Privacy policy
Privacy Policy – Vague Rose
This Privacy Policy describes how Vague Rose (“we”, “our”, or “us”) collects, uses, and discloses your personal information when you visit or make a purchase from shopvaguerose.co.uk (the “Site”), in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER
We are delighted that you have visited our website, shopvaguerose.co.uk, and we appreciate your interest in our products. This Privacy Policy explains how we handle your personal data when you use our website. “Personal data” means any information that can personally identify you.
Controller (Data Controller under the UK GDPR):
Vague Rose
Email: support@shopvaguerose.co.uk
For the purposes of this policy, “we,” “us,” or “our” refers to this entity.
This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries). You can recognize an encrypted connection by the “https://” prefix and the lock icon in your browser.
2. DATA COLLECTION WHEN VISITING OUR WEBSITE
If you browse our website without registering or making a purchase, we only collect essential technical data through server log files to ensure the website functions properly. This includes device information, browser type, IP address (in anonymized form), date/time of access, pages visited, and referring website data. These log files do not contain personally identifiable information and are stored temporarily for website optimization and security.
When you visit our website, we may collect the following data, which is technically necessary to display the website:
(a) The specific web page(s) visited
(b) Date and time of access
(c) Amount of data transmitted in bytes
(d) The source/referring site from which you reached our site
(e) The browser used
(f) The operating system used
(g) The IP address used (where applicable, in anonymized form)
This processing is based on our legitimate interest (Article 6(1)(f) UK GDPR) in ensuring the stability and functionality of our website. We do not combine server log files with other data or use them to identify individuals. However, we reserve the right to review server log files if we become aware of specific indications of unlawful use.
3. COOKIES
We use cookies on various pages of our website to make the visit more appealing and enable certain functions. Cookies are small text files stored on your device.
• Session Cookies: Some cookies are deleted at the end of your browser session (“session cookies”).
• Persistent Cookies: Other cookies remain on your device and enable us or partner companies (third-party cookies) to recognize your browser upon your next visit (“persistent cookies”).
Cookies may process personal data such as IP addresses, browser information, or location data. Where cookies also process personal data, processing may take place (i) under Article 6(1)(b) UK GDPR if necessary for contract performance, or (ii) under Article 6(1)(f) UK GDPR if based on our legitimate interest in ensuring a user-friendly, efficient website.
We may partner with advertising companies that also place cookies on your device when you visit our site (“third-party cookies”). We will inform you if such cookies are used and what data they collect.
Most browsers allow you to configure settings so that you are informed about cookies, accept them only on a case-by-case basis, or disable them entirely. Please note that disabling cookies may limit website functionality. For details on your browser’s cookie management, see its “Help” function.
4. CONTACTING US
If you contact us (e.g., via contact form or email), we collect the personal data you voluntarily provide. This data is used solely to respond to your inquiry or for associated technical administration.
Legal basis: Article 6(1)(f) UK GDPR (our legitimate interest in handling inquiries effectively) or Article 6(1)(b) UK GDPR if your inquiry relates to contract performance.
We delete your data after we have fully addressed your request, provided no legal retention requirements prevent this.
5. DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION
Under Article 6(1)(b) UK GDPR, we collect and process personal data if you provide it for contract performance or when opening a customer account. The data collected is visible on the input form. You may delete your customer account at any time by contacting us. We store and use the data to fulfill the contract. After contract performance or account deletion, your data is restricted from further processing and eventually deleted in line with legal retention obligations, unless you have expressly consented to continued use or we have another lawful basis for retention.
6. USE OF YOUR DATA FOR DIRECT MARKETING
(a) Subscribing to Our Email Newsletter: If you subscribe to our newsletter, we will regularly send you information about our offers. The only mandatory information is your email address; any additional data is voluntary. We use a double opt-in method, sending you a confirmation email to verify your consent under Article 6(1)(a) UK GDPR. We store your IP address and the time/date of subscription to investigate potential misuse. You may unsubscribe at any time via the link in the newsletter or by contacting us. Upon unsubscribing, your email address will be removed from our mailing list unless you have consented to further use.
(b) Sending the Email Newsletter to Existing Customers: If you have provided your email address in connection with a purchase, we reserve the right to send you offers for similar goods or services based on our legitimate interest (Article 6(1)(f) UK GDPR). You can opt out at any time by contacting us or using the unsubscribe link.
