MARKETPLACE PRIVACY POLICY VENTE-UNIQUE.COM – UK

(Version of 03/03/2026)

At VENTE-UNIQUE.COM, we attach particular importance to Your Personal Data, and if You entrust them to us, we must take the utmost care of them and, above all, explain to You in a transparent manner how we collect and use them.

This Privacy Policy is addressed to You in Your capacity as an internet user, a Buyer or a Seller, who accesses our Marketplace via the website available at https://www.vente-unique.co.uk/.

The purpose of this document is to inform You of the manner in which Your Personal Data may be collected and processed by the Operator.

The protection of Your privacy and Your Personal Data is a priority for us and we undertake to process Your Personal Data in strict compliance with Regulation (EU) 2016/679 (GDPR), the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025.

In any event, we undertake to observe the following two essential principles:

• You remain in control of Your Personal Data;
• Your Data are processed in a transparent, confidential and secure manner.

DEFINITIONS

The following terms, as used in this Privacy Policy, shall have the meanings set out below:

• "Buyer": means any natural or legal person placing an Order for a Product with a Seller through the Marketplace.
• "Order": means the act of purchase made by a Buyer of a Product sold on the Marketplace by a Seller.
• "Data" or "Personal Data": means the personal data which are the subject of Processing under this Privacy Policy, as defined in Article 4(1) of the UK GDPR.
• "Marketplace": means the VENTE-UNIQUE marketplace accessible at the website www.vente-unique.co.uk.
• "Payment Service Provider" or "PSP": means the company, holding a banking licence, providing payment services to Sellers through the Operator in order to enable them to collect payments from Buyers.
• "Products": means any new authorised product listed on the Marketplace by a Seller.
• "General Data Protection Regulation" or "GDPR": means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC.
• "Data Controller": means the person who determines the means and purposes of the Processing in accordance with Article 4(7) of the UK GDPR.
• "Services": means all the services offered by the Operator to Users through the Marketplace.
• "Processor": means the natural or legal person, public authority, agency or other body which Processes Personal Data on behalf of and in accordance with the instructions of the Data Controller, in accordance with Article 4(8) of the UK GDPR.
• "Processing/Process": means any of the operations referred to in Article 4(2) of the UK GDPR, carried out on Personal Data in the context of the performance of this Privacy Policy.
• "User": means any person who accesses and browses the Marketplace, whether as a Seller, Buyer or general internet user.
• "Seller": means any professional seller whose Products are listed on the Marketplace. The Seller warrants that it has the status of a professional as defined by French law and case law. To this end, it is expressly provided that the Seller is a natural or legal person, whether public or private, acting for purposes falling within the scope of its commercial, industrial, craft, liberal or agricultural activity.

The operation of the Marketplace and the provision of Services entail the carrying out of several categories of Processing.

This Privacy Policy concerns the Processing carried out or implemented by the Operator, VENTE-UNIQUE.COM, in its capacity as Data Controller.

Users who wish to obtain further information concerning the Processing carried out by Sellers or by the PSP should contact them directly.

VENTE-UNIQUE.COM, a société anonyme with a board of directors, registered in the Bobigny Trade and Companies Register (RCS) under number 484 922 778 and whose registered office is situated at 9/11 Rue Jacquard – 93310 LE PRE-SAINT-GERVAIS (hereinafter "VENTE-UNIQUE.COM" or "the Operator") shall act as Data Controller in respect of the Processing relating to:

• Access to the Marketplace and the provision of Services;
• The management and monitoring of Product Orders;
• Responding to Your enquiries, complaints and reports;
• The prevention of fraud;
• The sending of our newsletter and commercial offers;
• The management of rights requests under the UK GDPR, the Data Protection Act 2018 and the Data (Use and Access) Act 2025;
• The proper operation of and continuous improvement of our Marketplace and its functionalities.

In this regard, the Operator acts as Data Controller for the purposes described in the section "WHAT ARE THE PURPOSES AND LEGAL BASES FOR THE PROCESSING WE CARRY OUT".

HOW DO WE COLLECT YOUR DATA?

All Data relating to You are collected directly from You, either upon Your registration on the Marketplace, the provision of Services, or in the course of exchanges with us.

Furthermore, Data relating to Your browsing on the Marketplace may be used to target Your needs and areas of interest and to tailor our commercial and advertising offers accordingly.

WHAT ARE THE PURPOSES AND LEGAL BASES FOR THE PROCESSING WE CARRY OUT?

Where the legal basis relied upon for the Processing operations we carry out is the pursuit of a legitimate interest, You have the right, as a data subject, upon simple request, to obtain additional information relating to the balancing of interests.

In all cases, the Operator collects only the Data necessary for the explicit and specified purposes set out below:

Access to the Marketplace and the provision of Services

The management and monitoring of Product Orders

Responding to Your enquiries, complaints and reports

The prevention of fraud

The sending of our newsletter and commercial offers

The management of rights requests under the UK GDPR

The proper operation of and continuous improvement of our Marketplace and its functionalities

VENTE-UNIQUE.COM shall also be authorised to use such Data for the purpose of fulfilling a legal or regulatory obligation.

