Privacy policy

Aldric Voss ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect your information when you visit aldricvoss.com or make a purchase with us. This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

Aldric Voss is the data controller for personal information collected through this website. For any data-related enquiries, contact us at support@aldricvoss.com.

What Data We Collect

Data you provide directly:

  • Full name and delivery address
  • Email address and phone number (if provided)
  • Payment information (processed securely — we do not store card details)
  • Order history and preferences
  • Communications you send to us

Data collected automatically:

  • IP address and browser type
  • Pages visited and time spent on site
  • Referring website or search terms
  • Device type and operating system
  • Cookie data (see Cookies section below)

How We Use Your Data

  • To process and fulfil your order — contractual necessity
  • To send order confirmations and shipping updates — contractual necessity
  • To respond to your enquiries and provide customer support — legitimate interest
  • To send marketing emails (only with your explicit consent) — consent
  • To improve our website and customer experience — legitimate interest
  • To comply with legal obligations — legal obligation

Data Sharing

We do not sell your personal data. We may share your data with trusted third parties solely to fulfil our services:

  • Payment processors (e.g. Shopify Payments, Stripe, PayPal) — for transaction processing
  • Shipping and logistics partners — to deliver your order
  • Email marketing platforms (e.g. Klaviyo) — for order communications and, with consent, marketing
  • Analytics providers (e.g. Google Analytics) — for website performance monitoring

All third parties are required to handle your data securely and in accordance with applicable data protection law.

Data Retention

  • Order and transaction records: 7 years (UK legal requirement)
  • Customer account data: until account deletion is requested
  • Marketing preferences: until you withdraw consent

Your Rights

Under UK GDPR, you have the following rights:

  • Right of access — request a copy of the data we hold about you
  • Right to rectification — request correction of inaccurate data
  • Right to erasure — request deletion of your data ('right to be forgotten')
  • Right to restriction — request we limit how we use your data
  • Right to portability — receive your data in a structured, machine-readable format
  • Right to object — object to processing based on legitimate interest or for direct marketing

To exercise any of these rights, contact us at support@aldricvoss.com. We will respond within 30 days. You also have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We use cookies and similar tracking technologies to enhance your browsing experience:

  • Essential cookies: required for the website to function (cannot be disabled)
  • Analytics cookies: help us understand how visitors use our site
  • Marketing cookies: used to show relevant advertisements (only with your consent)

You can manage your cookie preferences via the cookie banner on your first visit to our site, or through your browser settings at any time.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. All transactions are encrypted using SSL/TLS technology. Payment data is processed by PCI DSS-compliant payment providers.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. For significant changes, we will notify you by email.