1. Who We Are

Vaylenza is a UK-based eCommerce business operating as the data controller under UK data protection law.

If you have questions about how we process your personal data, please contact us using the details in Section 13.

2. Information We Collect

a) Information You Provide Directly:

• Full name
• Billing and shipping address
• Email address
• Phone number
• Order details

b) Information Collected Automatically:

• IP address
• Browser type and version
• Device information
• Website usage data
• Cookies and similar technologies

3. How We Use Your Personal Data

We process your personal data under the lawful bases provided by UK GDPR, including:

• Contractual necessity: To process and deliver your orders.
• Legal obligation: For accounting, tax, and regulatory compliance.
• Legitimate interests: Fraud prevention, website improvement, and business operations.
• Consent: For marketing communications where you have opted in.

We use your information to:

• Process payments and fulfil orders
• Provide customer support
• Prevent fraud and enhance security
• Improve website functionality
• Send promotional communications (only where consent is provided)

4. Payment Processing

Payments are processed securely through trusted third-party providers. We do not store full credit or debit card details on our systems.

5. Sharing of Information

We may share your personal data with trusted service providers where necessary, including:

• Payment processors
• Shipping and delivery partners
• IT and hosting providers
• Email and marketing platforms

We do not sell your personal data to third parties.

6. International Data Transfers

Some service providers may process data outside the United Kingdom. Where this occurs, we ensure appropriate safeguards are implemented in accordance with UK GDPR requirements.

7. Data Retention

We retain personal data only for as long as necessary to:

• Fulfil contractual obligations
• Comply with legal or tax requirements
• Resolve disputes
• Maintain business records

8. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Request correction of inaccurate information
• Request erasure of your data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent (for marketing communications)

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to enhance user experience, analyse website traffic, and improve functionality.

Some cookies are essential for website operation, while others may be used for analytics or marketing purposes.

Where required by law, we obtain your consent before placing non-essential cookies.

For more information, please see our Cookie Policy.

10. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction.

11. Children's Privacy

Our website is not intended for children under the age of 13. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy periodically. The most current version will always be available on this page.