Privacy Policy

1. Scope and purpose

This Privacy Policy explains how Velquorianpureatelier handles personal information when you browse this website, contact us, request antique restoration services, ask for information about an item, arrange a consultation, or otherwise communicate with us. We operate in Australia and aim to handle personal information consistently with the Privacy Act 1988 (Cth), the Australian Privacy Principles, and other applicable Australian privacy requirements. Where the European Union General Data Protection Regulation (GDPR) or the United Kingdom GDPR applies because we offer services to, or monitor the behaviour of, individuals in those jurisdictions, the additional rights and legal-basis provisions in this Policy also apply.

This Policy covers information collected through velquorianpureatelier.com and direct communications connected with our antique sales and restoration activities. It does not govern third-party websites or services that we do not control.

2. Administrator and contact

For privacy questions, access or correction requests, objections, complaints, requests to withdraw consent, or enquiries about international transfers, contact us using the email above. We may need to verify your identity before acting on a request so that personal information is not disclosed to an unauthorised person.

3. Personal information we may collect

Depending on how you interact with us, we may collect your name, email address, telephone number, organisation name, postal or delivery address, enquiry details, correspondence, preferred contact method, and information you provide about an antique or collectible. Restoration enquiries may include photographs, descriptions, provenance information, ownership history, dimensions, condition notes, valuation information supplied by you, service preferences, appointment details, delivery instructions, and records of work requested or completed.

If you purchase an item or pay for services through a separately arranged payment method, we may keep transaction records, invoice information and payment-status information required for accounting, fraud prevention and legal compliance. We do not intentionally request or store complete payment-card credentials through the contact form on this website.

Technical information may include IP address, browser type, device type, operating system, approximate region, referring page, pages viewed, timestamps, error logs and security events. If optional analytics or similar cookies are introduced in the future, they will be described in the Cookie Policy and, where required, will not be activated before valid consent.

4. How information is collected

We collect information directly from you when you complete the contact form, email or telephone us, visit our premises, request a quotation, ask about an antique, purchase an item, arrange restoration work, or otherwise provide information voluntarily. We may also receive limited information from delivery providers, professional advisers, payment providers, insurers, marketplaces or service providers where this is necessary to perform a transaction or manage a legitimate business process.

Where information is obtained from a third party, we take reasonable steps to ensure collection is lawful and, when required, to inform you about the source and purpose of processing.

5. Purposes and legal bases

We use personal information to respond to enquiries; provide quotations; assess restoration requests; communicate about condition, scope, timing and collection or delivery; sell antiques and collectibles; issue invoices and maintain business records; provide customer support; protect our website, customers and business from misuse or fraud; manage disputes; comply with tax, accounting, consumer protection and legal obligations; and improve our services.

For individuals covered by the GDPR, our legal bases may include taking steps at your request before entering into a contract, performing a contract, complying with a legal obligation, pursuing legitimate interests that are not overridden by your rights, and consent where consent is required. Legitimate interests may include operating and securing the website, responding efficiently to business enquiries, maintaining records, preventing fraud, establishing or defending legal claims, and improving our services. Where processing is based on consent, you may withdraw consent at any time without affecting processing that was lawful before withdrawal.

6. Data minimisation and special-category information

We seek to collect only information reasonably necessary for the relevant purpose. Please do not provide sensitive or special-category personal information through the general contact form unless it is genuinely necessary and you have a lawful basis for doing so. We do not intentionally use the website to collect health information, biometric identifiers, political opinions, religious beliefs, sexual-orientation data or similar sensitive information.

7. Disclosure and service providers

We may disclose personal information to hosting and technology providers, professional advisers, accountants, insurers, couriers, delivery or storage providers, payment providers, contractors assisting with restoration or specialist assessment, and public authorities where disclosure is required or authorised by law. We require service providers to handle information only for the relevant service and with appropriate confidentiality and security obligations where reasonably practicable.

