Privacy Policy

INTRODUCTION

We value your privacy and are dedicated to safeguarding it by adhering to this Privacy Policy (“Policy”). This Policy explains what types of information we may collect from you or that you may provide to us (“Personal Information”) on vanestkitchen.co.uk (“Website” or “Service”) and any associated products or services (collectively, “Services”). It outlines how we collect, use, store, protect, and share your Personal Information, as well as the options you have regarding its use and how you can access or modify it.

This Policy forms a legally binding agreement between you (“User”, “you”, or “your”) and the operator of this Website (“Operator”, “we”, “us”, or “our”). If you are accepting this agreement on behalf of a company or another legal entity, you confirm that you have the authority to bind that entity, and in that case, all references to “User”, “you”, or “your” refer to that entity. If you lack such authority or do not agree to the terms of this agreement, you must not accept it and may not use the Website or Services. By accessing or using the Website and Services, you confirm that you have read, understood, and agree to be bound by this Policy. This Policy does not cover the practices of organizations we do not own or control, nor does it apply to individuals we do not employ or manage.

automatic information collection

When you access the Website, our servers automatically log certain information sent by your browser. This may include details such as your device’s IP address, browser type and version, operating system type and version, language settings, the webpage you visited before arriving at our Website, the pages you browse on the Website and Services, the duration of your visits, search activity, access dates and times, and other related statistics.

Automatically collected information is used solely to detect potential misuse and to generate statistical insights about how the Website and Services are accessed and used. These statistics are not compiled in a manner that would personally identify any individual User.

personal information collection

You can browse and use the Website and Services without providing any information that could identify you personally. However, to access certain features of the Website, you may be required to share specific Personal Information, such as your name and email address.

• Contact Information: For example, your email address, phone number, and similar details.
• Payment Information: For example, credit card or bank account details.

Some of the Personal Information we collect comes directly from you through the Website and Services. Additionally, we may obtain Personal Information from other sources, such as public databases and our marketing partners.

Providing your Personal Information is optional, but choosing not to share it may limit your ability to use certain features of the Website. If you are unsure about which information is required, you are encouraged to contact us.

privacy of children

We do not intentionally collect Personal Information from anyone under 18 years of age. If you are under 18, please refrain from submitting any Personal Information through the Website and Services. If you believe that a child under 18 has provided Personal Information to us, please contact us so that we can delete that information from our Services.

We urge parents and legal guardians to supervise their children’s Internet use and to support this Policy by instructing them not to share Personal Information on the Website and Services without permission. We also request that all parents and guardians take appropriate steps to ensure their children understand never to disclose Personal Information online without consent.

use and processing of collected information

We may act as both a data controller and a data processor under the GDPR when handling Personal Information, unless a separate data processing agreement is in place, in which case you would be the data controller and we would act as the data processor.

Our role depends on the context in which Personal Information is handled. We act as a data controller when we request Personal Information necessary for you to access and use the Website and Services, as we determine the purposes and methods of processing and comply with the GDPR obligations for data controllers.

We act as a data processor when you submit Personal Information through the Website and Services. In this case, we do not own, control, or make decisions regarding the submitted data, and it is processed solely according to your instructions. Here, you, as the User, are the data controller under the GDPR.

To provide access to the Website and Services or to fulfill legal obligations, we may need to collect and use certain Personal Information. If you choose not to provide the requested information, we may be unable to deliver the products or services you request. The information we collect may be used for the following purposes:

• Create and manage user accounts
• Process and handle orders
• Deliver products or services
• Enhance and improve products and services
• Send administrative notifications
• Share marketing and promotional messages
• Provide updates on products and services
• Respond to inquiries and offer customer support
• Collect user feedback
• Enhance the overall user experience
• Publish customer testimonials
• Serve targeted advertisements
• Enforce terms, conditions, and policies
• Protect against abuse and malicious activity
• Comply with legal requests and prevent harm
• Operate and maintain the Website and Services

The processing of your Personal Information depends on how you use the Website and Services, your location, and whether certain conditions apply. This includes situations where you have given consent for specific purposes (unless the processing is governed by the California Consumer Privacy Act or European data protection laws), where providing information is necessary to fulfill a contract or pre-contractual obligations, where processing is required to comply with a legal duty, where it relates to tasks carried out in the public interest or under official authority, or where it is necessary to pursue legitimate interests of ours or a third party.

