Privacy policy
Last updated: August 2026
This Legal Notice and Privacy Policy explains how Vondieri London collects, uses, stores and protects personal information when you visit our website, place an order or otherwise interact with us.
We process personal information in accordance with applicable UK data protection and privacy legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 (PECR) and, where applicable, the Data (Use and Access) Act 2025.
1. Who We Are
Vondieri London is the trading name used for this online store.
The data controller responsible for your personal information is:
Email: info@vondieri.com
If the data controller is established outside the United Kingdom and UK law requires the appointment of a UK representative, the representative's details will also be provided here:
UK Representative: [INSERT IF APPLICABLE]
For any question relating to this Privacy Policy or the way we use your personal information, contact us at info@vondieri.com.
2. Personal Information We Collect and Why
Depending on how you interact with Vondieri London, we may collect the following categories of personal information:
| Information | Purpose | Lawful basis |
|---|---|---|
| Name, delivery address, billing address, email address and telephone number | Processing and delivering your order and communicating with you about it | Performance of a contract |
| Order, purchase, return and transaction information | Managing purchases, returns, refunds and customer service | Performance of a contract |
| Payment and transaction information | Processing payments and preventing fraudulent transactions | Performance of a contract, legal obligations and legitimate interests |
| Customer service communications | Responding to questions, complaints, returns or other requests | Performance of a contract and legitimate interests |
| Email address and marketing preferences | Sending promotional communications where permitted | Consent and/or legitimate interests where permitted by applicable direct-marketing rules |
| Device, browser, IP address and security information | Website security, fraud prevention and technical operation | Legitimate interests |
| Cookie, analytics and browsing information | Understanding and improving our website and, where permitted, personalising content | Consent, legitimate interests and/or applicable PECR exemptions |
| Information required for accounting, tax, legal or regulatory purposes | Complying with legal obligations | Legal obligation |
| Fraud and risk information | Detecting or preventing fraudulent transactions, abuse and security threats | Legitimate interests and, where applicable, recognised legitimate interests |
We only collect personal information that is reasonably necessary for the relevant purpose.
Where information is required in order for us to fulfil an order, failing to provide it may mean that we cannot complete your purchase or provide the requested service.
3. Marketing Communications
Where you have subscribed to our marketing communications, we may use your email address or other contact information to send you information about:
-
new products;
-
promotions;
-
special offers;
-
collections;
-
discounts; and
-
other Vondieri London news.
Where UK law permits us to contact existing customers without obtaining a new express marketing consent, we may do so in accordance with the applicable requirements of PECR.
You can opt out of marketing communications at any time by:
-
clicking the unsubscribe link contained in our marketing emails; or
-
contacting us at info@vondieri.com.
Opting out of marketing does not prevent us from sending transactional communications necessary to fulfil an order, process a refund or respond to a customer service request.
Withdrawal of consent does not affect processing carried out lawfully before consent was withdrawn.
4. Who We Share Personal Information With
We may share personal information with third parties where reasonably necessary to operate our business.
These may include:
-
ecommerce and website hosting providers;
-
payment processors and financial service providers;
-
delivery companies, couriers and fulfilment providers;
-
suppliers involved in fulfilling an order;
-
customer support providers;
-
IT, cloud hosting and cybersecurity providers;
-
analytics providers;
-
advertising and marketing platforms, where permitted;
-
email or SMS marketing providers;
-
accountants, lawyers and professional advisers;
-
fraud prevention and payment-security providers; and
-
public authorities, regulators or law-enforcement bodies where legally required.
We require service providers handling personal information on our behalf to protect that information appropriately and only process it for authorised purposes.
Vondieri London does not sell your personal information to third parties.
5. Cookies and Similar Technologies
Our website uses cookies, pixels and similar storage or access technologies.
These technologies may include the following categories.
Strictly Necessary Cookies
These are required for essential website functions such as:
-
maintaining your shopping basket;
-
processing checkout;
-
security;
-
fraud prevention;
-
maintaining user sessions; and
-
remembering essential actions during your visit.
Where these technologies are strictly necessary to provide a service you have requested, prior consent is not required.
Statistical and Analytics Technologies
We may use statistical technologies to understand how visitors interact with our website, for example which pages are visited, how users navigate through the store and how the website performs.
Where the requirements of a statutory exemption under PECR are satisfied, certain statistical technologies may be used without prior consent.
Where required, we will provide clear information about their use and a simple and free method of opting out.
Where the exemption does not apply, we will request your consent before using them.
Functionality and Preference Technologies
Certain technologies may be used to remember preferences or improve how the website appears or functions on your device.
Where permitted by applicable UK law, these technologies may be used without prior consent provided the relevant legal conditions are met and an appropriate opt-out mechanism is available.
Otherwise, we will obtain your consent.
Advertising and Marketing Technologies
Advertising, retargeting and behavioural marketing technologies may be used to measure campaigns or display more relevant advertising.
Where consent is required, these technologies will not be activated before you provide that consent.
You may accept, reject or adjust your choices through the cookie preference controls available on our website.
