Privacy policy
This policy explains what personal data vibeclothe.com handles, why, and what you can do about it. We keep it short because we collect very little.
1. Who is responsible
Seller details are published here before the first order ships.
2. What we collect
- Orders. Your name, email, delivery address, phone number if Stripe's checkout asks for it, what you bought, the currency and amounts, and your order reference. You type payment details into Stripe, not into our site.
- Reservations (when card checkout is off). Your name, email, country, optional notes, and your bag.
- Drop list. Your email address and the prints you voted for.
- Technical data. Your country, read from your connection, is used once to pick a currency and is not stored. To stop abuse, a short-lived record keyed to your network address limits how often the order and reservation forms can be used. It expires after about 10 minutes.
3. Why, and on what basis
- To take, make, ship and support your order (contract, GDPR Art. 6(1)(b)).
- To keep accounting and tax records (legal obligation, Art. 6(1)(c)).
- To keep the site secure and stop abuse (legitimate interest, Art. 6(1)(f)).
- To email the drop list and count your votes (your consent, Art. 6(1)(a)). You can withdraw it at any time.
4. Who receives it
- Stripe processes payments and sends your receipt. Stripe handles your card data under its own privacy policy.
- Cloudflare hosts this site and stores order, reservation and drop-list records in its data storage.
- Production and shipping partners receive what they need to make and deliver your order, such as your name and delivery address.
Some of these providers are based outside the EEA. Where that is the case, the transfer relies on an adequacy decision or standard contractual clauses.
5. How long we keep it
Order records are kept for as long as tax and accounting law requires. Reservations and drop-list entries are deleted when you ask, or when they are no longer needed.
6. Your rights
You can ask for access to your data, correction, deletion, restriction, a portable copy, and you can object to processing based on legitimate interest. Use the contact details above. You also have the right to complain to the data protection authority of your country.
7. Cookies and local storage
We set no tracking or advertising cookies. Your browser stores a few things on your own device so the shop works: your bag, your chosen currency, and, for the session only, a cached currency guess and the add-to-bag shortcut. Stripe's checkout page may set its own cookies. Cloudflare may measure traffic with privacy-focused analytics that do not use cookies.
8. Changes
If we change this policy we update the date at the top.