We do not sell personal information. We do not provide personal information to advertisers for their independent direct-marketing use.

8. International transfers

Some technology or professional service providers may process information outside Australia. Before using an overseas provider for personal information, we consider the nature of the information, the service, available safeguards and applicable law. Where the GDPR applies and information is transferred from the European Economic Area to a country without an adequacy decision, we will use a lawful transfer mechanism where required, such as approved standard contractual clauses together with supplementary measures appropriate to the risk.

Australian Privacy Principle 8 may also require us to take reasonable steps to ensure an overseas recipient does not breach the Australian Privacy Principles in relation to personal information disclosed to it, subject to the exceptions in the Privacy Act.

9. Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including service delivery, warranty or restoration records, customer support, accounting, tax requirements, dispute management, fraud prevention and legal claims. Retention periods vary by record type. Enquiry records that do not lead to a transaction are periodically reviewed and deleted or de-identified when no longer required. Contract, invoice and transaction records may need to be retained for statutory accounting or tax periods.

When information is no longer required and no legal reason requires continued retention, we take reasonable steps to delete it securely or de-identify it.

10. Security

We use reasonable administrative, technical and organisational safeguards designed to protect personal information against loss, misuse, interference, unauthorised access, modification or disclosure. Measures may include access controls, limited staff access, software updates, secure hosting configurations, backups, and procedures for responding to suspected data incidents. No internet transmission or storage system can be guaranteed to be completely secure, so we cannot promise absolute security.

If an eligible data breach occurs under the Australian Notifiable Data Breaches scheme, we will assess the incident and notify affected individuals and the Office of the Australian Information Commissioner when required. Where the GDPR applies, we will also comply with applicable breach-notification duties.

11. Your rights in Australia

You may request access to personal information we hold about you and ask us to correct information that is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond within a reasonable period and may refuse a request only where permitted by law, in which case we will generally explain the reason and available complaint mechanisms.

You may also contact us to ask questions about how your information is handled or to make a privacy complaint. We will investigate complaints in good faith. If you remain dissatisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner.

12. Additional GDPR rights

If the GDPR applies to your personal data, you may have rights to access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent. You may also have the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects. We do not currently use the website contact process for solely automated decisions of that kind.

You also have the right to lodge a complaint with a competent data protection supervisory authority in the country where you live, work, or believe an infringement occurred. These rights are subject to legal conditions and exceptions; for example, deletion may not be possible when retention is required by law or necessary to establish or defend legal claims.

13. Direct marketing

We may send direct marketing only where permitted by applicable law. In Australia, commercial electronic messages are subject to the Spam Act 2003. Where consent is required, we will obtain it before sending marketing, identify the sender and provide usable contact details. You may opt out at any time by using the unsubscribe mechanism provided or by contacting us. Where the Spam Act applies, unsubscribe requests will be actioned within five working days and the unsubscribe facility will remain functional for the legally required period. We will not require you to receive marketing as a condition of receiving an unrelated service unless lawful and clearly disclosed.

14. Cookies and local storage

This website is designed to operate with minimal tracking. Essential technical storage may be used where necessary for security, interface functionality or remembering a choice. Any non-essential analytics, advertising or profiling cookies introduced later will be addressed through appropriate notice and consent controls where required. See our Cookie Policy for more information.

15. Children

Our antique sales and restoration services are directed to adults and business customers. We do not knowingly collect personal information from children through this website. If you believe a child has provided personal information without appropriate authorisation, contact us so we can review and, where appropriate, delete it.

16. Third-party links

Our website may occasionally refer to third-party services or resources. Their privacy practices are governed by their own policies. We are not responsible for how an independent third party processes information after you leave our website.

17. Changes to this Policy

We may update this Privacy Policy to reflect changes in our services, technology, business practices or legal requirements. The current version will be published on this page with an updated date. Material changes may also be communicated through an additional notice where appropriate.