Privacy Policy

Vintaya ("we," "us," or "our") is committed to protecting the privacy of every person who interacts with our brand. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit vintaya.com, make a purchase, or communicate with our team.

By using our website or services, you agree to the practices described in this policy. We will never sell your personal data, and we will always handle your information with the discretion it deserves.

When you browse, purchase, or contact us, we may collect the following categories of information:

• Identity & Contact Data — name, email address, phone number, billing and delivery address.
• Transaction Data — order history, products purchased, payment confirmation references (we do not store full card numbers).
• Technical Data — IP address, browser type, device identifiers, and interaction data collected via cookies and analytics tools.
• Communications Data — messages, emails, and support correspondence you send to us.
• Marketing Preferences — your opt-in or opt-out choices for promotional communications.

We do not collect sensitive personal information such as financial account details beyond what is required to process a transaction, or health and biometric data of any kind.

Your data is used strictly for the purposes for which it was collected. Specifically, we use it to:

• Process and fulfil your orders, including dispatching products and sending tracking information.
• Manage returns, refunds, warranty claims, and customer support interactions.
• Communicate with you about your account, orders, or enquiries.
• Send marketing and promotional communications where you have given explicit consent.
• Improve our website, products, and customer experience through anonymised analytics.
• Comply with applicable legal obligations and prevent fraud.

We will never use your personal information for purposes incompatible with those described here without first obtaining your consent.

We do not sell, rent, or trade your personal data to third parties. We share your information only in the following limited circumstances:

• Fulfilment Partners — logistics providers and couriers who require your name and address to deliver your order.
• Payment Processors — Shopify Payments and Stripe process transactions on our behalf under their own strict security standards.
• Technology Providers — platforms such as Shopify, Google Analytics, and email service providers that help us operate our store.
• Legal Requirements — where required by law, court order, or governmental authority.

All third-party providers are contractually obligated to maintain the confidentiality and security of your data and may only use it for the specific purposes we have authorised.

Our website uses cookies — small text files stored on your device — to enable core functionality, remember your preferences, and understand how visitors interact with our site.

• Essential Cookies — required for the store to function (shopping cart, checkout, login session).
• Analytics Cookies — anonymised data via Google Analytics to help us understand traffic patterns and improve the site.
• Marketing Cookies — used only where you have consented, to personalise advertisements on third-party platforms.

You may disable non-essential cookies through your browser settings or our cookie consent banner. Disabling essential cookies may affect your ability to use the site.

We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law.

• Order Data — retained for 7 years to comply with financial record-keeping obligations.
• Account Data — retained for the duration of your account, plus 2 years after account closure.
• Marketing Data — retained until you withdraw consent or request erasure.
• Support Records — retained for 3 years from the date of last contact.

Upon the expiry of these periods, your data is securely deleted or anonymised.

Depending on your location, you may have the following rights in relation to your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data where no legal obligation requires retention.
• Portability — receive your data in a structured, machine-readable format.
• Objection & Restriction — object to or limit certain types of processing.
• Withdraw Consent — withdraw marketing consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at support@vintaya.online. We will respond within 30 days.

We implement industry-standard security measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction.

While we take every reasonable precaution, no data transmission over the internet can be guaranteed as completely secure. If you have any concerns about the security of your data, please contact us immediately.

Our website and services are not directed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us immediately at support@vintaya.online and we will take prompt action to remove it.

This policy may be updated periodically to reflect changes in our practices or legal obligations. Material changes will be communicated via email or a prominent notice on our website. The date at the top of this page reflects the most recent revision.

For all privacy-related enquiries, please contact our Data Privacy team at support@vintaya.online.