Privacy notice.

Who is responsible

Daniel Robinson, sole trader trading as VGN Trader, part of VGN ONE. Business correspondence: 7 Talbot Street, Mansfield, Nottinghamshire, NG18 4AG, United Kingdom. Contact business@vgnone.com or WhatsApp 07522 649373. This is not a walk-in shop.

What we collect

Your name, contact details, preferred contact method, item descriptions, asking price, enquiry messages and photographs you choose to upload. Security systems process technical request information. Rate-limiting records use a one-way hash of the connection address rather than storing that address in the enquiry database.

Why we use it

To assess your enquiry, discuss an offer and take requested steps before a contract (UK GDPR Article 6(1)(b)); to answer general questions and protect the site against misuse (legitimate interests, Article 6(1)(f)); and to meet applicable legal record-keeping duties where a transaction proceeds (Article 6(1)(c)). Required form fields let us assess and respond; without them we cannot process your enquiry. Enquiring does not subscribe you to marketing.

Storage and access

Enquiries are stored in a server-side database; uploaded photographs are kept in private object storage. Only the authorised owner can view customer enquiries and photographs through the dashboard. Product photographs submitted by the owner become public only when their genuine stock listing is published.

Hosting is supplied through OpenAI ChatGPT Sites using Cloudflare infrastructure. Email delivery providers may process reference-only notifications when configured. If you contact us on WhatsApp, Meta/WhatsApp also processes that communication under its own privacy terms. We do not sell enquiry information. We may disclose information where legally required.

Retention

Unsuccessful or inactive enquiries and their photographs are reviewed for deletion after 12 months unless a dispute, ongoing discussion or legal duty justifies longer retention. Transaction records are retained for applicable tax, contractual and legal requirements, normally up to six years. Expired form rate-limit records are removed during subsequent submissions. You can ask us to delete an enquiry sooner where no lawful reason requires us to retain it.

International processing

Hosting and communications providers may process information outside the UK. Where a restricted transfer applies, appropriate UK transfer safeguards are required. Contact us for information about the providers and arrangements relevant to your enquiry.

Your rights

You may request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. Contact us using the details above. You may complain to the Information Commissioner’s Office.

Keep photographs limited to items

Do not upload identity documents, passwords, bank details, private correspondence or photos of other people. Item photos can contain background details or location metadata; remove anything you do not want us to receive. If identification is needed later, we arrange a suitable process separately.