Trust Center

All purchases are completed on our eBay storefront. We never see or store payment card, bank, or PayPal details, and this website has no checkout or card-entry form.

Buyer protection, dispute resolution, and transaction records are handled by eBay under eBay's own terms.

• Served exclusively over HTTPS/TLS.
• Admin dashboard requires authenticated sign-in with role-based permissions stored server-side.
• Database access is enforced with row-level security policies; public forms can write only their own records.
• Public forms are protected by Cloudflare Turnstile with server-side verification, plus rate limiting and spam heuristics.

• Contact, offer, and question submissions (name, email, message).
• Item-alert and newsletter subscriptions (email, keywords/categories, consent record).
• Wishlist and recently-viewed items, kept in your browser's local storage — not on our servers.
• Standard request metadata (IP, user-agent) recorded by our hosting provider for security.

Full detail lives in our Privacy Policy.

• eBay — storefront, checkout, order and buyer messaging.
• AuctionNudge — renders our public eBay listings on this site.
• Lovable Cloud — application hosting, database, authentication, and file storage.
• Cloudflare — Turnstile bot protection for forms.
• Transactional email provider — delivers alert, newsletter, and reply emails from our notify subdomain.

We use strictly necessary cookies and browser storage only — session state, wishlist, and preferences. We do not run advertising pixels, cross-site trackers, or behavioral ad networks.

See the Cookie Notice for the full list.

• Form submissions: up to 24 months after the last correspondence.
• Newsletter and alert subscriptions: until you unsubscribe, then a suppression record only.
• Server request logs: a short operational window, typically 90 days or less.

Every marketing email includes a one-click unsubscribe link that takes effect immediately.

You can request a copy of the data we hold, correction of inaccurate data, or deletion at any time. Email hello@legacyestatecollective.com with the subject "Privacy request" and we will respond within 30 days. You may also write to us by mail at Legacy Estate Collective, 112 N Flowers Mill Rd, Unit #475, Langhorne, PA 19047, or call (484) 238-0039.

Data tied to an eBay order must be requested through eBay, since they control that record.

If you believe you've found a vulnerability in this website, email hello@legacyestatecollective.com with the subject "Security report" and steps to reproduce. Please do not access other people's data or run disruptive testing. We aim to acknowledge reports within 3 business days.

Every piece is described from the item in hand, with condition notes and flaws photographed. We do not claim third-party certification unless a listing includes the certificate. See our Authenticity Guarantee.

We aim to meet WCAG 2.1 AA as an ongoing goal. Read our Accessibility Statement or tell us about a barrier you hit.

Our hosting platform secures the infrastructure, network, and managed database. We are responsible for this site's content, access control, and how we handle your submissions. You are responsible for safeguarding your own email account and eBay credentials — we will never ask you for a password or payment details by email.

We are a small family-run reseller. We do not hold SOC 2, ISO 27001, PCI DSS, or similar certifications, and we do not claim to. Because checkout runs entirely on eBay, card data never touches our systems.