We rely on the following legal bases as defined in the GDPR upon which we collect and process your Personal Information:

• User’s consent

Please note that in certain jurisdictions, we may be permitted to process your information until you choose to object, without relying on consent or the other legal bases mentioned above. Regardless, we are always happy to explain the specific legal basis for processing your Personal Information, including whether providing it is required by law, by contract, or as a condition for entering into a contract.

payment processing

For Services that require payment, you may need to provide your credit card or other payment account details, which will be used exclusively for processing payments. We work with third-party payment processors (“Payment Processors”) to securely handle your payment information.

These Payment Processors follow the latest security standards established by the PCI Security Standards Council, which includes major brands such as Visa, MasterCard, American Express, and Discover. All sensitive data is transmitted over SSL-secured channels, encrypted, and protected with digital signatures. Additionally, our Website and Services comply with strict vulnerability standards to ensure a secure environment for Users. Payment information is shared with Payment Processors only as necessary to process payments, issue refunds, and address related inquiries or complaints.

Please note that Payment Processors may also collect certain Personal Information from you—such as your email address, billing address, credit card details, and bank account information—to complete the payment process through their systems. With your prior consent, financial information required for future or recurring payments will be stored in encrypted form on the secure servers of our Payment Processors. The handling of your Personal Information by these Payment Processors is subject to their respective privacy policies, which may differ in the level of protection provided. We recommend reviewing their privacy policies for further details.

disclosure of information

Depending on the Services you request or as needed to complete a transaction or provide a Service, we may share your information with our trusted subsidiaries, joint venture partners, affiliates, contractors, and other service providers (together, “Service Providers”) who help operate the Website and Services. These Service Providers either follow privacy policies consistent with ours or have agreed to comply with our policies regarding Personal Information. We will never share personally identifiable information with unaffiliated third parties.

Service Providers are only permitted to use or disclose your information to the extent necessary to perform their assigned tasks or comply with legal obligations. They receive only the information required to carry out their functions and are not authorized to use it for marketing or any other purposes.

Additionally, we may disclose Personal Information if required or allowed by law, such as in response to a subpoena or similar legal process, or when we believe disclosure is necessary to protect our rights, ensure the safety of you or others, prevent fraud, or respond to government requests.

retention of information

We will keep and use your Personal Information for as long as necessary to fulfill our legal obligations, enforce our agreements, resolve disputes, and, unless a longer period is required or permitted by law, for up to 12 months.

Any aggregated data derived from your Personal Information may continue to be used after you update or delete your information, but only in a way that does not personally identify you. Once the retention period ends, your Personal Information will be deleted. As a result, rights such as access, erasure, rectification, and data portability cannot be exercised after the retention period has expired.

transfer of information

Depending on where you are located, your information may be transferred and stored in a country other than your own. These transfers will not involve countries outside the European Union or the European Economic Area. If such a transfer occurs, you can learn more by reviewing the relevant sections of this Policy or by contacting us using the details provided in the contact section.

rights regarding your personal data under the GDPR

If you are a resident of the European Economic Area (“EEA”), you have certain data protection rights. We aim to take reasonable steps to allow you to correct, update, delete, or limit the use of your Personal Information. To find out what Personal Information we hold about you or to request its removal, please contact us. Under certain circumstances, you have the following rights:

• Right to withdraw consent: If you previously gave consent for processing your Personal Information, you can withdraw it at any time. This does not affect the lawfulness of processing conducted before your withdrawal.
• Right to access: You can find out if we are processing your Personal Information, obtain details about how it is used, and request a copy of the information being processed.
• Right to rectification: You may verify the accuracy of your information and request updates or corrections. You can also ask us to complete any incomplete information.
• Right to object: You may object to processing based on a legal ground other than consent, including processing for public interest, official authority, or legitimate interests. You can object to direct marketing at any time without justification. Details about direct marketing processing are available in relevant sections of this Policy.
• Right to restrict processing: You may request a restriction on processing if, for example, you contest the accuracy of your information, object to unlawful processing instead of erasure, or need the information for legal claims. Restricted information will only be processed with your consent, for legal claims, to protect others’ rights, or for important public interest.
• Right to erasure: You may request the deletion of your Personal Information in circumstances such as when it is no longer necessary, consent is withdrawn, or it is used for direct marketing. Exceptions apply, such as when processing is needed for freedom of expression, legal compliance, or legal claims.
• Right to data portability: You may receive your Personal Information in a structured, commonly used, machine-readable format and, if feasible, have it transmitted to another controller, provided this does not negatively affect the rights of others.
• Right to lodge a complaint: If you are unsatisfied with how we handle your Personal Information, you may file a complaint with your local data protection authority in the EEA. This right applies when your information is processed automatically based on your consent, a contract, or pre-contractual obligations.

how to exercise your rights

You can submit requests to exercise your rights using the contact details provided in this document. Please note that we may require you to verify your identity before we respond. Your request should include enough information for us to confirm that you are the individual in question or an authorized representative acting on their behalf. If submitted by an authorized representative, we may ask for proof of power of attorney or other written authorization to act on your behalf.

