Privacy Policy
Effective date: 1 January 2026 • Last updated: August 2026
We are committed to protecting your personal data. This policy explains what we collect, how we use it, and your rights under UK GDPR.
Your UK GDPR Rights at a Glance
Access
View the data we hold about you
Rectification
Correct inaccurate data
Erasure
Request deletion of your data
Restriction
Limit how we process your data
Portability
Receive your data in a portable format
Object
Object to certain processing
Who We Are
ChardsVault is the data controller responsible for the personal information we hold about you. This means we determine the purposes and means by which your personal data is processed.
If you have any questions about this privacy policy or how we handle your data, please contact us.
What Data We Collect
We collect information you voluntarily provide to us and data that is gathered automatically when you use our website.
Information You Provide
- • Name & email address (account creation)
- • Delivery address & phone number (orders)
- • Payment details (processed securely)
- • Messages you send us via the contact form
- • Email address for newsletter subscription
Automatically Collected
- • IP address & approximate location
- • Browser type & version
- • Pages visited & time spent
- • Referrer URL
- • Cookie & session data
How We Use Your Data
We use your personal data only for the purposes described below:
Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases to process your personal data:
Contractual Necessity
Processing your order and delivering goods to you.
Legitimate Interests
Improving our services, security, and fraud prevention.
Consent
Marketing emails and non-essential cookies, where you've opted in.
Data Sharing
We do not sell your personal data to any third party. Ever.
We may share your data with trusted third-party service providers who assist us in operating our business. All third parties are contractually bound to handle your data securely and only for the specified purpose:
- Delivery partners — to ship your order (name, address, phone)
- Payment processors — to handle your payment securely
- IT & hosting providers — to keep our platform running
- Legal or regulatory authorities — only where required by law
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal requirements.
If you close your account, we will delete or anonymise your personal data unless we are required to retain it for legal reasons.
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
Right to Access
Request a copy of the personal data we hold about you
Right to Rectification
Ask us to correct any inaccurate data we hold
Right to Erasure
Request deletion of your data, in certain circumstances
Right to Restriction
Ask us to limit how we process your data
Right to Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to processing based on legitimate interests
To exercise any of these rights, please contact us. We will respond within 30 days.
Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, disclosure, or destruction.
All data transmitted between your browser and our servers is encrypted using TLS (HTTPS). Passwords are hashed using industry-standard algorithms and are never stored in plain text.
Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page, with the effective date shown at the top. We encourage you to review this policy periodically.
Contact & Complaints
If you have any concerns about how we handle your data, or you wish to exercise your rights, please contact us in the first instance — we will work to resolve your concern promptly.
Questions about your data?
We're happy to clarify how we handle your information.