Privacy Policy

Last updated:

1. Introduction and Data Controller

This Privacy Policy explains how Vorpalonghod (“we”, “us”, “our”) collects, uses, stores, and protects your personal data when you visit our website at https://vorpalonghod.world or place an order for our products. We are committed to ensuring that your privacy is protected in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection legislation.

The data controller responsible for your personal data is:

Vorpalonghod
50 Buchanan Street, Glasgow, G1 3JN, United Kingdom
Email: notify-us@vorpalonghod.world

2. Information We Collect

We may collect and process the following categories of personal data:

2.1 Information You Provide Directly

  • Order information: full name, email address, phone number (if provided), and any message you include when submitting the order form on our website.
  • Communication data: any personal data you provide when contacting us via email or through our website.
  • Consent records: records of consent you provide, such as agreeing to our Privacy Policy when placing an order.

2.2 Information Collected Automatically

  • Technical data: your IP address, browser type and version, operating system, referral source, and device information.
  • Usage data: information about how you navigate and interact with our website, including pages visited, time spent on pages, and click patterns.
  • Cookie data: information collected through cookies and similar tracking technologies. Please refer to our Cookie Policy for detailed information.

3. How We Use Your Data

We process your personal data for the following purposes:

  • Order processing: to receive, review, and fulfil your orders for Vascular Vantage and to communicate with you about your order status.
  • Customer service: to respond to your enquiries, requests, or complaints.
  • Website operation: to operate, maintain, and improve our website, including ensuring security and preventing fraud.
  • Analytics: to analyse website usage patterns and improve user experience (only with your consent where required).
  • Legal compliance: to comply with applicable legal and regulatory obligations.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under the UK GDPR:

  • Consent (Article 6(1)(a)): where you have given clear consent for us to process your personal data for a specific purpose, such as submitting the order form or accepting analytics cookies.
  • Contractual necessity (Article 6(1)(b)): where processing is necessary for the performance of a contract with you or to take pre-contractual steps at your request, such as processing your order.
  • Legitimate interests (Article 6(1)(f)): where processing is necessary for our legitimate interests (such as website security and fraud prevention), provided these interests do not override your fundamental rights and freedoms.
  • Legal obligation (Article 6(1)(c)): where processing is necessary to comply with a legal obligation to which we are subject.

5. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share your data with the following categories of recipients only where necessary:

  • Service providers: trusted third-party companies that assist us in operating our website, processing orders, or delivering services (e.g., hosting providers, payment processors, delivery services). These providers are contractually bound to process your data only on our instructions and in compliance with applicable data protection laws.
  • Legal authorities: where we are required to disclose your personal data by law, regulation, or legal process, or to protect our rights, safety, or property.

6. International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom and the European Economic Area (EEA). If any transfer of personal data to a country outside the UK or EEA is required, we will ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner’s Office (ICO), or that the recipient country has been deemed to provide an adequate level of data protection.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations:

  • Order data: retained for up to 6 years after the date of the transaction, in line with UK tax and accounting regulations.
  • Communication records: retained for up to 2 years after the last communication, unless a longer retention period is required by law.
  • Website analytics data: retained in anonymised or aggregated form for up to 26 months.
  • Cookie consent records: retained for up to 12 months from the date consent was given or updated.

After the applicable retention period, your personal data will be securely deleted or anonymised.

8. Your Rights

Under the UK GDPR, you have the following rights regarding your personal data:

  • Right of access (Article 15): you have the right to request a copy of the personal data we hold about you.
  • Right to rectification (Article 16): you have the right to request correction of inaccurate or incomplete personal data.
  • Right to erasure (Article 17): you have the right to request deletion of your personal data, subject to certain legal exceptions.
  • Right to restriction of processing (Article 18): you have the right to request that we restrict the processing of your personal data in certain circumstances.
  • Right to data portability (Article 20): you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to object (Article 21): you have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: where processing is based on your consent, you may withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, please contact us using the details provided in Section 12 below. We will respond to your request within one month, as required by law. If your request is complex, we may extend this period by up to two additional months, in which case we will notify you.

9. Cookies

Our website uses cookies and similar technologies to operate, analyse usage, and enhance your experience. For comprehensive information about the cookies we use and how to manage your preferences, please refer to our Cookie Policy.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Use of HTTPS encryption for all data transmitted between your browser and our website.
  • Restricted access to personal data on a need-to-know basis among our staff and authorised service providers.
  • Regular review and updating of our security practices to address emerging threats.
  • Secure storage of personal data with appropriate access controls.

While we take reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining a high standard of data protection.

11. Children’s Privacy

Our website and products are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a person under 18, we will take steps to delete that information promptly. If you believe we may have collected data from a child, please contact us immediately.

12. Contact Us and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Vorpalonghod
50 Buchanan Street, Glasgow, G1 3JN, United Kingdom
Email: notify-us@vorpalonghod.world

If you are not satisfied with our response or believe that we are processing your personal data in a way that is not compliant with the law, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner’s Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom
Website: https://ico.org.uk
Telephone: 0303 123 1113

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically. Your continued use of our website after any changes constitutes your acceptance of the revised Privacy Policy.