Withdrawing or refusing consent for non-essential cookies will not prevent you from accessing the core functions of the store.
Additional information about individual cookies, their providers, purposes and durations should be provided in our separate Cookie Policy or cookie-preference panel.
6. International Transfers
Some of the service providers used by Vondieri London may process or store personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we take appropriate steps to ensure that the transfer complies with UK data protection legislation.
Depending on the destination and circumstances, these measures may include:
-
UK adequacy regulations;
-
the UK International Data Transfer Agreement (IDTA);
-
the UK International Data Transfer Addendum to the EU Standard Contractual Clauses;
-
other legally recognised safeguards; or
-
an applicable statutory exception.
Where appropriate, we also assess the level of protection provided in the destination country and implement additional technical, contractual or organisational safeguards.
You may contact info@vondieri.com if you would like further information about the safeguards used for international transfers relating to your personal information.
7. How Long We Keep Personal Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, fraud-prevention and reporting obligations.
Retention periods vary depending on the type of information.
In general:
-
order and transaction records are retained for the period required by applicable accounting, tax and legal requirements;
-
customer-service and complaint records are retained for as long as reasonably necessary to resolve the matter and protect our legal interests;
-
marketing information is retained until you unsubscribe or we otherwise determine that it is no longer appropriate to contact you;
-
where you unsubscribe, we may retain limited information on a suppression list to ensure that your marketing preference is respected;
-
fraud and security records may be retained for an appropriate period to prevent and investigate abuse; and
-
cookie-related information is retained according to the periods stated in our Cookie Policy or cookie-preference panel.
We may retain information for longer where required by law, where a dispute exists or where it is necessary for the establishment, exercise or defence of legal claims.
8. Your Data Protection Rights
Depending on the circumstances and the lawful basis on which we process your information, UK data protection law may give you the right to:
-
request access to your personal information;
-
request correction of inaccurate or incomplete information;
-
request deletion of your personal information;
-
request restriction of processing;
-
object to certain processing;
-
request portability of certain information;
-
withdraw consent where processing relies on consent; and
-
obtain safeguards relating to certain automated decision-making.
Not every right applies in every situation.
To exercise a data protection right, contact us at:
We may need to request reasonable information to confirm your identity before processing your request.
We will handle requests within the periods required by applicable UK data protection law.
Your Right to Object
Where we process personal information on the basis of legitimate interests, you may have the right to object to that processing.
You have the right to object at any time to the use of your personal information for direct marketing purposes.
9. Automated Decision-Making and Fraud Prevention
We may use automated systems to help identify potentially fraudulent, suspicious or high-risk transactions.
Where we carry out solely automated decision-making that produces legal or similarly significant effects, we will do so only where permitted by applicable law and will provide the safeguards and information required by UK data protection legislation.
We do not use automated decision-making to make legally or similarly significant decisions about customers unless there is an appropriate legal basis for doing so.
10. How We Protect Your Information
We use reasonable technical and organisational measures designed to protect personal information against:
-
unauthorised access;
-
accidental loss;
-
misuse;
-
alteration;
-
unauthorised disclosure; and
-
destruction.
These measures may include access controls, secure payment systems, encryption, monitoring, authentication and appropriate contractual safeguards with service providers.
No internet transmission or electronic storage system can guarantee absolute security.
11. Data Protection Complaints
If you believe that we have handled your personal information incorrectly or failed to comply with applicable data protection law, you may submit a complaint directly to us.
Please contact:
Include sufficient information for us to understand and investigate your complaint.
We will acknowledge and handle data protection complaints in accordance with our obligations under applicable UK data protection law.
We aim to resolve privacy concerns directly wherever possible.
If you remain dissatisfied, you also have the right to raise a complaint with the UK's data protection supervisory authority:
Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
You may also obtain further information about complaints through the ICO's official website.
12. External Links
Our website may contain links to websites, services or platforms operated by third parties.
Vondieri London is not responsible for the privacy practices or content of third-party websites that we do not control.
We recommend reviewing the privacy information of any third-party website before providing personal information to it.
13. Legal Website Information
The Vondieri London name, website content, design, photographs, graphics, branding and other materials may be protected by intellectual property laws and may not be reproduced, distributed or commercially exploited without appropriate permission, except where permitted by law.
Users must not misuse this website, interfere with its security, attempt unauthorised access or use the website for unlawful or fraudulent purposes.
Nothing in this Legal Notice or Privacy Policy limits any statutory rights that cannot legally be excluded or restricted.
14. Changes to This Policy
We may update this Legal Notice and Privacy Policy from time to time to reflect:
-
changes to our business;
-
changes to our service providers;
-
changes to the way we process personal information; or
-
changes to legal or regulatory requirements.
Where changes are material, we will take reasonable steps to bring them to your attention.
The most recent version will always show the applicable Last updated date at the top of this page.
15. Contact
For questions about this policy, your personal information, exercising your rights or submitting a data protection complaint, contact:
Vondieri London
Email: info@vondieri.com