Privacy Policy

Draft privacy policy — review and complete all business and service-provider details before launch.

Who we are

Vaultside Cards is a trading name of [LEGAL NAME] ([SOLE TRADER OR LIMITED COMPANY]), based at [BUSINESS ADDRESS]. For data-protection purposes, the data controller is [LEGAL NAME]. You can contact us at [CONFIRMED CONTACT EMAIL] or [PHONE NUMBER].

Contact forms

When you use a contact or trade-enquiry form we intend to collect your name, email address, telephone number where given, company details where relevant and the content of your message, so that we can respond. Our forms are not yet connected to storage or email delivery, so submissions are currently not received or retained.

Customer accounts

Customer accounts are not currently offered. If accounts are introduced, we will collect account credentials and contact details and will update this policy before launch.

Order information

When ordering becomes available we intend to collect your name, billing and delivery address, email address, telephone number and order details in order to perform the contract with you and meet our legal record-keeping duties.

Payment data

No payment provider is connected to this website. When one is added, card details will be handled by that provider; we do not intend to store full card numbers ourselves. This policy will name the provider before payments go live.

Newsletter subscriptions

If you join our mailing list we intend to use your email address to send new-release and availability updates on the basis of your consent, which you may withdraw at any time. Newsletter software is not yet connected, so addresses entered on the site are currently not stored or used.

Cookies

This website currently uses only cookies and similar storage that are strictly necessary to make the site work. No advertising or non-essential tracking cookies are in use. If non-essential cookies are introduced, a cookie-consent mechanism will be added and you will be asked for consent before they are set.

Analytics

No analytics service is currently active on this website. If analytics is introduced, it will be described here and, where required, only enabled after consent.

Service providers

• Website hosting provider: [HOSTING PROVIDER]
• Payment processor: [PAYMENT PROVIDER, ONCE CONNECTED]
• Delivery providers: [CARRIERS, ONCE CONFIRMED]
• Email or newsletter provider: [PROVIDER, ONCE CONNECTED]
• Form storage or backend: [PROVIDER, ONCE CONNECTED]

Lawful bases

• Contract: processing orders, delivery and returns.
• Legitimate interests: responding to enquiries, fraud prevention, site security.
• Consent: marketing emails and any non-essential cookies.
• Legal obligation: tax, accounting and consumer-law record keeping.

Data retention

We intend to keep enquiry correspondence for [ENQUIRY RETENTION PERIOD], order and tax records for the period required by UK law (generally six years), and marketing preferences until you withdraw consent.

Data security

We intend to use encrypted connections (HTTPS), access controls, strong authentication and reputable providers, and to limit access to personal data to those who need it.

Data sharing

We do not sell personal data. We intend to share data only with the service providers listed above, professional advisers, and authorities where legally required.

International transfers

Where a provider processes data outside the UK, we will rely on an appropriate safeguard such as UK adequacy regulations or the International Data Transfer Agreement or Addendum. Providers and locations will be confirmed here as they are connected.

Your UK GDPR rights

• Access to your personal data
• Rectification of inaccurate data
• Erasure where applicable
• Restriction of processing
• Data portability
• Objection to processing based on legitimate interests
• Withdrawal of consent at any time

To exercise any right, contact us at [CONFIRMED CONTACT EMAIL].

Complaints

Please contact us first so we can try to resolve the issue. You also have the right to complain to the Information Commissioner’s Office (ICO), Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, telephone 0303 123 1113, ico.org.uk.

Updates to this policy

We will update this policy as services are connected and the business develops. The current version is a pre-launch draft and has not been legally reviewed.