Privacy Policy

1. Who we are

For the purposes of UK data protection law, the data controller is Vantiros, an independent UK online retailer operated by Maxime Claude René MASSÉ, with a registered address at Unit 5 Southgate, Morecambe, LA3 3PB, United Kingdom. You can contact us at contact@vantiros.shop.

2. Information we collect

We collect personal data that you provide directly to us, and limited technical data automatically when you use our website:

• Customer information — name, billing and delivery address, and email address;
• Order information — the products you have purchased, order value and payment method used (we do not store full card details);
• Communications — messages you send through our contact form or by email;
• Technical data — IP address, browser type, device type, referring URL and pages visited;
• Marketing preferences — your subscription status and preferences for our newsletter, where applicable.

3. How we use your data

We use your personal data to:

• Process and dispatch your orders, including delivery and after-sales support;
• Respond to your enquiries and provide customer service;
• Send you order confirmations, dispatch notifications and other transactional emails;
• Send marketing communications, where you have asked us to;
• Improve our website, services and product range through aggregated analytics;
• Detect and prevent fraud, and comply with our legal obligations.

4. Lawful basis for processing

• Performance of a contract — to process orders and provide customer service;
• Legitimate interests — to run our business efficiently, improve our services and prevent fraud;
• Consent — for marketing communications and non-essential cookies;
• Legal obligation — to comply with accounting, tax and consumer-protection laws.

5. Cookies and analytics

We use a small number of essential cookies required for the site to function and, with your consent, analytics cookies to understand how visitors use the site. Full details are set out in our Cookie Policy.

6. Sharing your data

We share personal data only with carefully selected service providers who help us run our business:

• Payment processing — Stripe Payments UK, Ltd.;
• Order fulfilment and shipping — our UK suppliers and courier partners;
• Email and customer service — our hosting and email service providers;
• Analytics — privacy-respecting analytics providers, where you have consented.

We never sell your personal data, and we never share it for third-party marketing purposes.

7. Data storage and protection

Personal data is stored on secure servers within the United Kingdom and the European Economic Area. Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or Standard Contractual Clauses approved by the European Commission.

We use a combination of technical and organisational measures to protect your data, including SSL encryption, access controls, encrypted backups and regular security reviews.

8. Data retention

We retain personal data only for as long as necessary for the purposes set out in this policy, or to comply with our legal and accounting obligations. Order and invoice records are retained for at least six years in line with UK tax law. Newsletter records are retained until you unsubscribe.

9. Your rights

Under the UK GDPR, you have the right to:

• Request a copy of the personal data we hold about you;
• Ask us to correct inaccurate or incomplete data;
• Ask us to delete your personal data, where there is no overriding lawful reason to retain it;
• Object to or restrict our processing of your data;
• Withdraw your consent at any time, where consent is the lawful basis for processing;
• Request the transfer of your data to another provider in a structured, machine-readable format.

To exercise any of these rights, please contact us at contact@vantiros.shop. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. Children

Our website is not intended for use by children under 16, and we do not knowingly collect personal data from children.

11. Updates to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page indicates when it was most recently changed.

12. Contact

Vantiros · Unit 5 Southgate, Morecambe, LA3 3PB, United Kingdom · contact@vantiros.shop.