Privacy Policy

1. Introduction

This Privacy Policy explains how Sigma Delta BV ("we", "us", "our"), operating the Epoca platform, collects, uses, and protects your personal data when you use our website at www.epocavintage.be and our mobile applications. We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR) and Belgian data protection laws.

2. Data Controller

The data controller responsible for your personal data is:

3. Data We Collect

We collect different types of information depending on how you use our platform:

Account Information

• Email address and password (encrypted)
• Name and profile information
• Account preferences and settings

Vehicle Information

• Vehicle details (make, model, year, specifications)
• Photos and documentation
• Service history and maintenance records
• Value tracking data

Usage Information

• Log data (IP address, browser type, pages visited)
• Device information
• Analytics data (with your consent)

Professional Information (for verified professionals)

• Business details and credentials
• Portfolio and work examples
• Verification documents

4. How We Use Your Data

We use your personal data for the following purposes:

• To provide and maintain our services
• To create and manage your account
• To enable connections between enthusiasts and professionals
• To send service-related communications
• To improve our platform and develop new features
• To comply with legal obligations

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Contract Performance - Processing necessary to provide our services to you
• Consent - For analytics cookies and marketing communications
• Legitimate Interests - For improving our services and preventing fraud
• Legal Obligation - For compliance with applicable laws

6. Data Sharing & Third Parties

We may share your data with the following third parties:

• Supabase - Database and authentication infrastructure (EU-based)
• Vercel - Website hosting and analytics
• Verified Professionals - When you choose to connect with them for services

We do not sell your personal data to third parties.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your data within 30 days, unless we are required to retain it for legal purposes.

8. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of Access - Request a copy of your personal data
• Right to Rectification - Request correction of inaccurate data
• Right to Erasure - Request deletion of your data ("right to be forgotten")
• Right to Restriction - Request limitation of processing
• Right to Data Portability - Receive your data in a structured format
• Right to Object - Object to processing based on legitimate interests
• Right to Withdraw Consent - Withdraw consent at any time for consent-based processing

To exercise any of these rights, please contact us at info@sigmadelta.be. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit) if you believe your rights have been violated.

9. Cookies

We use cookies and similar technologies to enhance your experience on our platform. We only use non-essential cookies (such as analytics) with your explicit consent.

Read our full Cookie Policy

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption of data in transit and at rest, regular security assessments, and access controls.

11. Mobile Application

When you use our mobile application, we may collect additional information:

• Device Information - Device type, operating system, and unique device identifiers for push notifications
• Camera Access - To allow you to photograph your vehicles (only when you grant permission)
• Location Data - To help you find nearby professionals (only with your permission)
• Push Notifications - To send you important updates (only if you opt in)

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Belgian Data Protection Authority: www.gegevensbeschermingsautoriteit.be