Legal Document
Privacy Policy
Last updated: 20 May 2026 · Governed by UK GDPR & Data Protection Act 2018
1. Who we are
VividLook (vividlook.co.uk) is the data controller for personal data collected through this website. You can contact us at support@vividlook.co.uk.
2. What data we collect
| Category | Examples | Why we collect it |
|---|---|---|
| Identity | Name, email address | Account creation, order processing |
| Contact | Delivery address, phone number | Shipping your order, customer service |
| Transaction | Order history, payment status | Fulfilling and managing your orders |
| Technical | IP address, browser type, pages visited | Security, analytics, improving the site |
| Marketing | Email preferences | Sending promotions (only with your consent) |
We do not store payment card details — these are handled directly by Stripe (PCI-DSS compliant).
3. Legal basis for processing
- Contract performance — processing your order and managing your account
- Legitimate interests — fraud prevention, site security, analytics
- Consent — marketing emails (you can withdraw at any time)
- Legal obligation — tax records, responding to legal requests
4. How we use your data
- Processing and fulfilling your orders
- Sending order confirmation and delivery updates
- Providing customer support
- Personalising your shopping experience
- Sending marketing emails (only where you have opted in)
- Improving our website via aggregated analytics (Google Analytics)
- Complying with legal and regulatory obligations
5. Who we share data with
We share data only where necessary with:
- Stripe — payment processing
- Delivery carriers — to ship your order
- Avasam (our dropship supplier) — to fulfil your order
- Google Analytics — anonymous site usage analytics
We do not sell your personal data to third parties.
6. How long we keep your data
We retain order and account data for 6 years to comply with UK tax law (HMRC requirements). Marketing preferences are deleted when you unsubscribe. You may request deletion of your account data at any time; we will comply within 30 days except where retention is legally required.
7. Your rights
Under UK GDPR you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion ("right to be forgotten")
- Restriction — limit how we process your data
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — opt out of marketing at any time
To exercise any right, email support@vividlook.co.uk. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
8. Cookies
We use essential cookies (session, cart, login state) and analytics cookies (Google Analytics — anonymised). You can manage cookie preferences in your browser settings. See our Cookie Policy for full details.
9. Changes to this policy
We will update this page when our practices change and notify registered customers by email for material changes. The "last updated" date at the top reflects the most recent revision.