Privacy Policy

Vinteer is operated by Mathys YON, sole proprietor (entrepreneur individuel) under French law, 60 Rue François 1er, 75008 Paris, France ("Vinteer", "we", "us"). We are the controller of the personal data described in this policy. You can reach us at contact@vinteer.io.

Vinteer is operated from France and has no office in the UK. The UK GDPR and the Data Protection Act 2018 apply to our use of the personal data of people in the UK. As a business established in France, we also follow the EU General Data Protection Regulation (GDPR) and French law.

We have not appointed a representative in the UK under Article 27 of the UK GDPR. You can contact us directly at contact@vinteer.io for anything about your data.

Vinteer is not open in the UK yet. Today, the site collects the following.

When you join the waitlist

• Your email address, which you type in the form.
• The market and the page you signed up from (for example, the UK page).
• Your country, which our hosting provider infers from your IP address and passes to us in a request header. We never ask you for it.
• The date of your sign-up.
• Your consent: by joining the waitlist after reading the line under the form, you agree to receive emails about the UK launch. The sign-up record itself (email address, market, page and date) and the wording of the form at that date are our record of that consent.

Your IP address is used briefly in server memory to limit repeated submissions. We do not store it in the waitlist database.

We send you a confirmation email through Brevo, our email provider. We do not pass the email address you enter in the waitlist form to any advertising provider.

When you browse the site

• Audience measurement. We use Vercel Web Analytics, which does not use cookies. It identifies a visitor with a hash built from the request, deleted after 24 hours, and records aggregated data such as the page URL, the referring page, your country or region, operating system, browser and device type.
• No advertising pixels. Pages under vinteer.io/uk do not load advertising pixels.
• A few small items stored in your browser. They are listed, with their purpose and duration, in our Cookie Policy.

We will update this policy before we start collecting account data in the UK. We expect to handle, at that point:

• your name and email address, through Google sign-in;
• the sales and purchases Vinteer imports for you from Vinted and eBay (amounts, dates, references, buyer usernames and the delivery details shown on shipping labels);
• payment information, which will be handled by a payment provider. Vinteer will not see your full card number;
• technical logs needed to keep the service secure.

We will email waitlist members and subscribers about material changes to this policy, and the date at the top of this page will change.

• Launch emails (your consent, Article 6(1)(a) UK GDPR): confirming your spot and telling you when Vinteer opens in the UK. You can withdraw your consent at any time by using the unsubscribe link in any email or by writing to us. Withdrawing does not affect what we did before.
• The launch offer (your consent): joining the waitlist with an email address entitles you to the offer described in our Terms of Service, and we use the email address you gave to recognise you at launch.
• Audience measurement and site improvement (our legitimate interests, Article 6(1)(f)): understanding how the site is used.
• Security and abuse prevention (our legitimate interests): limiting repeated submissions and protecting the site.
• Legal obligations (Article 6(1)(c)): answering your requests and keeping records the law requires.

Where we rely on legitimate interests, we have weighed them against your rights, and you can object to this use (see "Your rights" below). We do not make decisions about you by automated means that have legal or similarly significant effects.

We do not sell your personal data. We use these providers:

• Supabase: database where the waitlist is stored (European Union, region eu-west-1).
• Vercel: hosting of the site and cookieless audience measurement.
• Brevo: sending the confirmation email and our emails to waitlist members (France, European Union).

Supabase, Vercel and Brevo act as our processors, on our behalf and only on our instructions. At launch, a payment provider and Google (sign-in) will be added to this list.

We may also disclose information when the law requires it, for example to tax authorities or courts.

Your waitlist data is stored in the European Union (Supabase, region eu-west-1), and our emails are sent through Brevo (France, European Union). When you sign up from the UK, your data is therefore sent from the UK to the European Economic Area (EEA). The UK treats all EEA countries as providing an adequate level of protection (UK adequacy regulations), so no further safeguard is needed under UK rules for that transfer.

Vercel Inc., a company based in the United States, hosts the site and provides Vercel Web Analytics. Vercel states that it is certified under the EU-U.S. Data Privacy Framework and its UK Extension, and that it relies on the EU standard contractual clauses and the UK Addendum for transfers outside the EEA. These are the transfer mechanisms recognised by UK law.

• Waitlist data: until you unsubscribe or ask us to delete it, and in any case no longer than 12 months after Vinteer opens in the UK.
• Technical and security logs: up to 12 months, unless a security incident requires keeping them longer.
• Items stored in your browser: for the durations given in the Cookie Policy.
• Audience measurement: the visitor hash is deleted after 24 hours.
• After launch, for customers: account and operational data for as long as you have an account, then 3 years to defend our legal rights; invoices and accounting records for 10 years, as French law requires.

We use technical and organisational measures suited to the risks, including encryption of communications in transit (HTTPS/TLS), access limited to people who need it, and confidentiality commitments from our providers. No system is perfectly secure. If a personal data breach is likely to put your rights at risk, we will tell you and the regulator as the law requires.

Vinteer is not directed to children and the service is for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us personal data, write to contact@vinteer.io and we will delete it.

We send you a confirmation when you join the waitlist and, because you agreed when you joined, emails about Vinteer's UK launch. Each of these emails says that it comes from Vinteer, contains an unsubscribe link and gives our postal address (60 Rue François 1er, 75008 Paris, France). We stop sending you launch emails as soon as you unsubscribe. We send these emails in line with the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR).

Under the UK GDPR you have the right to:

• be told how we use your data, which is the purpose of this policy;
• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased, in the cases the law provides for;
• restrict our use of your data, in the cases the law provides for;
• object to our use of your data where we rely on legitimate interests, and at any time to direct marketing;
• receive the data you gave us in a portable format, where we use it with your consent;
• withdraw your consent at any time.

To use a right, write to contact@vinteer.io. You do not need to create an account and it costs nothing. We may ask you to confirm your identity to protect your data. We answer within one month, and we can extend that period by two further months for complex or numerous requests, in line with the UK GDPR.

If you have a concern about how we use your data, please write to contact@vinteer.io first. You have the right to complain to us, and we will acknowledge your complaint within 30 days, look into it, and keep you informed of progress and of the outcome without undue delay.

You also have the right to complain to the UK data protection regulator, the Information Commission, which took over the functions of the Information Commissioner's Office (the ICO) on 30 September 2026. You can do so at ico.org.uk/make-a-complaint. As we are established in France, you can also complain to the French authority, the CNIL (cnil.fr).

When we change this policy, we update the date at the top of this page. For material changes, we also email waitlist members and subscribers.

Email: contact@vinteer.io

Post: Mathys YON, 60 Rue François 1er, 75008 Paris, France