Privacy & GDPR Policy

1. Data Controllers & Strict Segmentation

To guarantee maximum security and compliance with global privacy laws, The Collector operates with a segmented data infrastructure managed by independent regional data controllers:

• European & Gateway Hubs: Data processing for users within the European Union and North America is controlled by our administrative headquarters in Brussels and our logistics center in Malaga, in full compliance with the European General Data Protection Regulation (GDPR).
• International Hub: Data processing for regional, Afro-Eurasian, and transit trade zones is handled independently by THE COLLECTOR MAROC SARL (Marrakech, Morocco) under the national data protection Law No. 09-08.

2. Purpose of Data Collection

We collect and process personal data (such as names, shipping addresses, emails, and billing details) exclusively to execute marketplace transactions, secure cultural collectible shipments, and prevent fraudulent trade activity. The Collector never sells your personal information to third-party advertising companies.

3. Cross-Border Data Transfers & Security

Financial databases remain entirely compartmentalized between regional banking networks to safeguard transaction security. Shipping records (buyer names and shipping destinations) are securely transferred across hubs and transport providers (such as Royal Air Maroc Cargo or European postal carriers) solely to ensure delivery. These transfers are strictly protected by Standard Contractual Clauses (SCCs) to guarantee equivalent data protection levels.

4. User Rights & Data Retention

Regardless of your geographic location, The Collector grants all users the right to access, rectify, or request the erasure of their personal accounts and navigation history, provided no active transaction or mandatory tax retention regulation prevents it. For any data inquiries, you can reach our dedicated privacy desk at privacy@thecollector-be.com.