Privacy Policy

Introduction

Vamzn UK ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website https://vamzn.co.uk, use our services, or make a purchase from us.

This policy is issued in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We are the data controller responsible for your personal data.

By using our website and services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

Data Controller and Data Protection Officer

Vamzn UK is the data controller for the purposes of UK data protection legislation.

Information We Collect

We collect and process the following categories of personal data:

Personal Information You Provide

• Identity Data: First name, last name, username, title, date of birth
• Contact Data: Email address, telephone number, billing address, delivery address
• Financial Data: Payment card details, bank account information
• Transaction Data: Details about payments, purchases, and orders
• Profile Data: Username, password, purchase history, preferences, feedback, survey responses
• Marketing Data: Your preferences for receiving marketing communications
• Communications Data: Customer service correspondence, reviews, comments

Information Collected Automatically

• Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system and platform
• Usage Data: Information about how you use our website, products and services
• Location Data: General geographic location based on IP address
• Cookie Data: Information collected through cookies and similar technologies

Special Categories of Personal Data

We do not collect any special categories of personal data about you (this includes details about your race, ethnicity, religious beliefs, sexual orientation, political opinions, trade union membership, health information, or genetic and biometric data). We also do not collect any information about criminal convictions and offences.

Legal Basis for Processing

Under UK GDPR, we will only process your personal data when the law allows us to. We rely on the following legal bases:

How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To register you as a new customer and manage your account
• To process and deliver your orders, including managing payments and collecting money owed
• To manage our relationship with you, including notifying you about changes to our terms or privacy policy
• To provide customer service and support
• To send you order confirmations, shipping updates, and delivery notifications
• To administer and protect our business and website (including troubleshooting, data analysis, testing, security)
• To deliver relevant website content and advertisements to you and measure their effectiveness
• To use data analytics to improve our website, products, services, marketing, customer relationships and experiences
• To make suggestions and recommendations to you about goods or services that may be of interest to you
• To comply with legal and regulatory requirements

Marketing Communications

We will only send you marketing communications if you have given us your consent or where we have a legitimate interest to do so (for existing customers).

You have the right to opt out of receiving marketing communications at any time by:

• Clicking the unsubscribe link in any marketing email we send you
• Updating your preferences in your account settings
• Contacting us directly using the details provided below

Please note that opting out of marketing communications will not affect transactional emails such as order confirmations and shipping notifications.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to distinguish you from other users and provide you with a good experience. This also helps us improve our website.

You can manage your cookie preferences through our cookie consent tool or your browser settings. Please note that blocking some types of cookies may impact your experience on our website.

Third-Party Services and Integrations

We work with trusted third-party service providers who process personal data on our behalf. We have contracts in place with our data processors to ensure they protect your data to the same standards we do.

Analytics and Advertising

• Google Analytics: We use Google Analytics to analyze website traffic and user behavior. Google may use cookies to collect information. You can opt-out by installing the Google Analytics Opt-out Browser Add-on.
• Facebook Pixel: We use Facebook Pixel to measure advertising effectiveness and deliver targeted ads. Facebook may collect information about your activities on our website.
• Google Ads: We use Google Ads for advertising and remarketing. Google may use cookies to show you relevant ads based on your browsing history.
• Other Analytics Tools: We may use additional analytics services to understand customer behavior and improve our services.

Payment Processing

We use Shopify Payments and other secure payment processors to handle transactions. Your payment information is encrypted and processed securely in compliance with PCI-DSS standards. We do not store complete credit card information on our servers.

Shipping and Fulfillment

We share necessary information with shipping carriers and fulfillment partners to deliver your orders. This includes your name, delivery address, and contact information.

Email Marketing Services

We may use email marketing platforms to send you promotional emails, newsletters, and updates. These services process your email address and engagement data on our behalf.

Data Sharing and Disclosure

We may share your personal data with the following parties:

• Service Providers: Third-party vendors who perform services on our behalf (payment processing, delivery, marketing, analytics)
• Professional Advisers: Lawyers, accountants, auditors, and insurers who provide professional services
• HM Revenue & Customs, regulators and other authorities: Who require reporting of processing activities in certain circumstances
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets
• Legal Requirements: When required by law or to protect our rights, property, and safety

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.

We do not sell your personal data to third parties.

International Data Transfers

Some of our external third-party service providers are based outside the United Kingdom, which means their processing of your personal data may involve a transfer of data outside the UK.

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by implementing at least one of the following safeguards:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data
• We may use specific contracts approved for use in the UK which give personal data the same protection it has in the UK (UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses)
• Where we use providers based in the US, we may transfer data to them if they are part of the UK Extension to the EU-US Data Privacy Framework

Data Security

We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. These measures include:

• SSL/TLS encryption for data transmission
• Secure servers with firewall protection
• Regular security assessments and penetration testing
• Access controls and authentication procedures
• Employee training on data protection and security
• Incident response and breach notification procedures
• Regular backups and disaster recovery plans

We have put in place procedures to deal with any suspected personal data breach and will notify you and the Information Commissioner's Office (ICO) of a breach where we are legally required to do so.

Data Retention

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

Typical retention periods include:

• Transaction records: 6 years from the end of the financial year (for tax and accounting purposes)
• Marketing data: Until you withdraw consent or we no longer have a legitimate interest
• Customer accounts: Until account closure plus 6 years
• CCTV footage: 30 days (if applicable)

When we no longer need your personal data, we will securely delete or anonymize it.

Your Legal Rights Under UK GDPR

Under UK data protection laws, you have the following rights:

• Right to be informed: You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data
• Right of access: You have the right to obtain a copy of your personal data and information about how we process it
• Right to rectification: You have the right to have inaccurate personal data corrected or completed if it is incomplete
• Right to erasure (right to be forgotten): You have the right to request deletion of your personal data in certain circumstances
• Right to restrict processing: You have the right to request that we suspend processing of your personal data in certain circumstances
• Right to data portability: You have the right to receive your personal data in a structured, commonly used and machine-readable format
• Right to object: You have the right to object to processing of your personal data in certain circumstances, including for direct marketing
• Rights related to automated decision-making and profiling: You have the right not to be subject to decisions based solely on automated processing

Right to Complain

You have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.

Information Commissioner's Office (ICO):
Website: www.ico.org.uk
Telephone: 0303 123 1113
Address: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, appreciate the chance to deal with your concerns before you approach the ICO, so please contact us in the first instance.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us immediately, and we will take steps to delete such information from our systems.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date at the top of this policy
• Sending you an email notification (for significant changes)

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after any changes indicates your acceptance of the updated policy.