Privacy policy

1. Who we are

Vuk and Milica Ltd is the controller of personal data collected through www.vukimilica.com.

Registered business address: 85 Great Portland Street, London, W1W 7LT, United Kingdom.

If you have questions about this Privacy Policy or how we use your data, email contact@vukimilica.com.

2. About this policy

This Privacy Policy explains what personal data we collect, why we use it, who we may share it with and the rights you have in relation to your data.

It applies to information you provide when you visit the website, buy a product, add products to your basket, contact us, request free resources or sign up for news and offers.

We process personal data in accordance with applicable UK data protection law, including the UK GDPR and Data Protection Act 2018, and applicable rules on electronic communications and cookies.

3. Information we collect

We may collect your name, email address, telephone number where needed, delivery and billing address, products and variants purchased, order and delivery value, messages you send us, the email used to request free resources and whether you consented to marketing.

Payments are processed by Stripe. Card details are sent directly to Stripe; we do not store or have access to your full card number or CVC.

We may automatically collect IP address, device and browser information, pages visited and information through cookies and similar technologies. Analytics information is collected only in line with your cookie choices where consent is required.

4. How and why we use your data

We use data to process and deliver orders, process payments, communicate about purchases, answer enquiries, send requested free resources, send marketing where you have consented, protect the website, carry out analytics with appropriate consent and meet legal, accounting and tax obligations.

Where processing is based on consent, you can withdraw that consent at any time.

5. Orders and delivery

To fulfil an order we may keep your name, email, address, products purchased, quantities and variants, order value, delivery charge, payment status, purchase date and relevant Stripe reference.

We use this information to fulfil and deliver the order, resolve problems, handle returns and meet accounting and tax requirements.

6. Payments through Stripe

We use Stripe for online payment processing. When you buy, certain information is sent to Stripe so it can process and confirm the payment. We do not store your complete payment-card details.

You can read Stripe’s privacy policy at stripe.com/privacy.

7. Free resources and email communication

If you request free resources, we use your email address to send the requested content. You do not have to consent to marketing emails in order to receive the free resources.

If you separately consent to receive news, resources, products or offers, we will also use your email for marketing. We use MailerLite to manage our email list and send emails. You can unsubscribe from marketing at any time using the link in each marketing email.

8. Who we share data with

We do not sell or rent your personal data. Where necessary, we may share data with Stripe, delivery providers, MailerLite, hosting and IT service providers, analytics providers where appropriate consent has been given, professional advisers and public authorities where legally required.

9. International transfers

Some service providers may process or store information outside the United Kingdom. Where an international transfer requires safeguards, we use appropriate mechanisms under UK data protection law, which may include adequacy arrangements, the UK IDTA, the UK Addendum to Standard Contractual Clauses or other recognised mechanisms.

10. How long we keep data

We do not keep personal data longer than necessary. Business and accounting records are normally retained for at least six years from the end of the relevant financial year where required by law.

General enquiries may be retained for up to 24 months after the last communication unless there is a reason to keep them longer. Marketing data is kept until you unsubscribe or withdraw consent; we may retain minimal suppression information so we know not to send future marketing.

11. Cookies

We use necessary cookies for core website functions such as the basket, security and checkout. For analytics or other optional cookies that are not necessary, we request appropriate consent where required.

Our cookie controls should allow you to accept, reject or change optional cookie settings.

12. Data security

We take reasonable technical and organisational measures to protect personal data. The website uses HTTPS encryption and access to data is limited to people and providers who need it to perform their role.

13. Children’s privacy

The webshop is primarily intended for adults buying products for children. We do not ask children to provide personal data and do not knowingly collect personal data from children under 13. If you believe a child has provided information without appropriate consent, contact us.

14. Your rights

Depending on the circumstances, you may have rights of access, correction, erasure, restriction, objection, data portability and withdrawal of consent.

To exercise your rights, email contact@vukimilica.com. We may ask for additional information to verify your identity.

15. Automated decision-making

We do not use your personal data for solely automated decision-making that produces legal or similarly significant effects on you.

16. Complaints

If you have a question or concern about how we use your data, please contact us first at contact@vukimilica.com.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator. Make a complaint to the ICO.

17. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be published on this page together with the date it was last updated.