Privacy Policy

Last updated: 22 October 2026

This privacy policy explains how Vayden ("we", "us") collects and uses personal data when you visit vayden.shop or buy from us. We process personal data in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. The data controller is Vayden, 3 Queen Victoria Street, Blackburn, BB2 2QG, United Kingdom, e-mail contact@vayden.shop, phone +44 7529 757664.

1. Data we collect

Order data: name, billing and delivery address, e-mail address, phone number (optional), the products you buy and your order history.
Payment data: payments are processed by Stripe; we receive only the payment status, card type and the last four digits - never your full card number.
Customer account: if you create an account, your login details and saved addresses.
Enquiries: the details you send us by e-mail, phone or our contact form (name, e-mail, order number, subject, message).
Technical data: IP address, browser type, pages visited and the time of your visit, stored in our server logs for security.
Cookies: see section 4 and our Cookie Policy.

2. Why we use your data and our legal basis

To process, deliver and support your order, handle returns and refunds - performance of a contract (Art. 6(1)(b) UK GDPR).
To answer your enquiries - our legitimate interests in customer service (Art. 6(1)(f)) or steps before a contract.
To keep accounting and tax records - legal obligation (Art. 6(1)(c)).
To protect our shop against fraud and misuse - legitimate interests (Art. 6(1)(f)).
For optional cookies - your consent (Art. 6(1)(a)), which you can withdraw at any time.

We do not send marketing e-mails unless you have asked to receive them, and we never sell your personal data.

3. Who we share data with

Royal Mail Group Ltd and DPD Group UK Ltd - name, delivery address, e-mail and phone number to deliver your parcel and send tracking updates.
Stripe Payments Europe Ltd / Stripe Payments UK Ltd - payment processing and fraud prevention.
Our web hosting provider - hosts the website and its database under a data processing agreement.
Authorities, only where we are legally required to.

Where a provider processes data outside the UK, we rely on UK adequacy regulations or the International Data Transfer Agreement / UK Addendum to the EU Standard Contractual Clauses.

4. Cookies and consent

We use a cookie banner (Complianz). Strictly necessary cookies (shopping basket, checkout, login, security and your cookie choice) are always active. Preferences, statistics and marketing cookies are only set if you consent in the banner. You can change your choice at any time via "Cookie settings" in the footer. Details are in our Cookie Policy.

5. How long we keep your data

Order and invoice data are kept for 6 years after the end of the financial year, as required by HMRC. Enquiries are deleted 2 years after the last contact unless they relate to an order. Customer accounts are kept until you delete them or ask us to. Server logs are deleted after 30 days.

6. Your rights

Under the UK GDPR you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, e-mail us at contact@vayden.shop; we reply within one month.

You also have the right to complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, ico.org.uk, phone 0303 123 1113.

7. Security

Our website is served over an encrypted HTTPS connection. Access to customer data is limited to the people who need it to handle your order.

8. Children

Our shop is intended for adults. We do not knowingly collect data from children under 16.

9. Changes to this policy

We may update this privacy policy when our services or the law change. The current version is always on this page, with the date of the last update at the top.