7. DATA PROCESSING FOR ORDER HANDLING
To fulfill our contractual obligations, we may disclose your personal data to third parties such as shipping providers or payment service providers, only as needed for order and payment processing. Legal basis: Article 6(1)(b) UK GDPR.
If payment service providers (e.g., PayPal, Stripe) are involved, we transfer your data to them only for payment processing. Please refer to the provider’s privacy policy for information on their data handling.
8. REVIEW/FEEDBACK REMINDERS
If you have given explicit consent (Article 6(1)(a) UK GDPR), we may use your email address to send a one-time reminder to review your purchase. You can withdraw this consent at any time by contacting us.
9. USE OF SOCIAL MEDIA PLUGINS
We use social media plugins for platforms such as Facebook, Instagram, or TikTok, generally implemented so that no data is automatically transmitted to these services. Only if you click a relevant plugin button (e.g., “Share”) does your browser connect directly to that service. For details on how these providers handle your data, please see their respective privacy policies.
10. ONLINE MARKETING AND ADVERTISING
(a) Google Ads / DoubleClick: We use Google Ads (including conversion tracking) and DoubleClick by Google, which place cookies to deliver relevant ads, improve campaign performance reporting, or prevent you from seeing the same ad multiple times. When you click a Google ad, a cookie is placed on your device for conversion tracking. These cookies generally expire after 30 days and are not used to personally identify users. Legal basis: Article 6(1)(f) UK GDPR.
(b) Facebook Ads / Facebook Pixel: With your explicit consent (Article 6(1)(a) UK GDPR), we use the Facebook Pixel to track user actions after they view or click on a Facebook ad. This allows us to measure the effectiveness of ads and optimise them. The data collected is anonymous to us but may be stored and processed by Facebook.
(c) TikTok Ads / TikTok Pixel: We may also use the TikTok Pixel with your explicit consent (Article 6(1)(a) UK GDPR). This code can track your usage of our site after you click on or view a TikTok ad. Data is typically collected in pseudonymised form.
You can prevent tracking by adjusting your browser settings to refuse cookies or by using opt-out options provided by each platform.
11. WEB ANALYSIS SERVICES (E.G. GOOGLE ANALYTICS)
We use Google Analytics by Google LLC. Google Analytics uses cookies to analyse website usage. The information generated, including a truncated IP address, is typically transferred to Google servers. IP anonymisation is active. Legal basis: Article 6(1)(f) UK GDPR.
You can opt out by installing the browser plugin at https://tools.google.com/dlpage/gaoptout.
12. RETARGETING/REMARKETING/RECOMMENDATION ADVERTISING
We may use tools like Google Ads, Facebook Pixel, and TikTok Pixel to provide relevant ads. These tools do not collect personally identifiable information but track anonymised behaviour via cookies.
To opt out:
• Google: https://adssettings.google.com/authenticated
• Facebook: https://www.facebook.com/adpreferences/ad_settings
• TikTok: https://www.tiktok.com/legal/privacy-policy
13. YOUR RIGHTS AS A DATA SUBJECT
Under the UK GDPR, you have the following rights:
• Right to Access (Art. 15)
• Right to Rectification (Art. 16)
• Right to Erasure (Art. 17)
• Right to Restrict Processing (Art. 18)
• Right to Data Portability (Art. 20)
• Right to Withdraw Consent (Art. 7(3))
• Right to Lodge a Complaint with the Information Commissioner’s Office (ICO): https://ico.org.uk
13.1 RIGHT TO OBJECT
If we process your personal data based on legitimate interests (Article 6(1)(f) UK GDPR), you have the right to object at any time for reasons arising from your particular situation. If we use your data for direct marketing, you may object at any time without needing a reason.
14. DURATION OF STORAGE OF PERSONAL DATA
We retain personal data only as long as necessary to fulfil the purposes for which it was collected or as required by applicable UK laws. After these periods, the data is deleted unless continued processing is necessary for legal claims or you have consented to extended retention.
15. CONTACT US
If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact:
Vague Rose
Email: support@shopvaguerose.co.uk
Website: https://shopvaguerose.co.uk
We reserve the right to amend this Privacy Policy at any time in compliance with applicable UK laws. Any changes will be posted on this page with an updated “Last Updated” date.
