Privacy policy

1. Introduction & Data Controller

At Vumra, we are committed to protecting the privacy and security of our visitors and customers. This Privacy Policy describes how your personal information is collected, used, and shared when you visit or purchase from vumra.com (the "Site").

vumra.com is owned and operated by VUMRA COMMERCE LTD (Company No. 16707665), a company registered in England and Wales. VUMRA COMMERCE LTD is the Data Controller responsible for your personal information under the UK General Data Protection Regulation (UK-GDPR) and the Data Protection Act 2018.

2. Personal Information We Collect

When you interact with our Site, we collect personal information across the following categories:

Automatically Collected Technical Data: When you visit the Site, we automatically collect certain information about your device, including your web browser type, IP address, time zone, and details about some of the cookies installed on your device. We also collect data on how you interact with our Site.

Order Information: When you make a purchase or attempt to make a purchase through the Site, we collect your name, billing address, shipping address, payment information (processed securely via our third-party payment gateway—we do not store or see full card numbers on our servers), email address, and phone number.

Communication Data: Messages, inquiries, or feedback you send us via email, customer service channels, or our on-site contact forms. We retain this data to provide support and maintain correspondence records.

Marketing Preferences: Records of your explicit consent to receive marketing communications from us and any subscription preferences you configure.

3. How We Use Your Personal Information and Our Legal Basis

Under the UK-GDPR, we must have a lawful basis for processing your data. We rely on the following bases:

Performance of a Contract: We use your Order Information to fulfill any orders placed through the Site (including processing your payment, arranging for shipping, and providing you with invoices and/or order confirmations). Without this data, we cannot fulfill our contractual obligations to you.

Legitimate Interests: We use your information to communicate with you regarding order statuses or customer support inquiries, to screen our orders for potential risk or fraud, and to generate anonymized or aggregated analytics data to understand how visitors interact with our Site so we can optimize our layout and user experience.

Consent: If you explicitly opt in to our marketing communications, we may send you information about new collections, promotional offers, or brand updates. You can withdraw your consent at any time by clicking the "unsubscribe" link at the bottom of any email or by contacting us at hello@vumra.com.

Legal Obligation: We retain specific financial transaction records and tax data for a mandatory period to fulfill legal and accounting obligations under UK law.

4. Sharing Your Personal Information

We share your personal information with trusted third-party service providers only to help us use your personal information as described above:

Shopify: Our store is hosted on Shopify Inc. They provide the e-commerce platform that allows us to securely display and sell our products to you. You can read their Privacy Policy here: shopify.com/legal/privacy.

Shipping & Fulfilment Partners: We share your delivery details (name, shipping address, phone number, and email address) with our contracted courier and shipping services (e.g., Royal Mail, DPD, Evri) strictly to ensure your order is successfully delivered.

Payment Processors: Your transaction data is directly and securely handled by our PCI-compliant payment gateway provider. We do not store or have direct access to your credit or debit card details.

Google Analytics: We use Google Analytics to help us understand how our customers use the Site. You can read more about how Google uses your Personal Information here: google.com/intl/en/policies/privacy.

Legal Compliance: We may share your personal information to comply with applicable laws and regulations, to respond to a subpoena, search warrant, or other lawful request for information we receive from UK authorities, or to otherwise protect our legal rights.

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes.

5. International Data Transfers

Some of our core service providers (including Shopify and Google) operate outside the United Kingdom, specifically in the United States and Canada. Whenever your data is transferred outside the UK, we ensure equivalent levels of protection are maintained by relying on UK-approved safeguarding mechanisms, such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the European Commission's Standard Contractual Clauses.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was originally collected, including satisfying any legal, accounting, or compliance reporting requirements:

Order & Transaction Data: Retained for a minimum of 6 years following the end of the financial year in which the transaction occurred, in compliance with UK tax law and HM Revenue & Customs (HMRC) requirements.

Customer Support Correspondence: Retained for up to 3 years following your last interaction with us to ensure we can properly address any historical queries or complaints.

Marketing Data: Retained until you actively withdraw your consent (unsubscribe) or after 2 consecutive years of user inactivity, at which point your marketing profile is permanently deleted.

Website Analytics Data: Retained in an anonymized or pseudonymized form for a standard duration of up to 26 months.

7. Your Rights Under UK-GDPR

If you are a resident of the United Kingdom, you possess the following legal rights regarding your personal data:

The Right of Access: You can request a complete copy of the personal information we currently hold about you.

The Right to Rectification: You can request that any inaccurate or incomplete personal data be promptly corrected.

The Right to Erasure ("Right to be Forgotten"): You can request that we delete your personal data, provided it is no longer required for legal compliance or valid contractual obligations.

The Right to Restrict Processing: You can request that we pause or limit how we process your personal data under certain conditions.

The Right to Object: You can object to our processing of your personal data, particularly regarding automated processing or direct marketing channels.

The Right to Data Portability: You can request that your data be transferred directly to another organization in a structured, machine-readable format.

The Right to Withdraw Consent: Where our legal basis is your explicit consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact our team at hello@vumra.com. We will respond to your request within one calendar month as required by UK law.

8. Right to Complain to the ICO

If you believe that Vumra has mishandled your personal information or failed to respect your data protection rights, you have the legal right to file a formal complaint with the UK Information Commissioner's Office (ICO), the UK's independent data protection regulatory authority:

Website: ico.org.uk

Helpline: 0303 123 1113

We would appreciate the opportunity to address and resolve any of your privacy concerns directly before you approach the regulator, so please consider reaching out to us at hello@vumra.com first.

9. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking identifiers. These fall into two distinct operational categories:

Essential Cookies: Crucial for the technical operation of our website. They handle security protocols, remember the items in your shopping cart, and allow you to proceed smoothly through our checkout funnel. Because the site cannot function without them, these do not require your opt-in consent.

Non-Essential Cookies: Used exclusively for analytics, behavioral measurement, and targeted marketing campaigns. We will never deploy these cookies on your device unless you explicitly opt in via our on-site cookie consent banner.

You can update or modify your cookie preferences at any time by clicking the cookie preference configuration link located in our website's footer, or by modifying your individual web browser settings to block or delete cookies entirely. Please note that restricting essential cookies may break vital checkout processes.

10. Children's Privacy

Our Site and products are intended for adult consumers and are not directed at or designed for individuals under the age of 18. We do not knowingly collect personal data from children. If you are a parent or legal guardian and believe your child has mistakenly provided us with personal information, please contact us immediately at hello@vumra.com so we can promptly delete that data from our servers.

11. Contact & Company Information

For questions regarding our data privacy practices, updates on how your information is handled, or to submit a formal data rights request, please reach out to us using the details below:

Email: hello@vumra.com

Phone: +44 7778 467922

Business Hours: Monday to Friday, 9:00 AM – 5:00 PM (GMT)

Corporate Operator: vumra.com is owned and operated by VUMRA COMMERCE LTD, registered in England & Wales.

Company Registration Number: 16707665

Registered Office Address: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom