Privacy policy

Introduction

This Privacy Policy explains how vintagehollow.shop collects, uses, stores, shares and otherwise processes personal information when individuals visit our website, make a purchase, communicate with us or otherwise interact with our ecommerce services.

We are committed to handling personal information responsibly and transparently.

This policy is intended to reflect applicable UK data-protection requirements, including the UK GDPR and related UK legislation as amended from time to time, including relevant changes introduced by the Data (Use and Access) Act 2025. The ICO confirmed that all data-protection provisions of that Act were in force by 19 June 2026.

For privacy enquiries, contact:

info@vintagehollow.shop

Personal Information We May Collect

Depending on how you interact with vintagehollow.shop, we may collect information including:

• Name;
• Billing information;
• Shipping or delivery information;
• Email address;
• Telephone number when provided during checkout or customer service interactions;
• Order details;
• Products purchased;
• Transaction history;
• Payment-related information;
• Communications with customer service;
• Returns and refund information;
• Fraud-prevention information;
• Internet Protocol address;
• Browser information;
• Device information;
• Cookie and similar-technology data;
• Website interaction information;
• Referral information; and
• Marketing preferences.

Payment-card information may be processed by payment providers rather than being stored directly by vintagehollow.shop.

How We Collect Personal Information

We may collect information:

• Directly from you;
• Automatically when you use our website;
• Through Shopify and ecommerce functionality;
• Through payment processors;
• Through delivery and fulfilment providers;
• Through fraud-prevention or security providers;
• Through analytics providers;
• Through advertising or marketing services where permitted; and
• From other service providers supporting our store.

Why We Use Personal Information

We may process personal information to:

• Operate our ecommerce store;
• Create and manage customer orders;
• Process transactions;
• Verify payments;
• Arrange fulfilment and delivery;
• Send order confirmations;
• Provide shipping information;
• Respond to customer-service enquiries;
• Manage returns and refunds;
• Detect and prevent fraud;
• Protect our website and customers;
• Maintain transaction and business records;
• Comply with applicable legal obligations;
• Resolve disputes;
• Enforce contractual terms;
• Improve website functionality;
• Analyse store performance;
• Personalise website experiences where permitted;
• Provide marketing communications where legally permitted; and
• Establish, exercise or defend legal claims.

Lawful Bases for Processing

Where UK data-protection law requires a lawful basis, the basis may depend on the specific purpose of processing.

Relevant lawful bases may include:

Contract

We may process information where necessary to take steps at your request before entering into a contract or to perform a contract with you.

For example, this may include:

• Processing an order;
• Taking payment;
• Delivering goods; and
• Handling a contractual return.

Legal Obligation

We may process personal information where necessary to comply with legal obligations relating to areas such as tax, accounting, consumer protection, fraud prevention or regulatory requirements.

Legitimate Interests

We may process information where necessary for legitimate business interests, provided those interests are not overridden by applicable individual rights and interests.

Examples may include:

• Protecting our store from fraud;
• Maintaining website security;
• Improving customer service;
• Managing business operations; and
• Establishing or defending legal claims.

Consent

Where consent is legally required, we may rely on consent, including for certain marketing activities or non-essential tracking technologies.

Where processing is based on consent, you may withdraw that consent subject to applicable law.

UK data-protection rules require personal information to be processed lawfully, fairly and transparently.

Shopify

Our online store is operated using Shopify's ecommerce technology.

Shopify may process personal information in connection with providing ecommerce, hosting, checkout, security and related services.

Our use of Shopify does not remove our responsibility to handle customer information in accordance with applicable privacy laws. Shopify states that merchants remain responsible for operating their stores and complying with applicable privacy and data-protection requirements.

Payment Processing

Payments may be processed through Shopify Payments or other payment providers made available through our checkout.

Payment providers may independently collect or process information necessary to:

• Authorise payments;
• Complete transactions;
• Detect fraud;
• Process refunds; and
• Comply with financial or regulatory obligations.

Their processing may also be governed by their own privacy notices.

Service Providers

We may share personal information with service providers where reasonably necessary to operate vintagehollow.shop.

