubscribe for marketing communications via any marketing communication sent to you.
Our primary purpose in collecting personal data to provide you with a safe, smooth, efficient, and customized experience. You agree that we may use your personal data to:
provide the services and customer support you request;
resolve disputes, collect fees, and troubleshoot problems;
prevent, detect, and investigate potentially prohibited or illegal activities, and enforce our User Agreement and legal rights;
customize, measure and improve our Site (including content and advertising);
tell you about our services and those of our corporate family, deliver targeted marketing, email notifications, service updates, and promotional offers based on your communication preferences; and
compare information for accuracy, and verify it with third parties;
send auto dialed and pre recorded messages regarding transactions and fee collections to the telephone numbers (including wireless and cellular) you have provided us; and
other uses as described when we collect the information.
We may offer single sign-on services that allow you to use third party log in credentials to sign into the Site. With your permission, Vastari may also transfer to the Site profile information contained in your third-party profile, including but not limited to your collection management system or website. Vastari may also, for your use, enable you to import information about who you are connected to, as well as enable you to share information with those third-party sites. If you wish to discontinue such sharing, you will be able to do so through your settings page.
We may disclose personal data to respond to legal requirements, enforce our policies, respond to claims that a listing or other content violates the rights of others, or protect anyone's rights, property, or safety. Such information in each case will be disclosed in accordance with applicable laws and regulations.
We may also share your personal data with:
Service providers under contract who help with our business operations (including but not limited to fraud investigations). We will ensure that a written agreement is in place to ensure that your personal data is adequately protected during the services that they provide on our behalf.
Other third parties to whom you explicitly ask us to send your information (or about whom you are otherwise explicitly notified and consent to when using a specific service).
Law enforcement, governmental agencies, or authorized third-parties, in response to a verified request relating to a criminal investigation or alleged illegal activity or any other activity that may expose us, you, or any other Vastari user to legal liability. In such events, we will only disclose personal data relevant to the investigation.
Other business entities, should we plan to merge with or be acquired by that business entity.
Without limiting the above, in an effort to respect your privacy and our ability to keep the community free from bad actors, we will not otherwise disclose your personal data to law enforcement, other government officials, or other third parties without a subpoena, court order or substantially similar legal procedure, except when we believe in good faith that the disclosure of information is necessary to prevent imminent physical harm or financial loss or to report suspected illegal activity.
We may aggregate and/or anonymised information we hold about you with that of other users of the Site such that the aggregated/anonymised data no longer contains personal data. We may disclose such aggregated/anonymised data with third parties.
Your User ID is displayed throughout the Site (and so possibly also available to the public) and is connected to all of your Site activity. Other people can see your comments and any other items you have deemed visible. Notices sent to other community members about suspicious activity and policy violations on our Site refer to User IDs and specific items. So if you associate your name with your User ID, the people to whom you have revealed your name will be able to personally identify your Site activities. We therefore recommend that you select a User ID that does not personally identify you.
If you access our Site from a shared computer or a computer in an internet cafe, certain information about you, such as your User ID, activity or reminders from the Site, may also be visible to other individuals who use the computer after you.
The Site enables you to share personal data to complete transactions, organise exhibitions and facilitate interactions. We encourage you to disclose your privacy practices and respect the privacy of other users. We cannot guarantee the privacy or security of your personal data and therefore we encourage you to evaluate the privacy and security policies of your correspondents before entering into a transaction and choosing to share your information. To help protect your privacy, we allow only limited access to other users' contact, shipping and financial information which are necessary in order to facilitate transactions which you have requested. When users are involved in a transaction, they may have access to each other's name, User ID, email address and other contact and shipping information. In all cases, you must give other users a chance to remove themselves from your database and a chance to review what information you have collected about them.
Site transaction-related purposes that are not unsolicited commercial messages;
Using services offered through the Site (such as exhibitions, shipping, and authentications), or
Other purposes that a user expressly chooses.
We and our users do not tolerate spam. Make sure to set your communication preferences on the Site so we communicate with you as you prefer. You are not licensed to add other Site users, even a user who has purchased an item from you, to your mailing list (email or physical mail) without their express consent. To report Site-related spam or spoof emails to Vastari, please forward the email to email@example.com.You may not use our communication tools to send spam or otherwise send content that would violate our User Agreement. We automatically scan and may manually filter messages to check for spam, viruses, phishing attacks and other malicious activity or illegal or prohibited content, but we do not permanently store messages sent through these tools. If you send an email to an email address that is not registered in our community (via Refer-a-Friend or other tools), we do not permanently store that email or use that email address for any marketing purpose. We do not rent or sell these email addresses.
Your password is the key to your account. Use unique numbers, letters, and special characters, and do not disclose your Site password to anyone. If you do share your password or your personal data with others, remember that you are responsible for all actions taken in the name of your account. If you lose control of your password, you may lose substantial control over your personal data and may be subject to legally binding actions taken on your behalf. Therefore, if your password has been compromised for any reason, you should immediately notify Vastari and change your password.
You can see, review and change most of your personal data by signing on to the Site. Generally, we will not manually modify your personal data because it is very difficult to verify your identity remotely. You must promptly update your personal data if it changes or is inaccurate. Once you make a public posting, you may not be able to change or remove it. Upon your request, we will close your account and remove your personal data from view as soon as reasonably possible, based on your account activity and in accordance with applicable law. We do retain personal data from closed accounts to comply with law, prevent fraud, collect any fees owed, resolve disputes, troubleshoot problems, assist with any investigations, enforce our Terms and Conditions, and take other actions otherwise permitted by law.
In all cases, you can make a subject access request to review your personal data collected via the Site or ask us to stop using it by sending us an email at firstname.lastname@example.org. We may take steps to verify your identity before providing you access to your personal data and may request a small administrative fee of no more than £10.
You have the following rights in relation to your personal data:
a right of access to a copy of the information comprised in your personal data (set out above);
a right to object to processing that is likely to cause or is causing damage or distress;
a right to object to decisions being taken by automated means;
a right in certain circumstances to have inaccurate personal data rectified, blocked, erased or destroyed; and
a right to claim compensation for damages caused by a breach of the Act.
If you are unsure about your rights or are concerned about how your personal data may be processed you should contact the Information Commission's Office.
If you contact us in relation to your rights we will do our best to accommodate your request or objection. Please note, however, that not all rights are absolute.
Your information is stored on our servers. We treat data as an asset that must be protected and we use appropriate technical measures (including tools, encryption, passwords, physical security, etc.) to protect your personal data against unauthorized access and disclosure. However, as you probably know, third parties may unlawfully intercept or access transmissions or private communications, and other users may abuse or misuse your personal data that they collect from the Site. Therefore, although we work very hard to protect your privacy, we cannot guarantee its security.
We will store your personal data for so long as you are signed-up to the Site whether this is on a paid subscription basis or a free account. Once you no longer signed-up to the Site (i.e. the membership is Terminated) we will continue to hold your personal data for a period of 90 days. Where possible, we will remove any personal data we no longer require before this time. After such period of time we will delete any personal data held by those no longer using our Services.
In addition, we will notify you through the Vastari Messaging system.
If your questions are not answered via email, you may write to us at: Vastari.com, Vastari Group Ltd, Unit 2, 12-18 Hoxton Street, London N1 6NG, United Kingdom.