Privacy Policy for vegan.co.uk (Effective Date: [27 March 2026] | Last Updated: [27 March 2026])

Vegan.co.uk (“we”, “us”, or “our”) is an online marketplace based in the United Kingdom that connects buyers with independent sellers offering vegan products. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you visit vegan.co.uk, create a seller account, browse or purchase products, or otherwise interact with our services (the “Platform”).

We are committed to protecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy applies to both buyers (customers) and sellers on the Platform. If you are a seller, additional details about data processing may apply in your seller dashboard or terms.

Who we are (Data Controller) Vegan.co.uk is operated by [Insert your full legal company name, e.g., Vegan Marketplace Ltd], a company registered in the United Kingdom with registered office at [Insert full UK address]. Our ICO registration number is [Insert if applicable; otherwise remove or note “We are registered with the Information Commissioner’s Office where required”]. Contact: [Insert email, e.g., service@vegan.co.uk] | [Insert phone if desired].

1. Personal Data We Collect

We collect personal data directly from you, automatically from your device, and sometimes from third parties (e.g., payment processors or public sources). “Personal data” means any information that identifies you or could do so.

From Buyers (Customers):

• Account/registration data: Name, email address, password, phone number (optional).
• Order and shipping data: Delivery address, billing address, order details, and any notes.
• Payment data: Limited details routed through third-party processors (we do not store full card numbers; see Section 5).
• Communication data: Messages, support tickets, reviews, or feedback.
• Usage data: Browsing history, search queries, IP address, device type, browser details, and cookies/tracking data.

From Sellers:

• Account and business data: Name, business name, email, phone, address, VAT/tax details (if applicable), PayPal or bank details for payouts.
• Product and sales data: Listings, descriptions, images, inventory, sales history, and performance metrics.
• Communication and verification data: Messages with buyers, identity verification documents (if required for compliance).
• Usage data: Same as buyers (IP, device, cookies).

Automatically Collected (All Users):

• Log data, device information, location data (approximate, via IP), and analytics data.
• Cookies and similar technologies (see our separate Cookie Policy, linked below).

We do not knowingly collect sensitive personal data (e.g., health data beyond vegan product preferences) unless you voluntarily provide it in product reviews or communications. We do not collect data from children under 16; the Platform is not intended for minors.

2. How and Why We Use Your Personal Data (Purposes and Legal Basis)

We only process your personal data where we have a lawful basis under UK GDPR:

We will not use your data for automated decision-making (including profiling) that produces legal or similarly significant effects unless you have explicitly consented.

3. How Long We Keep Your Personal Data

We retain your data only as long as necessary for the purposes above or to meet legal obligations (e.g., 6 years for tax records).

• Active accounts: Retained while the account exists.
• Closed accounts: Data deleted or anonymised within 12–24 months (except where law requires longer retention).
• Order data: Kept for at least 6–7 years for accounting and warranty purposes.

4. Sharing Your Personal Data

We do not sell your personal data to third parties for marketing. We share data only where necessary:

• With Sellers (for Buyers’ Data): When you place an order, we share your name, shipping address, contact details, and order information with the specific seller so they can fulfil and ship the product. Sellers are independent data controllers for their own use of this data (they have their own privacy obligations).
• With Buyers (for Sellers’ Data): Limited business contact details may be shared if needed for order-related communication.
• Payment Processors: PayPal (or your chosen processor) for multiparty payments — they receive necessary transaction data directly.
• Service Providers: Hosting providers, analytics tools (e.g., Google Analytics), email services, shipping carriers, and fraud-prevention tools. These act as our data processors under strict contracts.
• Legal and Regulatory: Where required by law, to protect our rights, or in business transfers (e.g., if we are acquired).
• Affiliates/Partners: Only with your consent or where strictly necessary for Platform features.

All third parties are required to protect your data and use it only for the purposes we specify.

5. International Data Transfers

Our primary operations are in the UK. Some processors (e.g., PayPal, Google) may be based outside the UK/EEA. Where transfers occur, we ensure appropriate safeguards are in place, such as UK-approved Standard Contractual Clauses or adequacy decisions.

6. Security of Your Personal Data

We use appropriate technical and organisational measures (encryption, access controls, secure servers) to protect your data. However, no system is 100% secure. If a data breach occurs that affects your rights, we will notify you and the ICO where required by law.

7. Your Rights Under UK GDPR

You have the following rights (subject to some exceptions):

• Access: Request a copy of your data.
• Rectification: Correct inaccurate or incomplete data.
• Erasure (“Right to be Forgotten”): Request deletion (e.g., when data is no longer needed).
• Restriction: Limit how we process your data.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Portability: Receive your data in a structured, machine-readable format and transfer it to another controller.
• Withdraw Consent: At any time where consent is the basis (this does not affect prior processing).
• Complaint: Lodge a complaint with the Information Commissioner’s Office (ICO) at www.ico.org.uk.

To exercise any right, email us at service@vegan.co.uk with proof of identity. We respond within one month (extendable in complex cases).

8. Cookies and Tracking Technologies

We use cookies and similar technologies for essential Platform functions, analytics, and (with consent) personalised advertising. See our Cookie Policy [link to your separate cookie policy page] for full details and how to manage preferences.

9. Third-Party Links and Services

Our Platform may contain links to third-party sites (e.g., seller websites or payment gateways). We are not responsible for their privacy practices — please read their policies.

10. Changes to This Privacy Policy

We may update this policy to reflect changes in law or our practices. We will post the updated version here with a new “Last Updated” date. Material changes will be notified via email (where we have your address) or on the Platform.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact: Email: service@vegan.co.uk 

Important Notice: This is a template Privacy Policy tailored for a UK-based online marketplace like vegan.co.uk. It is provided for informational purposes only and is not legal advice. Laws and best practices can change. We strongly recommend having a qualified UK lawyer or data protection specialist review and customise this document to your exact operations (including your specific payment setup, any analytics tools, and seller agreements). You should also register with the ICO if you haven’t already and consider using the official ICO Privacy Notice Generator for additional guidance.

You can copy and paste this into your website (ideally as a standalone page linked in the footer). Pair it with a separate Cookie Policy and clear Terms of Service for sellers and buyers. Let me know if you need adjustments, a Cookie Policy draft, or help with seller-specific notices!