Privacy policy

Privacy & Cookie Policy

Effective Date: 12 September 2026
Data Controller: Vincica Miniatures Ltd
Contact Email: contact@vincicaminiatures.com
Governing Law: UK General Data Protection Regulation (UK GDPR) & Data Protection Act 2018

1. Data Controller Information

Vincica Miniatures Ltd is the Data Controller responsible for your personal data collected through vincicaminiatures.com. For any privacy queries or to exercise your data protection rights, contact our customer support team at contact@vincicaminiatures.com.

2. Personal Data We Collect

We collect personal information that you voluntarily provide when placing an order, registering an account, or subscribing to communications:

  • Order & Identity Data: Full name, billing address, shipping address, email address, phone number.
  • Financial Data: Payment details (card details are processed securely and encrypted directly by Shopify Payments/PayPal; Vincica Miniatures Ltd never stores raw credit card numbers on its servers).
  • Technical & Usage Data: IP address, browser type and version, time zone setting, operating system, and navigation paths on vincicaminiatures.com.
  • Marketing Data: Preferences regarding marketing emails (e.g., subscribing to our "Join the Vanguard" newsletter for launch updates and a 10% discount code).

3. Legal Basis for Processing

We process your personal data under the following legal bases recognized by the UK GDPR:

  1. Contractual Necessity: Processing required to fulfill your order, process payments, and deliver physical goods.
  2. Consent: Clear consent given for marketing communications (e.g., email newsletter signups), which you may withdraw at any time.
  3. Legal Obligation: Compliance with UK accounting, commerce, and legal duties.
  4. Legitimate Interests: Fraud prevention, website security, and customer service optimization.

4. How We Share Your Information

We do not sell, rent, or trade your personal data. Necessary data is shared only with trusted third-party service providers:

  • Shopify Inc.: eCommerce platform hosting and secure checkout workflow.
  • Payment Processors: Shopify Payments, Stripe, and PayPal for encrypted payment clearance.
  • Shipping Carriers: Royal Mail, DPD, DHL, and FedEx for physical order fulfillment and tracking.
  • Google Workspace: Administrative and customer email management.

5. International Data Transfers & Retention

When data is processed by technology partners outside the UK or European Economic Area (EEA), transfers are protected using UK International Data Transfer Agreements (IDTAs) or Standard Contractual Clauses (SCCs).

We retain order records for as long as required by statutory reporting requirements (typically 6 years). Marketing subscription data is retained until you unsubscribe.

6. Your Rights Under UK GDPR

Under UK data protection laws, you possess the following rights:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate data.
  • Right to Erasure: Request deletion of your data, subject to statutory retention rules.
  • Right to Restrict or Object: Object to direct marketing processing.
  • Right to Withdraw Consent: Unsubscribe from emails at any time via the link in our footer or by emailing contact@vincicaminiatures.com.

You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) at ico.org.uk.

7. Cookie Policy

We use cookies to ensure core storefront functionality, analyze traffic, and personalize user experience:

  • Necessary Cookies: Essential for website navigation, cart management, and checkout.
  • Analytics Cookies: Google Analytics tools to help us understand visitor traffic.
  • Marketing Cookies: Measure campaign effectiveness and promotional discount codes.