Privacy Policy
Last updated: March 5, 2026
1. Who we are
LuxuryRestocks is operated by TDM Technologies BV, a company registered in Amsterdam, the Netherlands. We run the website luxuryrestocks.com and all associated services.
Questions about this policy? Email us at hello@luxuryrestocks.com.
2. What we collect and why
| Data | Why we collect it |
|---|---|
| Email address | Account creation, magic-link login, alert delivery |
| Name | Personalising alerts and correspondence |
| Country preferences | Deciding which Hermès store pages to monitor for you |
| Telegram chat ID | Delivering Telegram restock alerts |
| WhatsApp number | Delivering WhatsApp restock alerts (if opted in) |
| Payment information | Processing subscription payments via Stripe (we never see or store card details) |
| Browsing behaviour | Improving the product via PostHog analytics (page views, funnel events, alert engagement) |
| Referral data | Tracking affiliate commissions and customer referral milestones |
We do not collect data we don't need. We do not buy or sell data. Ever.
3. Legal basis (GDPR)
- Contract performance — processing your subscription, delivering alerts you signed up for.
- Legitimate interests — analytics that help us improve the service, fraud prevention.
- Consent — WhatsApp alerts and marketing emails (you can withdraw at any time).
4. Third-party processors
We share data only with processors that need it to run the service:
| Processor | Purpose | Data shared |
|---|---|---|
| Stripe | Payment processing | Email, billing details |
| Resend | Email delivery | Email address, alert content |
| Telegram | Telegram alert delivery | Telegram chat ID, alert content |
| WhatsApp / Twilio | WhatsApp alert delivery | Phone number, alert content |
| PostHog | Product analytics (EU-hosted) | Pseudonymous usage events |
| Infrastructure providers | Fetching publicly available product data | No user data shared |
| Hetzner | Hosting (EU data centres) | Encrypted server storage |
No data is transferred outside the EU/EEA without adequate safeguards.
5. Data retention
- Account data — kept while your subscription is active. Deleted within 30 days of a deletion request.
- Notification logs — retained for 90 days, then automatically pruned.
- Scan logs — retained for 90 days, then automatically pruned.
- Payment records — retained for 7 years as required by Dutch tax law.
6. Cookies
We use a minimal set of cookies:
- Session cookie — keeps you logged in. Expires when you close your browser or after 7 days.
- PostHog analytics cookie — pseudonymous analytics to understand how the product is used. No advertising.
Full details in our Cookie Policy.
7. Your rights (GDPR)
As an EU/EEA resident you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a machine-readable format
- Restriction — ask us to stop processing your data while a dispute is resolved
- Objection — object to processing based on legitimate interests
- Withdraw consent — for any processing based on consent (e.g. WhatsApp alerts)
To exercise any right, email hello@luxuryrestocks.com. We respond within 30 days.
You also have the right to lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens.
8. Security
We use industry-standard security measures: TLS encryption in transit, encrypted backups, SSH key-only server access, and no stored card details (Stripe handles all payment data). Access to production systems is restricted to authorised personnel only.
9. Changes to this policy
If we make material changes we will notify subscribers by email and update the "Last updated" date above. Continued use of the service after changes constitutes acceptance.
10. Contact
TDM Technologies BV
Amsterdam, Netherlands
hello@luxuryrestocks.com