In any event and for each defined purpose, VENTE-UNIQUE.COM shall use all means at its disposal to ensure the security and confidentiality of the Data entrusted to it, in compliance with applicable laws and regulations.

WHAT DATA ARE PROCESSED?

The mandatory or optional nature of the Data requested and any consequences of failing to provide a response shall be specified at the time of collection.

You may consult details of the Data we are likely to hold about You below.

The details of the information provided below are not intended to be exhaustive and are intended primarily to inform you of the categories/types of Data that the Operator may process.

FURTHER DETAILS:

PROCESSING ACTIVITIES	DATA COLLECTED
Access to the Marketplace and the provision of Services	Surname, First name, title, position, company information Email address For Sellers: Telephone number, company registration number, name/first name of the manager.
The management and monitoring of Product Orders	Surname, First name, title, position, company information Order number Email address Telephone number Postal address Billing postal address Payment method data: bank card number, expiry date, security code
Responding to Your enquiries, complaints and reports	Surname, first name Email address Content of the request and the response Subject Message Report
The prevention of fraud	IP address
The sending of our newsletter and commercial offers	Surname, first name Email address Telephone number
The management of rights requests under the UK GDPR	Surname, first name Email address Where applicable, a copy of proof of identity
The proper operation of and continuous improvement of our Marketplace and its functionalities	Data collected via cookies and other trackers present on our Marketplace; for further details, please consult our cookie banner on the homepage by clicking "settings".

In any event, the Operator undertakes to Process all Personal Data collected in a manner compliant with the GDPR.

WHO ARE THE RECIPIENTS OF YOUR DATA?

Within the limits of their respective responsibilities and for the purposes set out above, the main persons who may have access to Your Data are as follows:

• Authorised personnel of the Operator;
• Companies responsible for the management, hosting of the Marketplace and the IT systems of the Operator;
• Sellers if you are a Buyer;
• Buyers if you are a Seller;
• Authorised personnel of our Processors (where applicable), such as banking partners;
• Where applicable, the relevant courts, mediators, accountants, statutory auditors, solicitors, enforcement officers, debt collection agencies, police authorities or gendarmerie in cases of theft or judicial requisition, emergency services;
• Third parties who may place cookies on Your devices (computers, tablets, mobile phones, etc.) where You consent to this.

Your Data shall not be communicated, exchanged, sold or rented to any person other than those mentioned above without your prior express consent in accordance with applicable legal and regulatory provisions.

WHAT IS THE RETENTION PERIOD FOR YOUR DATA?

We retain Your Data only for as long as is necessary for the purposes pursued, as described above and summarised in the table displayed when You click on FURTHER DETAILS.

PROCESSING ACTIVITIES	RETENTION PERIODS
Access to the Marketplace and the provision of Services	For the entire duration of the contractual relationship, then stored in intermediate archiving for the applicable limitation period (five (5) years for evidentiary purposes). Retention of connection logs and action history for a period not exceeding six (6) months.
The management and monitoring of Product Orders	For the entire duration of the contractual relationship, then stored in intermediate archiving for the applicable limitation period (five (5) years for evidentiary purposes). Accounting documents are further retained for 10 years.
Responding to Your enquiries, complaints and reports	For the entire duration necessary for the Processing of the request, then stored in intermediate archiving for two (2) years following the last contact with the Operator.
The prevention of fraud	Retention of the IP address for a period of 13 months
The sending of our newsletter and commercial offers	Data are retained until consent is withdrawn (by unsubscribing via the link provided for that purpose) or, where applicable, for the entire duration of the contractual relationship, then stored in intermediate archiving for three (3) years following the end of the contractual relationship, or for three (3) years following the last contact with the Operator.
The management of rights requests under the UK GDPR	Data relating to the management of rights requests are retained for the entire duration necessary for the Processing of the request, then stored in intermediate archiving for the applicable criminal limitation period, namely six years, in intermediate archiving (Art. 8 of the French Code of Criminal Procedure).
The proper operation of and continuous improvement of our Marketplace and its functionalities	The retention period for the various cookies installed by the Operator is detailed in the cookie banner accessible from the homepage by clicking "settings"

FURTHER INFORMATION CONCERNING THE PROVISION OF PAYMENT SERVICES

What are the purposes of the Processing?

A Buyer wishing to place an Order on the Marketplace must make use of the payment services provided by the PSP.

The sums due in respect of the Order are collected by the Operator through the PSP.

The PSP, in order to provide payment services, is legally obliged to carry out anti-money laundering, counter-terrorism financing and fraud prevention checks.

Accordingly, the PSP and the Operator are required to Process Buyers' Data in the context of the financial transaction linked to the Order, in the following capacities:

Processing of payment Data for the execution of the transaction:

Processing of Data for the implementation of control procedures:

What is the status of the parties involved?

Processing of payment Data for the execution of the transaction:

The PSP is to be regarded as the Data Controller in respect of the Data Processing related to the management of payment for Product Orders.

