How Vitesper handles customer information

Who is responsible for your information

Vitesper is the controller for the personal information handled through this website. You can contact us about privacy at [email protected].

Trading details are shown in the customer information panel on this page. If you need any detail before placing an order, contact us before buying.

Information we collect

We only collect information needed to operate a small online art shop and support customers.

• Contact details, including name, email address and phone number if you provide one.
• Delivery details, including address, postcode and country code.
• Order details, including purchased products, quantities, prices, payment status and tracking details.
• Messages you send to us about products, commissions, sizing, delivery or returns.
• Technical information needed for security, sessions, cart handling, analytics and website operation, including IP address, device details, pages viewed, approximate time on page, click positions and best-effort location information where available.

Payment card details are processed by Stripe. We do not store full card numbers on this website.

How we use your information

Orders and customer service
We use your details to process orders, take payment through Stripe, arrange delivery, send order updates, handle returns and answer customer enquiries. The lawful basis is usually contract, because this is needed to sell and deliver your order.

Legal and accounting records
We keep records needed for tax, accounting, fraud prevention and consumer rights obligations. The lawful basis is legal obligation or legitimate interests.

Service emails
We send order confirmations, dispatch updates, status changes, tracking links and customer support replies through SendGrid API. These are service emails connected to your order.

Website analytics
We use first-party analytics to understand how visitors use the website, improve page layout and identify technical problems. The analytics do not record payment card details or form field values.

Marketing
We will only send marketing emails if you have given consent or where UK electronic marketing rules allow it. You can opt out of marketing at any time.

Who we share information with

We share personal information only where needed to run the website, complete your order or comply with law.

Stripe, for secure payment processing and fraud checks.
SendGrid, for API-based transactional email delivery.
Delivery companies, such as Royal Mail, Evri, DPD, Parcelforce, DHL, UPS or FedEx, where needed to deliver and track your order.
Website hosting, database and security providers used to operate vitesper.com.
Professional advisers, tax authorities or regulators where legally required.

Some providers may process data outside the UK. Where that happens, we expect appropriate safeguards such as UK-approved transfer terms or adequacy arrangements.

How long we keep information

Order and accounting records are normally kept for up to 6 years after the end of the relevant tax year, unless a longer period is required for a dispute, legal claim or fraud prevention. Customer messages are kept only as long as needed to answer the enquiry and maintain sensible order records.

We review stored information and remove it when it is no longer needed.

Your UK data protection rights

Depending on the situation, you may have the right to access, correct, erase, restrict or object to the use of your personal information. You may also have the right to data portability and the right to withdraw consent where processing is based on consent.

To use these rights, email [email protected]. We may need to confirm your identity before acting on a request.

You can complain to the Information Commissioner's Office if you are unhappy with how your information is handled. Visit ico.org.uk/make-a-complaint.

Cookies and security

We use cookies and similar technologies for cart, checkout, login, session security, website operation and first-party analytics. Read the Cookie Policy for more detail.

We use reasonable technical and organisational measures to protect personal information. No website can guarantee absolute security, but we keep access limited and use established payment and email providers.

Changes to this policy

We may update this policy when our services, providers or legal requirements change. The latest version will be published on this page with the updated date.