Privacy policy
1. Overview
Welcome to Vesterity.
Vesterity operates the website www.vesterity.co.uk and provides an online shopping experience specialising in preowned designer, vintage, archive, runway, deadstock and limited-edition fashion.
Our store is powered by Shopify, which enables us to provide our products and services.
This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website, purchase products, create an account, communicate with us or otherwise use our services.
We are committed to protecting your privacy and handling your personal information in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Where applicable, we also respect the data protection rights of customers in other countries.
Please read this Privacy Policy carefully.
2. Personal Information We Collect
Depending on how you interact with our website, we may collect the following categories of personal information.
Contact Information
Your name, email address, telephone number, billing address and delivery address.
Order and Transaction Information
Products purchased, order history, payment confirmations, delivery information, returns, refunds and related transaction records.
Payment Information
Payment information necessary to process transactions through Shopify and supported payment providers.
Payments are processed by authorised payment providers. We do not intentionally store complete payment card details on our own systems.
Account Information
Account details, login credentials, preferences, saved addresses and other information associated with your customer account.
Communications
Information you provide when contacting us through our Contact Us form, email or other communication channels.
Device and Usage Information
IP address, browser type, device information, website activity, pages viewed, referral sources and other technical information collected through cookies and similar technologies.
Marketing Preferences
Your preferences regarding promotional emails, advertising and other marketing communications.
3. How We Collect Personal Information
We may collect personal information:
-
Directly from you when you place an order, create an account, contact us or provide information through our website.
-
Automatically when you browse our website, including through cookies and similar technologies.
-
From Shopify and other service providers that support our online store.
-
From payment providers, delivery companies and other relevant third parties.
-
From marketing and advertising partners where applicable and permitted by law.
4. How We Use Your Personal Information
We use personal information for the following purposes.
Processing and Fulfilling Orders
To process payments, confirm purchases, prepare orders, arrange delivery, provide tracking information and manage returns or refunds.
Customer Service
To respond to enquiries, resolve problems, provide assistance and communicate about orders or products.
Website Operation and Improvement
To operate our website, maintain customer accounts, improve website functionality and understand how customers interact with our services.
Security and Fraud Prevention
To detect, investigate and prevent fraudulent transactions, unauthorised access and other potentially harmful activity.
Marketing and Advertising
Where permitted by law, to send promotional communications, provide relevant advertising and inform customers about products or offers.
Legal and Regulatory Compliance
To comply with applicable laws, maintain required business records, respond to lawful requests and protect our legal rights.
5. Lawful Bases for Processing Personal Information
Where UK GDPR or equivalent legislation applies, we process personal information using an appropriate lawful basis.
Performance of a Contract
Where processing is necessary to fulfil an order, arrange delivery, process a return or provide a service requested by you.
Legal Obligations
Where processing is necessary to comply with applicable tax, accounting, consumer protection or other legal requirements.
Legitimate Interests
Where processing is necessary for legitimate business purposes, such as fraud prevention, website security, customer service and business improvement, provided those interests are not overridden by your rights and freedoms.
Consent
Where consent is required, including for certain marketing activities or non-essential cookies.
You may withdraw consent at any time where consent is the lawful basis for processing.
Withdrawal does not affect processing carried out lawfully before consent was withdrawn.
6. Marketing Communications
We may send promotional emails about Vesterity products, new arrivals, special collections or other relevant updates where permitted by applicable law.
You can unsubscribe from marketing emails at any time using the unsubscribe link provided in the message.
You may also contact us to update your communication preferences.
Unsubscribing from marketing will not prevent essential communications relating to orders, deliveries, returns or account security.
We may use advertising services and website analytics to understand customer interests and improve our marketing, subject to applicable privacy and cookie requirements.
7. Cookies and Similar Technologies
Our website uses cookies and similar technologies to support website functionality and improve the shopping experience.
These may include:
-
Essential cookies required for shopping baskets, checkout, account access and website security.
-
Analytics cookies that help us understand website performance and visitor activity.
-
Preference cookies that remember settings and choices.
-
Advertising cookies that may be used to provide relevant marketing, where enabled.
Where required by law, we will request consent before placing non-essential cookies or using similar tracking technologies.
You can manage applicable cookie preferences through the privacy or cookie controls available on our website.
You may also adjust your browser settings, although disabling certain cookies may affect website functionality.
8. How We Share Personal Information
We may share personal information with trusted third parties where necessary to operate our business.
These may include:
Shopify
Our ecommerce platform provider, which supports our website, customer accounts, checkout and related services.
Payment Providers
To securely process transactions and manage payment-related activities.
Delivery and Fulfilment Providers
To arrange shipping, delivery, tracking and returns.
Technology and Service Providers
To support website hosting, security, analytics, customer service and other business operations.
Marketing and Advertising Partners
Where relevant and permitted by applicable law, to support advertising and marketing activities.