The Operator has been appointed by the PSP as its agent in order to provide payment services. In this regard, the Operator, acting on the instructions of the PSP, is to be regarded as the Processor of the payment service provider.

Processing of Data for the implementation of control procedures:

The PSP is legally obliged to process the Data necessary for the implementation of control procedures. In this regard, the PSP is to be regarded as the Data Controller in respect of the Data Processing carried out in the context of the implementation of control procedures.

Retention period for payment Data:

Save as provided in the following paragraphs, banking details shall cease to be retained as soon as the transaction has been completed by the PSP, that is to say, as soon as full payment in respect of the chosen Product has been received by the Seller and the fourteen (14) day withdrawal period has elapsed.

Sellers' banking details (bank account details/IBAN, account number) are retained in order to enable the reimbursement of amounts owed under contracts for the entire duration of the contractual relationship for the performance of the Payment Services (or until the Data are deleted or modified by the Seller).

It should be noted that for payments made by bank card, such Data may be retained as evidence in the event that the transaction is disputed, within temporary files, for a period of thirteen (13) months (or fifteen (15) months if payment is deferred) from the date on which the debit is made. In all cases, the visual security code is not subject to such retention, and banking details are deleted upon expiry of the date indicated above.

WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

In accordance with the GDPR, You have the following rights:

• Right of access (Article 15 UK GDPR), of rectification (Article 16 UK GDPR), of updating and completing Your Data
• Right to restriction or erasure of Your Personal Data (Article 17 UK GDPR), where they are inaccurate, incomplete, ambiguous, out of date, or where their collection, use, communication or retention is prohibited
• Right to withdraw Your consent at any time (Article 13-2c UK GDPR)
• Right to restriction of Processing of Your Data (Article 18 UK GDPR)
• Right to object to the Processing of Your Data (Article 21 UK GDPR)
• Right to portability of the Data You have provided to us, where Your Data are subject to automated Processing based on Your consent or on a contract (Article 20 UK GDPR)

These rights may be exercised:

• By email at: dpo@Vente-unique.com;
• By post to: DPO Vente-unique.com, 9 Rue Jacquard, 93310 Le Pré-Saint-Gervais, France.

You may also lodge a complaint with the UK data protection supervisory authority, the Information Commissioner's Office (ICO) at https://ico.org.uk/make-a-complaint/personal-information-complaint/ or with the CNIL (https://www.cnil.fr/fr/plaintes).

WHAT ABOUT CONNECTION DATA AND COOKIES?

VENTE-UNIQUE.COM uses on its Marketplace connection data (date, time, internet address, visitor's computer protocol, page visited) and cookies (small files saved on Your computer) to identify You, record Your browsing history, and obtain audience measurements and statistics for the Marketplace, including in relation to the pages visited.

Depending on the purposes involved, Users may consent to, refuse or choose the placing of certain types of cookies on their devices.

The terms governing the placing of cookies and the rights available to Users are set out in the Cookie banner accessible from the Marketplace homepage by clicking "settings".

ARE YOUR DATA TRANSFERRED OUTSIDE GREAT BRITAIN?

As a general rule, the Operator processes Your Data within the European Union.

However, given the nature of its activities, and subject to prior notification to You, the Operator may be required to transfer Your Data within the European Union.

In such case, the Operator shall inform You of the measures taken to oversee such transfer and to ensure its compliance.

FURTHER INFORMATION CONCERNING SOCIAL MEDIA

You have the option of clicking on the icons dedicated to the social media platforms Facebook, Pinterest, Instagram, TikTok, LinkedIn and YouTube appearing on our Site.

Social media platforms serve to improve the user-friendliness of the Site and assist in its promotion through sharing.

When You use these buttons, we may have access to the Personal Data that you have indicated as public and accessible from your Facebook, Pinterest, Instagram, TikTok, LinkedIn and YouTube profiles. However, VENTE-UNIQUE.COM does not create or use any database from the Personal Data that you may publish thereon and VENTE-UNIQUE.COM does not exploit any data relating to your private life in this manner.

If you do not wish VENTE-UNIQUE.COM to have access to the Personal Data published on the public areas of your profiles or social media accounts, you must use the means made available to you by the social media platforms Facebook, Pinterest, Instagram, TikTok, LinkedIn and YouTube to restrict access to your data.

WHAT SECURITY MEASURES ARE IN PLACE TO PROTECT YOUR DATA?

The Operator and any of its Processors undertake to implement all technical and organisational measures necessary to ensure the security of our Personal Data Processing operations and the confidentiality of Your Data, in compliance with the GDPR and the UK GDPR.

In this regard, the Operator takes appropriate precautions, having regard to the nature of Your Data and the risks presented by our Processing, to preserve the security of the Data and, in particular, to prevent them from being distorted, damaged, or accessed by unauthorised third parties (physical protection of premises, connection logging, encryption of certain Personal Data, etc.).

UPDATES TO OUR PRIVACY POLICY

This Privacy Policy may be amended, in particular in response to legislative and regulatory developments.

Any updates may be consulted directly on our Marketplace.