1. Data and purposes
Vardine processes account data, contact details, addresses and recipient details, orders, payment status without full card credentials, reviews, support requests, technical logs, preferences, event dates and reminders entered by the user. Purposes include registration, security, order fulfilment, delivery, support, accounting and compliance with legal duties.
2. Legal bases and recipients
The legal basis depends on the activity and may be contract performance, a legal obligation, a legitimate security interest or separate consent where required. Sellers and delivery providers receive only data needed for the order. Banks and payment partners receive data needed to process payments. Recipients of personal data must protect it.
3. Marketing and cookies
Service messages about accounts and orders are separate from marketing. Marketing messages are sent only where a required legal basis exists, with a way to opt out. Non-essential analytics or advertising cookies require a separate choice where required; essential cookies support sign-in, the cart and security.
4. Rights and retention
Within the limits of law, users may request access, correction, deletion or restriction of processing and withdraw consent for optional processing. Data is retained while needed for stated purposes and mandatory records, then deleted or anonymised. Organisational and technical measures are used to protect data. Requests may be sent to the operator using the published contact details.
5. Operator details
Before accepting real orders, Vardine will publish the operator’s full legal name, address and a working contact for data requests. Policy changes carry a date and version; a new version applies prospectively.