Privacy notice

This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit or make a purchase from our website (“the Site”). We are committed to safeguarding your privacy and complying with all applicable data-protection legislation in the United Kingdom, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using the Site, you agree to the collection and use of information in accordance with this Policy.

1. Personal Information Collected on the Website

We collect the following types of personal information when you browse, register an account, or make a purchase on the Site:

Information You Provide Directly

  • Identity Data: first name, last name.

  • Contact Details: billing address, delivery address, email address, telephone number.

  • Account Information: login details, order history, saved preferences.

  • Payment Information: credit or debit card details (processed securely by our payment provider).

  • Communication Data: enquiries, emails and messages submitted through forms or customer service channels.

Information Collected Automatically

When you use the Site, we may automatically collect certain technical information, including:

  • IP address

  • browser type

  • device information

  • pages visited, time spent on pages, and referring URLs

  • cookies and similar tracking technologies

You may control cookie preferences through your browser settings.

2. How We Use Your Personal Information

We use your personal information for the following purposes:

  • To process and fulfil orders, including payment processing, dispatch, and delivery.

  • To create and maintain your account on the Site.

  • To communicate with you, including order confirmations, delivery updates, and responses to enquiries.

  • To personalise your user experience, such as showing recently viewed products or saved items.

  • To detect and prevent fraud, unauthorised transactions, or security incidents.

  • To comply with legal obligations, including tax and accounting requirements.

  • To improve our services, website performance, and customer experience.

  • To send marketing communications, where you have expressly consented to receive them (you may opt out at any time).

3. How the Website Owner Shares Personal Information

We only share your personal information where necessary for legitimate business purposes, including:

Service Providers

We share information with trusted third parties who assist us with:

  • payment processing

  • order fulfilment and delivery

  • website hosting and IT support

  • analytics and performance tracking

  • marketing or email distribution services (where applicable)

These providers may only process personal information on our instructions and must keep it secure.

Legal and Compliance

We may disclose personal information where required to:

  • comply with a legal obligation

  • respond to lawful requests from regulatory authorities

  • protect our rights or the rights of others

  • prevent fraud or security issues

We do not sell or trade personal information to third parties.

4. Your Rights as a User

Under UK data protection law, you have the following rights:

  • Right of access – to request a copy of your personal data.

  • Right to rectification – to correct inaccurate or incomplete information.

  • Right to erasure – to request deletion of your data (subject to legal obligations).

  • Right to restrict processing – to limit how your data is used.

  • Right to data portability – to request your data in a structured, commonly used format.

  • Right to object – to the use of your data for direct marketing or certain other purposes.

  • Right to withdraw consent – where processing is based on consent.

To exercise your rights, please contact us using the details below.

5. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

  • fulfilling your orders

  • complying with legal, tax and accounting obligations

  • resolving disputes and enforcing agreements

Generally:

  • Order and account records may be retained for up to 6 years in line with UK tax and legal requirements.

  • Marketing data is retained until you withdraw your consent or request deletion.

When data is no longer required, it will be securely deleted or anonymised.

6. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or website functionality. Any updates will be posted on this page, and the “last updated” date will be revised accordingly. Continued use of the Site after changes indicates your acceptance of the updated policy.

7. How to Contact the Website Owner

If you have any questions about this Privacy Policy, your personal information, or wish to exercise your rights, you may contact us at info[@]vitajewellerydesign.co.uk

We will respond to all valid requests within the time limits set by UK data-protection law.