Privacy policy

Privacy Policy

This policy explains what personal data Vantelli collects, why we collect it, and what rights you have. It is written in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation.

1. Who we are

The data controller responsible for your personal data is the company operating the Vantelli online store.

For any privacy matter, contact privacy@vantelli.com.

2. What personal data we collect

  • Identity and contact data — name, billing address, delivery address, email address, telephone number.
  • Order data — items purchased, order value, order history, returns and refunds.
  • Payment data — payment method and transaction confirmation. Full card numbers are processed directly by our payment providers and are never stored on our systems.
  • Technical data — IP address, device type, browser, operating system and pages viewed on our store.
  • Marketing data — your preferences for receiving marketing from us and your interactions with our emails.
  • Communications — the content of emails, chat messages and support requests you send us.

We do not knowingly collect special categories of personal data, such as data concerning health, religion or political opinions.

3. Why we use your data, and on what legal basis

Purpose Legal basis under Article 6 GDPR
Processing your order, taking payment, arranging delivery and handling returns Performance of a contract
Customer support and communication about your order Performance of a contract
Keeping accounting, tax and invoicing records Compliance with a legal obligation
Preventing fraud and keeping our store secure Legitimate interests
Analytics to understand and improve how our store performs Consent, given through our cookie banner
Marketing emails, advertising and audience targeting Consent, or legitimate interests for existing customers where permitted by applicable law

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Who we share your data with

We share personal data only with service providers who process it on our behalf under a written data processing agreement, and only to the extent necessary. The categories of recipient are:

  • Our e-commerce platform provider, which hosts this online store
  • Payment service providers, which process your transaction
  • Delivery carriers, which receive your name, address and telephone number in order to complete delivery
  • Email and customer communication providers
  • Analytics and advertising providers, where you have given consent
  • Professional advisers, such as accountants and lawyers, where required
  • Public authorities, where we are under a legal obligation to disclose

We do not sell your personal data.

5. International transfers

Some of our providers are established outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on an adequacy decision of the European Commission or on Standard Contractual Clauses adopted by the Commission, together with any additional safeguards required. You may request details of the safeguards in place by writing to privacy@vantelli.com.

6. How long we keep your data

  • Order and invoice records — for the retention period required by the tax and accounting law applicable to our company
  • Customer account data — for as long as your account remains active, and for a limited period afterwards to handle any subsequent claim
  • Marketing data — until you unsubscribe or withdraw consent, after which you are removed from our active lists
  • Support correspondence — for as long as needed to resolve the matter and to defend against related claims
  • Analytics data — for the retention period stated in our cookie banner

When data is no longer needed for any of these purposes, it is deleted or anonymised.

7. Cookies

We use cookies and similar technologies. Strictly necessary cookies keep the store, cart and checkout working and do not require your consent. All other cookies — analytics, personalisation and advertising — are set only after you consent through our cookie banner. You can change or withdraw your cookie preferences at any time using the cookie settings link in our footer.

8. Your rights

Under the GDPR you have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request erasure of your data where there is no overriding reason for us to keep it
  • Request restriction of processing in certain circumstances
  • Receive your data in a portable, machine-readable format
  • Object to processing based on our legitimate interests, and to direct marketing at any time
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email privacy@vantelli.com. We respond within one month, and will tell you if we need longer because your request is complex. Exercising your rights is free of charge.

9. Complaints

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with a data protection supervisory authority — in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement.

We would appreciate the opportunity to address your concerns first, so please contact us before approaching the authority.

10. Security

We apply appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and the use of PCI-DSS compliant payment providers. No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

11. Children

Our store is not directed at children and we do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. The version published on this page is the one in force. Material changes are communicated to registered customers by email.