Privacy Policy

Who We Are

This Privacy Policy applies to VKW LTD, operating the website VKWLTD.shop (collectively, "we", "us", or "our"). We are the data controller responsible for your personal information.

Information We Collect

We collect personal data that you provide directly to us, as well as information gathered automatically when you interact with our website.

Information You Provide

• Name, billing and shipping addresses
• Email address and telephone number
• Payment information (processed securely by our payment providers — we do not store card details)
• Order history and product preferences
• Correspondence when you contact our customer care team

Information Collected Automatically

• IP address, browser type, and device information
• Pages visited, time spent, and referring website
• Cookies and similar tracking technologies

How We Use Your Data

We use your personal information only for legitimate purposes related to operating our business and fulfilling our obligations to you:

• To process and deliver your orders
• To manage returns, refunds, and customer enquiries
• To send order confirmations and shipping updates
• To send marketing communications (only with your consent)
• To improve our website, products, and services
• To detect and prevent fraud or unauthorised activity
• To comply with our legal and regulatory obligations

Legal Basis for Processing

Under UK GDPR, we process your personal data on one or more of the following legal bases:

• Contract: Processing necessary to fulfil our sales agreement with you
• Legitimate interests: Operating and improving our business in a manner you would reasonably expect
• Consent: Where you have explicitly agreed, such as for marketing emails
• Legal obligation: Where required by law, such as tax and accounting records

Sharing Your Information

We do not sell your personal data. We only share information with trusted third parties who help us operate our business, and only to the extent necessary:

• Payment processors to complete secure transactions
• Shipping and courier services to deliver your orders
• Website and email service providers
• Analytics providers to understand how our website is used
• Legal or regulatory authorities where required by law

All third parties are contractually required to protect your data and use it only for the purposes we specify.

Cookies

Our website uses cookies to enhance your browsing experience, remember your preferences, and analyse site traffic. You can control cookies through your browser settings or our cookie banner. Please note that disabling certain cookies may affect the functionality of the site.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Order records are typically kept for a minimum of six years to comply with UK tax law. Marketing data is held until you withdraw your consent.

Your Rights

Under UK data protection law, you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — request deletion of your data in certain circumstances
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a transferable format
• Objection — object to certain types of processing, including direct marketing
• Withdraw consent — at any time where processing is based on consent

To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All payment transactions are encrypted using industry-standard SSL technology. However, no method of transmission over the internet can be guaranteed as entirely secure.

International Transfers

Where your data is transferred outside the United Kingdom, we ensure it is protected by appropriate safeguards, such as Standard Contractual Clauses or transfers to countries with an adequacy decision recognised by the UK.

Children's Privacy

Our website and products are not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will promptly remove it.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most recent version will always be available on this page, with the "Last Updated" date revised accordingly.