BBR Vintage

Legal

Privacy Policy

Last updated: 29 June 2026

BBR Vintage is an online vintage clothing store based in Leeds, United Kingdom. This policy explains how we handle personal information and how our internal inventory sync handles authorised eBay seller account data.

Information we collect

When you shop with BBR Vintage, contact us, subscribe to updates, or submit a request, we collect the information needed to respond to you, process orders, arrange delivery, and provide customer support.

This may include your name, email address, phone number, billing and delivery address, order details, payment status, messages, and any product request information you choose to send us.

How we use information

We use this information to operate the store, fulfil orders, manage returns, prevent fraud, answer enquiries, send service messages, and improve our product listings and customer experience.

We only send marketing messages where you have asked to receive them or where the law allows us to do so. You can opt out of marketing messages at any time.

eBay Inventory Sync

BBR Vintage Inventory Sync is an internal tool used to manage our own authorised eBay seller account. It may access eBay account, inventory, listing, policy, fulfilment, and order information only so we can create listings, update stock, sync product data, reconcile orders, and fulfil purchases.

The tool does not collect eBay passwords. Authorisation is handled through eBay OAuth, and access can be revoked from the relevant eBay account settings.

Data sharing

We do not sell personal information or eBay user data. We share information only where needed to run the business, such as with payment processors, delivery carriers, ecommerce platforms, analytics providers, email providers, professional advisers, or regulators where required by law.

Each service provider may process data only for the purpose of providing its service to us.

Data retention and security

We keep information only for as long as needed for the purposes described in this policy, including order records, accounting, legal, security, and customer support requirements.

OAuth tokens and operational credentials are stored securely and are used only to connect authorised systems. No method of storage or transmission is completely risk free, but we use reasonable technical and organisational measures to protect the information we handle.

Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the use of your personal information. You may also have the right to withdraw consent where processing is based on consent.

To make a privacy request, contact us using the details below. We may need to verify your identity before completing a request.

Contact

For privacy questions or requests, contact us at [email protected].