Privacy Policy

Vintage and Vinyl – Privacy Policy

Last updated: 21 January 2026

1. Introduction

Welcome to Vintage and Vinyl. We are a UK‑based sole‑trader business specialising in new and used records. Your privacy is important to us, and this Privacy Policy explains what personal information we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

2. Information We Collect

a. Information You Provide

When you interact with us—through our website, placing an order, or contacting us—we may collect:

Name
Email address
Phone number
Delivery or billing address
Payment information (handled securely by payment providers; we do not store full card details)

b. Information Collected Automatically

We may automatically collect:

IP address
Device type, browser type, operating system
Pages visited, time spent on the site, referring URLs
Cookies and similar tracking tools

This helps us improve site performance and customer experience.

3. How We Use Your Information

We use your information to:

Process and fulfil orders
Send order confirmations, updates, and customer service messages
Deliver your purchases
Improve our website and services
Send marketing emails if you have opted in (unsubscribe at any time)

We only process your data when legally permitted—such as fulfilling a contract, complying with a legal requirement, or with your consent.

4. Sharing Your Information

We do not sell your personal information.

We may share limited information with trusted third‑party service providers, including:

Payment processors (e.g., PayPal, Stripe)
Delivery companies (e.g., Royal Mail)
Website hosting, plugins, and analytics services

These providers only receive the data necessary to perform their services.

5. Cookies

Vintage and Vinyl uses cookies to:

Enable essential site functions
Improve website performance
Analyse visitor behaviour

You can manage or disable cookies through your browser settings, but some site features may not function properly without them.

6. Your Rights (UK GDPR)

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate information
Request deletion of your data
Object to or restrict processing
Request data portability
Withdraw consent at any time
Be informed.

7. Data Security

We take reasonable technical and organisational precautions to protect your information. However, no online transmission is completely secure.

8. Data Retention

We keep your personal data only for as long as necessary to:

Complete your orders
Meet legal, tax, or accounting obligations
Resolve disputes

Information is securely deleted when no longer required.

9. External Links

Our website may include links to third‑party websites. We are not responsible for their content or privacy practices.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted here with an updated “Last updated” date.

11. Contact Us

For questions or data‑related requests, please contact:

Vintage and Vinyl
Email: hello@vintageandvinyl.co.uk

Phone: 01303 246715

Business Address: 57 The Old High Street, Folkestone, Kent CT20 1RN

Data Controller: Vintage and Vinyl (sole trader)

12. WooCommerce

Our website uses WooCommerce to operate our online store.

a. Information WooCommerce Collects

WooCommerce may collect:

Products viewed
Cart contents
Name, address, email, phone (for orders/accounts)
Payment information (via third‑party gateways; not stored by us)
IP address

b. How WooCommerce Uses This Data

WooCommerce uses your data to:

Process and fulfil orders
Maintain your basket and checkout session
Manage customer accounts
Detect and prevent fraud

c. WooCommerce Plugins and Extensions

We may use additional WooCommerce extensions (e.g., payment gateways, shipping tools).
They receive only the data required for their service.

d. WooCommerce Cookies

Used to:

Track items in your basket
Maintain checkout and session data
Support login/account functions

Disabling essential cookies may affect store functionality.

e. Data Storage

Order details, customer accounts, and related data are securely stored in our WooCommerce system as required for business and legal compliance.

13. PayPal

We use PayPal as a secure payment provider.

a. Information Shared With PayPal

We may share:

Name
Billing and delivery address
Email address
Order total and item details
IP address

PayPal may collect additional information directly (e.g., login or banking details).
We do not receive or store your PayPal password or full payment details.

b. How PayPal Uses Your Information

PayPal processes your data to:

Verify identity
Process payments
Prevent fraud
Meet financial regulations

PayPal acts as an independent data controller.

c. PayPal’s Privacy Policy

https://www.paypal.com/webapps/mpp/ua/privacy-full

d. Fraud Prevention

PayPal may use automated tools to detect fraud, such as:

Device checks
IP monitoring
Transaction pattern analysis

14. Royal Mail

We use Royal Mail as our primary delivery provider.

a. Information Shared With Royal Mail

To deliver your order, we may share:

Your name
Delivery address
Contact details (email/phone, if needed for delivery updates)
Order or parcel details

Only necessary information is provided.

b. How Royal Mail Uses This Information

Royal Mail uses the information to:

Generate shipping labels
Deliver your parcel
Provide tracking updates (where available)
Manage lost, delayed, or returned items

Royal Mail acts as a separate data controller.

c. Royal Mail’s Privacy Policy

https://www.royalmail.com/privacy-policy

d. Tracking and Notifications

Royal Mail may send:

Delivery updates
Estimated delivery times
Requests for additional delivery instructions

Based on shared delivery information.

e. International Orders

For international shipments, Royal Mail may share data with local postal systems and customs authorities, including:

Name and address
Item description and value

This is required for customs and regulatory compliance.