Last updated: 9 September 2026

The Vintage Camera Museum (“we”, “us”) is based at 11 High Street, Carshalton, SM5 3AP. This policy explains what personal information we collect through this website, why we collect it, and the choices you have. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What we collect and why

Membership accounts. When you buy a membership we collect your name, email address, username, billing address and the details of the plan you chose. We use this to create your account, provide your membership, issue receipts, and contact you about your membership. Legal basis: performance of a contract.
Payments. Card payments are handled by our payment provider. We never see or store your full card number. The provider shares with us only the confirmation of payment and the last four digits of the card so we can identify the transaction. Legal basis: performance of a contract and our legitimate interest in preventing fraud.
Contact form and email. If you contact us we keep your name, contact details and message so we can reply. Legal basis: our legitimate interest in responding to enquiries.
Technical information. Our web server keeps standard access logs (IP address, browser type, pages requested, date and time) for security and to keep the site running. Legal basis: our legitimate interest in the security of the website.

Cookies

This website uses only strictly necessary cookies. These keep you logged in to your membership account, remember that you have visited during a session, and protect forms against misuse. We do not use advertising or third-party tracking cookies. The map on our Contact page is provided by Google Maps and is subject to Google’s own privacy policy when it loads.

Who we share information with

We share information only with the service providers needed to run the website and process your membership: our web hosting provider, our email delivery service, and our payment provider. Each processes data on our instructions and under contract. We do not sell personal information to anyone.

How long we keep it

Membership account records are kept while your account exists and for six years after your last purchase to meet our accounting obligations. Contact form messages are kept for up to twelve months. Server logs are kept for up to ninety days.

Your rights

You have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, and to receive it in a portable format. You can update most of your account details yourself from the Members’ Area. To exercise any other right, email us at contact@carshaltonauction.co.uk. If you are unhappy with how we handle your data you can complain to the Information Commissioner’s Office at ico.org.uk.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.