Privacy Policy

This policy is a working draft and should be reviewed by a qualified adviser before launch.

Last updated: [TBC]

Who we are

Vivienne Rose Wallpaper & Interiors is an independent, family-run wallpaper and interiors retailer, established in 2017. We run a physical shop and an online store.

For the purposes of UK data protection law, we are the data controller of the personal data we hold about you.

You can reach us at:

• Vivienne Rose Wallpaper & Interiors, 3 Dyer Lane, Beverley, HU17 8AE
• Telephone: 01482 868939
• Through the contact form on our Contact page
• Company registration number: [TBC]
• VAT number: [TBC]

What personal data we collect

Depending on how you use our website and shop, we may collect:

• Order information: your name, billing and delivery address, email address, telephone number and the details of what you have bought.
• Account information: if you create an account, the details you give us such as your name, email address and saved addresses.
• Contact-form messages: your name, email address and the content of any message you send us.
• Delivery details: the address and contact details needed to get your order to you.
• Payment information: your card payment is handled by our payment processor (Stripe). We do not store your full card details on our systems.
• Technical and usage data: information collected through cookies and similar technologies, such as your device, browser and how you use the site. See our Cookie Policy for more.

How and why we use your data

We use your personal data to:

• process and fulfil your orders, take payment and arrange delivery;
• manage your account, if you have one;
• respond to enquiries you send us through the contact form, by email or by phone;
• keep records for accounting, tax and legal purposes;
• keep the website secure and working properly;
• send you marketing about our products, where you have agreed to receive it.

Our lawful bases

Under UK GDPR we rely on the following lawful bases:

• Contract: to process and deliver the orders you place with us and to manage your account.
• Legitimate interests: to run and improve our business, keep the site secure and respond to your enquiries, where this is not overridden by your rights.
• Legal obligation: to keep records we are required to keep, for example for tax purposes.
• Consent: for optional marketing and for non-essential cookies. You can withdraw consent at any time.

Who we share your data with

We share personal data only where we need to, with:

• Stripe, our payment processor, to take and secure your payment;
• our email provider (Mailgun), to send order confirmations, service emails and replies to your enquiries;
• our hosting and database providers (Supabase and Vercel), which store and run the website and its data;
• couriers and suppliers, to arrange delivery of your order. As our orders are drop-shipped, your delivery details may be passed to the supplier dispatching your goods;
• professional advisers, and authorities or regulators, where we are required to do so by law.

We do not sell your personal data to anyone.

International transfers

Some of our service providers may process data outside the UK. Where that happens, we take steps to make sure your data is protected by an appropriate safeguard recognised under UK data protection law, such as UK adequacy regulations or standard contractual clauses. [TBC: confirm with adviser which providers transfer data internationally and the safeguards relied upon.]

How long we keep your data

We keep your personal data only for as long as we need it for the purposes set out above, or for as long as the law requires. Order and accounting records are typically kept for at least six years to meet tax and legal requirements. Contact-form messages and account data are kept for as long as they remain useful to us, after which they are deleted or anonymised. [TBC: confirm specific retention periods.]

Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal data we hold about you (access);
• ask us to correct data that is wrong or incomplete (rectification);
• ask us to delete your data in certain circumstances (erasure);
• object to, or ask us to restrict, how we use your data;
• ask us to transfer your data to another provider (portability);
• withdraw your consent at any time, where we rely on consent.

To exercise any of these rights, please get in touch using the details above. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we would ask you to contact us first so we can try to help.

Cookies

We use cookies and similar technologies on our website. Non-essential cookies are only set with your consent. For full details, please read our Cookie Policy.

Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated shown at the top.

How to contact us

If you have any questions about this policy or about how we handle your personal data, please contact us at 3 Dyer Lane, Beverley, HU17 8AE, by phone on 01482 868939, or through our Contact page.