Draft, not yet in force. Lot & Lume does not sell anything yet; this text is being prepared and reviewed.

Privacy policy

Version 2026-10-08 (draft). The controller is the owner of Lot & Lume (company registration under way; details follow here before any sale). Contact: hello@lotandlume.com.

What we keep about you, and why

Account: Your e-mail address, a hashed password, your country, home currency and whether you buy as a business. To run your account and show delivered prices (contract).
What you do: Hunts, saved watches, your collection and the alerts we sent you. To provide the service (contract).
Payments: Stripe handles payment; we keep your Stripe customer id, plan and invoice references, but never your card. Invoices are kept for 5 years as the Danish Bookkeeping Act requires (legal obligation).
Usage: Which kinds of pages are used and where sign-ups come from, counted in our own database without third-party trackers. To improve the product (legitimate interest).
Server logs: IP address, page and time, kept up to 30 days. For security and to stop abuse (legitimate interest).
Weekly market note: Only if you tick the box on your account page; unsubscribe in one click (consent).

Who helps us

Oracle Cloud (hosting, Frankfurt, EU).
Stripe (payments; EU and US, under the EU-US Data Privacy Framework and standard contractual clauses).
Our e-mail provider (Resend, or Amazon SES; US, under the same safeguards) to send account mail and alerts.
Telegram, only if you link it for alerts.
Google Gemini writes the AI overview from the public listing text; no data about you is sent to it.

Watch photos are shown from the sellers' own websites, so your browser loads them from those sites, which can see your IP address.

Cookies and storage

One cookie keeps you signed in; it is strictly necessary and set only when you sign in. Your browser's local storage remembers display choices such as dark mode. There are no advertising or tracking cookies, so there is no cookie banner.

How long

Account data until you delete your account, then erased within 30 days, except what the law requires us to keep (invoices). Delivered alerts are deleted after a few months. Backups roll over within 14 days.

Your rights

You can see, export and delete your data from your account page, and correct it there. You can also ask for access, correction, erasure, restriction or portability, or object, at hello@lotandlume.com; we answer within a month. You can complain to Datatilsynet (datatilsynet.dk).

Sellers in our index

We index public listings from auction houses, dealers and marketplaces. We do not set out to keep information about private sellers, and we remove contact details from listing text. If a listing of yours appears here and you want it removed, write to hello@lotandlume.com with the link; we remove it within 48 hours.