Requests must provide sufficient details for us to understand and respond appropriately. We cannot fulfill your request or provide Personal Information until we have verified your identity or authority and confirmed that the information pertains to you.

cookies

Our Website and Services use “cookies” to enhance and personalize your online experience. A cookie is a small text file placed on your device by a web server. Cookies cannot run programs or transmit viruses. Each cookie is uniquely assigned to you and can only be read by the server that issued it. If you choose to decline cookies, some features of the Website and Services may not function fully. Click here to learn more about how cookies work.

We may use cookies to collect, store, and track information for security, personalization, Website and Service operation, and statistical purposes. For details on the cookies we use and their purposes, please refer to our cookie policy. You can choose to accept or decline cookies. While most web browsers accept cookies by default, you can adjust your browser settings to decline them if you wish.

data analytics

Our Website and Services may use third-party analytics tools that employ cookies, web beacons, or similar technologies to collect standard internet usage and activity data. This information helps generate statistical reports on user behavior, such as visit frequency, pages viewed, and time spent on the Website and Services. We use these insights to monitor performance and enhance the Website and Services.

email marketing

We offer electronic newsletters that you may choose to subscribe to at any time. We are committed to keeping your email address private and will not share it with third parties, except as described in the information use and processing section or when using a third-party service to send the emails. All information sent via email will be handled in accordance with applicable laws and regulations.

In compliance with the CAN-SPAM Act, all emails we send will clearly identify the sender and provide contact information. You can unsubscribe from newsletters or marketing emails at any time by following the unsubscribe instructions in the emails or by contacting us directly. Please note that you will still receive essential transactional emails.

link to other resources

Our Website and Services may include links to third-party websites or resources that we do not own or control. We are not responsible for the privacy practices of these external sites. We encourage you to be mindful when leaving our Website and Services and to review the privacy policies of any third-party sites that may collect your Personal Information.

information security

We store the information you provide on secure servers in a controlled environment, protected against unauthorized access, use, or disclosure. We implement reasonable administrative, technical, and physical safeguards to protect Personal Information under our control. However, no data transmission over the Internet or wireless network can be completely guaranteed.

While we make every effort to safeguard your Personal Information, you acknowledge that (i) the Internet has inherent security and privacy limitations beyond our control, (ii) the security, integrity, and privacy of information exchanged between you and the Website and Services cannot be fully guaranteed, and (iii) information may be intercepted or tampered with during transmission despite our best efforts.

Since the security of Personal Information also depends on the safety of the device you use and the protection of your credentials, please take appropriate steps to safeguard this information.

data breach

If we become aware that the security of the Website and Services has been compromised or that Users’ Personal Information has been disclosed to unauthorized third parties due to external activities, such as security attacks or fraud, we reserve the right to take appropriate measures. These may include investigation, reporting, and cooperation with law enforcement authorities.

In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe there is a likely risk of harm or if notification is required by law. When we provide such notice, it will be sent via email.

changes and amendments

We may update or modify this Policy, or its terms related to the Website and Services, at any time at our discretion. When changes are made, we will update the “last revised” date at the bottom of this page and may also notify you through the contact information you have provided.

The updated Policy takes effect immediately upon posting unless otherwise stated. Your continued use of the Website and Services after the effective date indicates your acceptance of the changes. However, we will not use your Personal Information in a way that materially differs from what was stated when it was originally collected, without your consent.

agreement to this policy

By using the Website and Services and submitting your information, you acknowledge that you have read this Policy and agree to its terms and conditions. If you do not agree with this Policy, you are not authorized to access or use the Website and Services.

contact us

If you have any questions, concerns, or complaints about this Policy, the information we hold about you, or if you wish to exercise your rights, please contact us at:

info@vanestkitchen.co.uk

We will make every reasonable effort to address complaints and disputes and to fulfill your requests as quickly as possible, and in any case within the timeframes required by applicable data protection laws.

Last updated: January 07, 2026