Privacy Policy

Lastline Heritage operates from Slovenia and runs lastlineheritage.com and its related archive, administration, contact and newsletter services. Lastline Heritage is the controller of personal data described in this policy.

• Information you voluntarily provide through the contact form, including your name, email address, selected item references and message.
• Newsletter records, including email address, subscription status, source, request date, confirmation date, consent version and unsubscribe status.
• If you allow optional analytics, Lastline records limited first-party usage information such as a random visitor and session identifier, page path, external referrer host, broad device class, campaign parameters, item reference and outbound eBay clicks. This information is used to understand public-site activity and purchase intent. We do not include names, email addresses or contact-form content in these analytics events.
• If you allow optional analytics, Google Analytics may also collect usage, device, traffic-source and engagement information using analytics cookies and identifiers. We do not send names, email addresses or contact-form content to Google Analytics.
• For the private administration area and eBay integration, account, inventory, listing and order-related information required to operate those tools.

• Contact enquiries: legitimate interests in responding to questions and, where an enquiry concerns a possible purchase, taking steps at your request before entering into a contract.
• Newsletter: consent. We use your email only for the updates you requested.
• Optional analytics: consent. Lastline first-party analytics and Google Analytics do not run until you choose “Allow analytics”.
• Site security and essential operation: legitimate interests and, where applicable, contractual or legal necessity.
• eBay administration: providing the connected service requested by the account holder and maintaining the related records.

We do not sell personal data.

Newsletter updates are optional. A subscription request is confirmed by email before the address becomes an active newsletter recipient. We retain the request and confirmation information needed to demonstrate consent. Every newsletter includes an unsubscribe mechanism. Withdrawing consent does not affect processing that was lawful before withdrawal.

Lastline does not use advertising or cross-site behavioural profiling. Optional analytics is not activated until you allow it. When enabled, Lastline stores random visitor and session identifiers in browser storage so public visits can be counted without using your name or email address. Signed-in Control Center activity is excluded from this public analytics view.

Google Analytics may set analytics cookies such as _ga to distinguish visits and measure site usage. Google signals and advertising-personalisation signals are disabled in our implementation.

Your privacy choice itself is stored in local storage so the site can remember whether you accepted or declined optional analytics. If you later decline analytics, Lastline stops new optional analytics collection and attempts to remove Google Analytics cookies set for this site. You can change this decision at any time using Cookie policy.

Access to eBay is through eBay’s official OAuth flow and APIs. Lastline Heritage does not receive or store an eBay password. Access can be reviewed or revoked through eBay account application permissions.

We use service providers required to host the site, database and storage, operate connected services and deliver contact or newsletter email. First-party analytics records are stored in Lastline’s application database. If you consent to analytics, Google LLC provides Google Analytics for additional traffic measurement. Providers receive only the information required for their role. Where personal data is transferred outside the EEA, we rely on an applicable adequacy decision or appropriate safeguards such as Standard Contractual Clauses where required.

We keep personal data only for as long as needed for the purpose for which it was collected, to respond to enquiries, to document consent or withdrawal, to maintain security, or to satisfy legal obligations. Active newsletter records are retained while the subscription is active. A minimal unsubscribe/suppression record may be retained to ensure an address is not emailed again by mistake. Analytics records are retained only as needed for traffic and conversion analysis, while Google Analytics data follows the configured GA4 retention settings. We use reasonable technical and organisational safeguards and public analytics data is readable only from the authenticated administration area.

If the GDPR applies to you, you may request access, correction, deletion, restriction or portability of your personal data where applicable, object to certain processing, and withdraw consent at any time. You also have the right to lodge a complaint with a competent supervisory authority, including the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec) where applicable.

Privacy requests can be made through the Lastline Heritage contact form. We may need enough information to verify the request before acting on it.