Who is responsible for your data
The data controller is APHRODITE FASHION LIMITED (company number 07899100), which trades as YIAN. The company is registered in England and Wales; its registered office and our postal address for privacy requests is 5 Audley Rise, Tonbridge, Kent, TN9 1XU, United Kingdom. For privacy questions, email [email protected].
This notice covers the public website, restoration quotes and orders, and the signed-in card collection and valuation tools.
Information we collect
- Restoration quotes and orders: the card photos, purpose, notes and choices (such as colour touch-ups and TikTok filming) you send with a quote; your email address and country; the mobile or WhatsApp number you give when you pay; your return address; and the quote, parcel, payment and tracking records that follow, including workshop photos, videos and notes about your card.
- Messages: what you and our staff write in your account's Messages, and any photos attached; and emails or WhatsApp messages you exchange with us.
- Gift vouchers: when you buy a voucher through Buy Me a Coffee, the name and email address they pass to us so we can send the codes, and who redeems each code.
- Contact enquiries: the name, email address and message you send through the contact form or by email.
- Account identity: email address, display name and Firebase user identifier used to sign in with email and password, Google or an emailed sign-in link.
- Collection records: portfolios, cards, purchase and sale details, notes, dates and valuation history that you add to the signed-in app.
- Card scans: front and back images you choose to upload, scan status, extracted card details and your corrections.
- Service operation: server logs (such as IP address, time and page requested) needed to run and protect the site and fix errors.
How we use it
We use quote and order details to assess your cards, do the work you agree, take payment, post your cards back and keep you updated by email, in Messages or on WhatsApp. We use your phone number and email only to contact you about your quotes and orders. We use account information to sign you in and keep your portfolio, scans and valuation history private to you. To help with a question or an order, our staff can open your account as you see it; each access is recorded.
If you tick the TikTok option, we may film the work on your card and share the video on our social channels. We show the card and the work, never your name or details.
Some features use AI. Card scans and quote photos may be processed by Google's Gemini to identify a card or describe its condition, and our staff may use it to write up notes and messages from what they say. Price lookups send card identifiers to market-reference sources, never your name or email.
We also use information to maintain the service, prevent misuse, resolve technical problems and keep the records the law requires. We do not use portfolio values as financial advice, and we do not sell your information or use it for advertising.
Why we may use it
- Contract: quotes, orders, payments, returns, messages about them, and your account and collection tools — to take the steps you ask for and provide the service.
- Consent: filming your card for TikTok, which you choose with your quote and can withdraw at any time by messaging us.
- Legitimate interests: keeping the site secure, fixing problems, using AI tools to help our staff, and replying to enquiries.
- Legal obligation: keeping order and payment records for tax and accounting.
Cookies and technical data
When you sign in, YIAN sets a session cookie to recognise you. It is HTTP-only, uses SameSite=Lax and is Secure, and signing out clears it. Firebase's sign-in may also use your browser's storage. The site keeps a few preferences in your browser, such as search filters, the email you asked a sign-in link for, and whether you hid a notice; these never leave your device.
We use Google Analytics, loaded through Google Tag Manager, to see which pages help collectors and how many quote requests the site brings in. Its cookies (named _ga and _ga_…, which last up to two years; Google Analytics keeps the data for 14 months) are set only if you choose Accept in the cookie notice. Until then, or if you choose Reject, Google receives cookieless signals without an identifier for your browser, such as the page you viewed. We don't send your name, email or quote details to Google Analytics, and we use no advertising cookies. Your choice is kept in your browser; change your cookie choice at any time.
The TikTok feed loads only when you click it.
International transfers
Some providers above, such as Google, Stripe, Cloudflare, Resend and Meta, may process information outside the United Kingdom, including in the United States and the European Union. Where they do, the transfer is protected by UK adequacy regulations (including the UK Extension to the EU–US Data Privacy Framework) or by the UK's International Data Transfer Agreement or Addendum in the provider's terms.
How long we keep it
- Orders — parcels, payments, workshop photos and videos, reports and messages about them: 6 years after the order, for tax and in case of legal claims.
- Quotes that didn't become orders, and their photos and messages: 2 years.
- Card scans: 30 days.
- Server logs: 30 days.
- Your account and collection: until you delete them. You can export or delete your portfolio and scans in the app.
We may keep information longer where we must to meet a legal duty or resolve a dispute.
Your privacy rights
UK data protection law gives you rights to access, correct and delete your information, to restrict or object to how we use it, to take it with you, and to withdraw consent, such as for TikTok filming. Email [email protected] to make a request; we reply within one month.
You can also complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to put things right first.
Security and children
Your quotes, parcels, messages and portfolio are private to your account, photos are stored privately, and only our staff can see your orders. No internet service can promise absolute security; please use a strong password and tell us promptly if you suspect someone else has used your account.
Children are welcome to send cards through our Kids Free service with a parent or guardian, who should send the quote and give the contact details. A parent or guardian who believes a child has given us personal information can ask us to review or delete it.
Changes and contact
We update this notice when our services or data practices change; the date at the top shows when the current version took effect.
For privacy requests, email [email protected], write to the address above, or open our contact options.
Questions about this page? Contact YIAN.