Privacy Notice

Antique submissions may include your name, email address, object details, description, photographs, file metadata, submission reference, status and timestamps.

Contact messages may include your name, email address, subject, message, reference and status. Newsletter records may include your email address, subscription status and relevant subscription or unsubscribe timestamps.

For security and administration we also process technical request data, rate-limit identifiers derived from IP addresses, authenticated staff identity details and administrative audit records.

We use antique-submission and correspondence data to respond to requests, assess objects, manage possible transactions and keep an appropriate record. Where processing is necessary to take steps at your request before a contract, we rely on contract; otherwise we rely on legitimate interests in operating and responding to the Archive.

We use security, rate-limiting, authentication and audit data for legitimate interests in protecting the website, preventing abuse, controlling staff access and maintaining accountable records.

Newsletter marketing is based on consent where required. An unsubscribe or marketing objection is honoured, and limited suppression information may be retained so that an opt-out is not accidentally overridden.

The application is currently configured to remove terminal antique submissions after 730 days, uploaded submission photos after 365 days, closed contact messages after 365 days, and administrative audit logs after 1,095 days. Abandoned upload attempts are removed after their upload window expires.

Limited information may be retained for longer where reasonably necessary to establish, exercise or defend legal claims, meet a legal obligation, maintain security records, or honour a marketing opt-out.

We use service providers to operate the site and share only information needed for those services. The current technical design includes website and database hosting, Cloudflare R2 for private uploaded images, Upstash for distributed rate limiting, and the configured OIDC identity provider for staff authentication.

Personal information may also be disclosed where required by law, to professional advisers, or where necessary to protect legal rights or the security of the service.

Some technology providers may process information outside the United Kingdom. Before client handover, the final provider locations and transfer arrangements will be checked and this section updated to identify the applicable UK transfer safeguards where required.

The current site does not include advertising or analytics trackers. Necessary browser storage may be used for core experience state, and authenticated administration uses security or session mechanisms required to sign staff in and protect restricted areas.

A general consent banner is not used solely for storage that qualifies for a PECR exemption. If optional analytics, advertising or other non-essential tracking is introduced later, the consent mechanism and this notice must be reviewed before deployment.

Depending on the circumstances, you may have rights to access, correct, erase or restrict your personal information, receive portable information, object to processing based on legitimate interests, and withdraw consent where processing relies on consent. Withdrawing consent does not affect processing already carried out lawfully.

You have an absolute right to object to the use of your personal information for direct marketing.

To exercise a privacy right, use the Contact page. We may need enough information to verify the request and locate the relevant records.

Please contact the Archive first if you have a privacy concern. You can also complain to the UK Information Commissioner’s Office (ICO), the UK supervisory authority for data protection.

Make a complaint to the ICO

RUSSIAN AND LUXURY LIMITED (company number 12216121), registered in England and Wales.

Postal address: 6 Ruskins View, Herne Bay, Kent, CT6 7AE, United Kingdom.

Email: gabriel@russianandluxury.co.uk

Telephone: +44 7713 715789 · +33 6 95 49 42 64

We will update this notice when processing, providers, retention settings or legal obligations materially change. Last reviewed: 2 October 2026.