Privacy policy

Last Updated: March 2025

VENDEBIAN ("we," "us," or "our") operates this online store and related services (collectively referred to as the "Website"). We are based in the United Kingdom and serve as the data controller for the personal information you provide to us.

By accessing and using our Website, you acknowledge and agree to the data handling practices described in this Privacy Policy.

1. ABOUT US

VENDEBIAN
Address: 76 Mardyke Rd, Harlow CM20 3BN, United Kingdom
Phone: +44 7916652061
Email: info@vendebian.com

2. INFORMATION WE COLLECT

The personal data we gather varies based on your interactions with our Website and may include:

Personal & Contact Details: Your full name, email address, phone number, shipping address, and billing information.

Purchase & Transaction Data: Products ordered or returned, order values, payment references, and partial card details (complete card information is processed solely by our payment service providers and is never stored by us).

User Account Information (for registered users): Login credentials, account passwords, and your saved shopping preferences.

Communications & Support: Messages, attachments, or other information you provide when contacting our customer service team.

Technical & Usage Information: IP address, device type, browser information, operating system version, pages visited, time spent on site, and data collected through cookies and similar tracking tools.

3. HOW WE COLLECT YOUR INFORMATION

Directly from you: When you place orders, create an account, subscribe to our newsletter, or contact customer support.

Automatically: Through cookies, web beacons, and other tracking technologies as you browse and interact with our Website.

From third parties: Via our partners and service providers who assist with payment processing, shipping, marketing campaigns, and website analytics.

4. WHY WE USE YOUR DATA AND LEGAL BASIS (GDPR ARTICLE 6)

We process your personal information for the following purposes:

Order Processing & Account Management (fulfilling purchases, coordinating delivery, managing returns and exchanges, providing customer support) — Legal basis: Performance of contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).

Payment Processing & Fraud Prevention — Legal basis: Legitimate interests in protecting our business and customers (Art. 6(1)(f)) and compliance with legal obligations under financial regulations (Art. 6(1)(c)).

Improving Website Performance & User Experience (monitoring site usage, troubleshooting technical issues, optimizing features) — Legal basis: Legitimate interests (Art. 6(1)(f)).

Marketing & Promotional Activities (sending newsletters, special offers, personalized recommendations, and targeted advertisements) — Legal basis: Your consent where legally required (Art. 6(1)(a)); otherwise our legitimate interests (Art. 6(1)(f)). You can opt out at any time.

Legal & Regulatory Compliance (meeting tax obligations, maintaining financial records, responding to legal requests from authorities) — Legal basis: Legal obligation (Art. 6(1)(c)).

5. COOKIES & TRACKING TECHNOLOGIES

Our Website utilizes cookies and similar technologies to:

Enable core website functionality
Remember your preferences and settings
Analyze website traffic and visitor behavior
Deliver relevant marketing content and advertisements

Where legally required, we will obtain your consent for non-essential cookies when you first visit our site. You can manage your cookie preferences at any time via our cookie settings banner or through your browser controls. Please note that disabling certain cookies may affect Website functionality.

6. DATA SHARING & DISCLOSURE

We share personal information only when necessary to operate our business:

E-commerce Platform (Shopify): Provides hosting, order management, security infrastructure, and platform services.

Payment Service Providers: Handle secure payment processing and fraud detection services.

Logistics & Delivery Partners: Fulfill orders and manage shipping and returns.

Technology & Analytics Providers: Support cloud hosting, email communications, and website performance analysis.

Professional Services: Legal counsel, accountants, and compliance advisors as needed.

Business Transactions: In the event of a merger, acquisition, restructuring, or asset sale, your personal information may be transferred to the acquiring entity.

We do not sell your personal data to third parties.

7. INTERNATIONAL DATA TRANSFERS

Some of our service providers (including Shopify and associated partners) may process your data in countries outside the United Kingdom or European Economic Area. When such transfers occur, we ensure appropriate safeguards are in place, including the use of Standard Contractual Clauses (SCCs) approved by regulatory authorities. If you would like more information about these safeguards or copies of relevant agreements (with certain details redacted for commercial confidentiality), please contact us.

8. DATA RETENTION PERIODS

We retain personal information only for as long as necessary to fulfill the purposes described in this policy and to comply with legal requirements. Standard retention periods include:

Financial & Transaction Records: Retained for up to 10 years in accordance with tax and accounting regulations.

Account Information: Maintained while your account remains active; anonymized or deleted following extended periods of inactivity and once legal retention obligations have been met.

Customer Service Records: Kept for up to 3 years following case closure (longer retention may apply for legal or dispute matters).

Marketing Consent: Maintained until you unsubscribe or withdraw consent; upon withdrawal, your details are suppressed from future promotional communications.

9. YOUR PRIVACY RIGHTS

Under UK GDPR and EU GDPR, you have the following rights:

Access: Request a copy of the personal data we hold about you
Correction: Ask us to correct inaccurate or incomplete information
Deletion: Request erasure of your data under certain circumstances
Restriction: Ask us to limit how we process your information
Objection: Object to specific types of processing activities
Data Portability: Receive your data in a structured, commonly used, machine-readable format
Withdraw Consent: Remove your consent at any time (where consent is the legal basis for processing)

To exercise any of these rights, please email info@vendebian.com. We may need to verify your identity before processing your request. We will respond within one month (in complex cases, this may be extended by up to two additional months with prior notification).

You also have the right to lodge a complaint with the relevant supervisory authority. In the UK, this is the Information Commissioner's Office (ICO). EEA residents should contact their local data protection authority.

10. CHILDREN'S PRIVACY

Our Website is not designed for or directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal data, please contact us immediately and we will take steps to delete such information.

11. AUTOMATED DECISION-MAKING & PROFILING

We do not engage in automated decision-making or profiling that produces legal effects or similarly significant impacts on you, as defined under GDPR Article 22.

12. THIRD-PARTY PLATFORM

This Website operates on Shopify, which provides hosting, order processing, analytics, payment infrastructure, and security services. Shopify processes your information on our behalf and may also independently control certain platform-level or aggregated data. For more details, please review Shopify's Privacy Policy and Privacy Portal.

13. POLICY UPDATES

We may periodically update this Privacy Policy to reflect changes in our practices or legal requirements. Any revisions will be posted on this page with an updated "Last Updated" date. For significant changes, we will provide additional notice as required by applicable law.