Privacy notice
Last updated October 2026.
Who is responsible for your data
Chris Faulkes, trading as WholeLottaVinyl (Vinyl Buyback), 33 Lichfield Lane, Mansfield, Nottinghamshire, NG18 4RB, is the data controller. Contact chris@wholelottavinyl.co.uk.
What we collect
- Your name, email, phone number and address.
- Your payout details (PayPal email or bank details, if you give them).
- The records in your order and our offers.
- Basic technical data needed to run the website (for example server logs).
Why we use it, and our lawful basis
- To process your order, send postage labels, return items and pay you: this is necessary for our contract with you.
- To keep business and tax records: legal obligation.
- To prevent fraud and keep the service secure: legitimate interests.
- To send you occasional emails about Vinyl Buyback, only if you tick the box: consent, which you can withdraw at any time.
Who we share it with
We only share what's needed with the services we use to run Vinyl Buyback: our website host and storage (Vercel), our email provider, postage providers for labels and returns, and PayPal or our bank to pay you. We don't sell your data.
Record lookups
When you scan or search for a record, the barcode or catalogue number is sent to MusicBrainz and Discogs to identify it. We don't send them your personal details. Scanning uses your camera only on your device; we don't store camera images.
How long we keep it
We keep order records for 6 years for tax purposes, then delete them. Bank details are deleted once you've been paid.
Your rights
Under UK GDPR you can ask to access, correct or delete your data, object to or restrict how we use it, and ask for a copy. Email us to make a request. You can also complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We don't use advertising or tracking cookies. Your basket is saved in your own browser's local storage so it isn't lost if you leave the page.