These providers may include organisations supporting:

• Website hosting;
• Ecommerce infrastructure;
• Payments;
• Order fulfilment;
• Shipping;
• Customer service;
• Analytics;
• Marketing;
• Advertising;
• Fraud detection;
• Cybersecurity;
• IT support;
• Professional advice; and
• Business administration.

Service providers are provided with information only as reasonably necessary for the relevant purpose, subject to applicable law.

Legal Disclosures

We may disclose personal information when reasonably necessary to:

• Comply with applicable law;
• Respond to lawful government or regulatory requests;
• Enforce contractual rights;
• Investigate suspected fraud;
• Protect customers;
• Protect the security of our services; or
• Establish, exercise or defend legal claims.

Business Transactions

If all or part of the business associated with vintagehollow.shop is reorganised, transferred, acquired, merged or sold, personal information may form part of that transaction where permitted by law.

Any processing remains subject to applicable data-protection requirements.

International Transfers

Some service providers used to operate an international ecommerce business may process personal information outside the United Kingdom.

Where UK data-protection law requires safeguards for an international transfer, we will seek to use an appropriate lawful transfer mechanism or otherwise ensure that the transfer is legally permitted.

Data Retention

We do not intend to retain personal information indefinitely.

Retention periods may vary according to:

• The purpose for which information was collected;
• The duration of the customer relationship;
• Contractual requirements;
• Accounting requirements;
• Tax requirements;
• Fraud-prevention requirements;
• Legal limitation periods;
• Dispute-resolution needs; and
• Other applicable legal obligations.

Information may be deleted, anonymised or securely retained when appropriate.

Cookies and Similar Technologies

vintagehollow.shop may use cookies and similar technologies for purposes including:

• Essential website functionality;
• Shopping-cart functionality;
• Checkout;
• Authentication;
• Security;
• Remembering preferences;
• Analytics;
• Measuring website performance; and
• Advertising or personalisation where permitted.

Where applicable law requires consent before non-essential cookies or similar technologies are used, appropriate consent mechanisms should be presented to users.

Shopify provides privacy and consent tools that merchants may configure for applicable privacy requirements.

Marketing Communications

Where legally permitted, we may send marketing communications regarding products, offers or store updates.

Where consent is required, marketing communications will be sent on the basis of the required consent or another lawful basis where applicable.

Recipients may unsubscribe using the unsubscribe mechanism provided in relevant electronic marketing communications or by contacting:

info@vintagehollow.shop

Unsubscribing from marketing does not prevent us from sending necessary transactional communications concerning an existing order.

Your Data-Protection Rights

Depending on applicable law and the circumstances, individuals may have rights relating to their personal information, including rights concerning:

• Access;
• Rectification;
• Erasure;
• Restriction;
• Data portability;
• Objection;
• Withdrawal of consent; and
• Certain automated decision-making activities.

These rights may be subject to legal conditions, limitations and exemptions.

The ICO provides guidance regarding UK individual data-protection rights, including data portability and other rights.

To exercise a privacy right, contact:

info@vintagehollow.shop

We may need to verify identity before fulfilling certain requests.

Security

We use reasonable organisational, technical and administrative measures intended to protect personal information against unauthorised access, misuse, loss, alteration or disclosure.

However, no internet-based system can guarantee absolute security.

Customers should protect their own devices, account credentials and passwords where applicable.

Children's Privacy

Our ecommerce services are intended for individuals capable of entering into lawful purchasing arrangements.

We do not intentionally seek to collect personal information from children in circumstances where doing so would be unlawful.

Complaints

If you have concerns about how your personal information is handled, contact us first at:

info@vintagehollow.shop

Individuals may also have the right to complain to the UK Information Commissioner's Office where applicable.

Changes to This Privacy Policy

We may update this Privacy Policy when reasonably necessary because of:

• Changes to our business;
• Changes to our ecommerce services;
• New service providers;
• Technology changes;
• Operational changes; or
• Changes in applicable law.

The updated version will be published on vintagehollow.shop with an updated revision date.

Contact

For privacy-related enquiries:

vintagehollow.shop
Email: info@vintagehollow.shop