Privacy Policy

At Vaultrankdsh (accessible from vaultrankdsh.lat), protecting the personal integrity and informational sovereignty of our readers, collectors, and antique guild partners is fundamental to our publishing ethos. This Privacy Policy sets forth our comprehensive protocols regarding the collection, processing, storage, and erasure of personal data under Regulation (EU) 2016/679 (General Data Protection Regulation / GDPR) and the California Consumer Privacy Act (CCPA).

1. Data Controller Identification

The data controller responsible for the processing of your personal data on this platform is:

Vaultrankdsh Publishing Ltd.
Company Registration No.: 11983021
Registered Office: 44 Kean Street, Covent Garden, London WC2B 4AT, United Kingdom
Designated Data Protection Officer (DPO): [email protected]

2. Categories of Information Collected

We collect only minimal, proportional data essential to deliver market directories, route downloads, and interactive collector utilities:

• Directly Provided Information: When you complete our contact inquiry form, request private market accompaniment, or download specialized field dossier PDFs, we collect your full name, email address, postal jurisdiction, and specific collecting focus.
• Technical & Telemetry Data: Automatically logged server records including IP addresses (anonymized at the octet level), browser type, referring URLs, device characteristics, operating system, and approximate geographical region.
• Interaction & Preference Data: User selections within our Treasure Finder algorithm, saved market filters, and cookie consent preferences stored locally in your web browser.

3. Legal Bases for Data Processing (GDPR Article 6)

We process your personal information under the following legal frameworks:

• Contractual Necessity (Art. 6(1)(b)): To provide market itineraries, concierge inquiries, and interactive services explicitly requested by you.
• Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent fraud, optimize caching speeds for mobile users at outdoor markets, and audit directory accuracy.
• Consent (Art. 6(1)(a)): For non-essential analytics tracking and direct editorial newsletters, where you have provided prior unambiguous affirmative consent.

4. Third-Party Processors & International Transfers

Vaultrankdsh does not sell, rent, or monetize personal identifiers. We partner only with vetted data subprocessors who adhere to strict UK and EU Adequacy Decisions or standard contractual clauses (SCCs):

• Hosting & Edge Delivery: Cloud infrastructure providers ensuring ISO 27001 certified encryption at rest and in transit.
• Analytics Infrastructure: Privacy-focused anonymized web analytics operating without cross-site tracking or fingerprinting.

5. Data Retention Protocols

Inquiry messages submitted through our contact desk are retained for a maximum duration of twenty-four (24) months to facilitate ongoing provenance queries and historical reference, after which they are irreversibly purged. Technical server access logs are cycled and erased after ninety (90) days.

6. Your Statutory Rights (GDPR & CCPA)

Depending on your jurisdiction, you possess enforceable rights regarding your personal data:

• Right of Access: Request a complete electronic copy of all personal records we hold regarding your identity.
• Right to Rectification: Require immediate correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Demand permanent deletion of your personal records where no overriding legal obligation exists.
• Right to Restriction & Objection: Restrict or object to specific processing activities, including automated profiling.
• Right to Data Portability: Obtain your data in a structured, commonly used, and machine-readable format.

To exercise any of these statutory rights, submit a formal request to our Data Protection Officer at [email protected]. We respond to all verified requests within thirty (30) calendar days at zero cost to the applicant.