Professional Advisers and Authorities
Where necessary for accounting, legal compliance, regulatory obligations or legitimate legal proceedings.
We do not sell customer contact lists to third parties.
Certain advertising-related disclosures may nevertheless be classified as a "sale" or "sharing" of personal information under some privacy laws. Where applicable, customers can exercise the relevant opt-out rights.
9. Relationship with Shopify
Our online store is hosted by Shopify.
Shopify collects and processes certain personal information relating to customers' access to and use of our website.
Information provided through our store may be shared with Shopify and service providers located in countries outside the customer's country of residence.
Shopify may also process information to support enhanced ecommerce services, fraud prevention, analytics and other platform features.
For certain enhanced services, Shopify may act as an independent data controller and be responsible for responding to relevant privacy requests.
For further information, please review the Shopify Consumer Privacy Policy.
You may also visit the Shopify Privacy Portal to learn more about Shopify's processing of personal information and available privacy rights.
10. International Transfers of Personal Information
As Vesterity accepts international orders and uses third-party service providers, personal information may be transferred to, stored or processed in countries outside the United Kingdom.
Where UK data protection law requires safeguards for international transfers, we will rely on appropriate mechanisms, such as:
-
UK adequacy regulations.
-
The UK International Data Transfer Agreement.
-
The UK Addendum to the European Commission's Standard Contractual Clauses.
-
Other lawful transfer mechanisms where applicable.
Where required, we will take reasonable steps to ensure that transferred information receives appropriate protection.
11. Data Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Our ecommerce services are supported by Shopify and other providers that maintain security measures appropriate to their services.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
Customers are encouraged to protect their account credentials and avoid sharing sensitive information through unsecured communication channels.
12. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including fulfilling orders, providing customer support, complying with legal obligations, resolving disputes and protecting our legitimate interests.
Certain transaction and accounting records may need to be retained for several years to comply with UK legal and tax obligations.
Where information is no longer required, we will delete, anonymise or otherwise securely dispose of it, subject to applicable legal requirements.
Retention periods may vary depending on the type of information and the reason it was collected.
13. Your Privacy Rights
Depending on your location and applicable law, you may have rights concerning your personal information.
These may include:
Right of Access
To request confirmation of whether we process your personal information and obtain a copy of information held about you.
Right to Rectification
To request correction of inaccurate or incomplete personal information.
Right to Erasure
To request deletion of personal information in circumstances where the law provides this right.
Right to Restrict Processing
To request restrictions on certain uses of your information.
Right to Object
To object to processing based on legitimate interests or for direct marketing purposes.
Right to Data Portability
To request certain personal information in a structured, commonly used and machine-readable format where applicable.
Right to Withdraw Consent
To withdraw consent where processing relies on consent.
You may exercise these rights by contacting us using the details at the end of this policy.
We may need to verify your identity before responding to certain requests.
We will respond within the timeframes required by applicable law.
14. International Privacy Rights and Advertising Choices
Customers in certain countries or regions may have additional privacy rights under local legislation.
These may include rights to opt out of certain targeted advertising activities or disclosures of personal information.
Where applicable, you may use our Data Sharing Opt-Out page.
Where required by applicable law and supported by our website configuration, we recognise relevant privacy preference signals, including Global Privacy Control.
For further information, visit Global Privacy Control.
The availability of specific privacy controls may depend on your location and the services enabled on our website.
15. Children's Privacy
Our website is intended for general retail customers and is not specifically directed at children.
We do not knowingly collect personal information from children in circumstances prohibited by applicable law.
If you believe a child has provided personal information to us without appropriate permission, please contact us so we can investigate and take any necessary action.
We do not knowingly sell or share the personal information of individuals under 16 in circumstances prohibited by applicable law.
16. Third-Party Websites and Links
Our website may contain links to external websites, social media platforms or other services operated by third parties.
These websites have their own privacy policies and practices.
We recommend reviewing their privacy information before providing personal information.
We are not responsible for the independent privacy practices of third-party websites.
17. Complaints
If you have concerns about how Vesterity collects, uses or protects your personal information, please contact us first so we can investigate.
You also have the right to raise a complaint with the UK Information Commissioner's Office (ICO).
Information Commissioner's Office
Website: www.ico.org.uk
Customers outside the UK may also have the right to contact their relevant local data protection supervisory authority.
18. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our business, website, services, legal obligations or data processing practices.
The latest version will be published on this page with an updated revision date.
Where required by law, we will provide additional notice of significant changes.
19. Contact Information
For questions about this Privacy Policy, personal information or requests to exercise your privacy rights, please contact us.
Customer Service Email
customerservice@vesterity.co.uk
Contact Form
Business Correspondence Address
Vesterity
Lytchett House
13 Freeland Park
Wareham Road
Poole
Dorset
BH16 6FA
United Kingdom