Privacy policy

Your privacy matters to us. At Vitsœ Limited (Vitsœ, we or us), we take the security of your personal data seriously, and we are committed to being transparent about what information we collect and how we use it.

This notice explains how we handle your personal data whenever you interact with us or order our products and services.

It also sets out your rights, including your right to object to some of our processing activities. You will find more details about your rights and how to exercise them in the section called ‘your choices and rights’.

We may also provide you with additional information when we collect personal data, where we feel it would be helpful and timely.

We collect and process personal data about you when you visit our website at vitsoe.com, log in and use My Vitsœ, interact with our social media pages and advertisements, speak with our planning teams or customer services, participate in our events and demonstrations, or visit our stores and business premises.

This includes:

Your first name, last name, email address and phone number.

Your username and password.

Your order history, information you provide for installation and design purposes, including photographs or design plans.

Your interests, preferences, feedback, survey responses, and any correspondence and communications with us.

Your payment and delivery details, including your payment card details, billing and delivery addresses, and transaction history. Please note that we partner with Stripe, who securely handle your credit and debit card information.

Payment validation data, including the verification of sort codes, account numbers and card details to prevent fraud.

Your communication and marketing preferences, including any consents you have given us.

Data related to the browser or device you use to access our website, including your device's IP address, browser type and version, time zone setting, browser plug-in types and versions, operating systems, unique device identifiers and advertising identifiers. We also collect data about your visit and interactions with the website, My Vitsœ and advertisements, including the content you view and interact with, and the dates and times of access.

Some of this information is collected using cookies and related technologies, which are often provided by third-party providers. To learn more, please see our cookies policy.

We use the Meta Pixel, provided by Meta Platforms Ireland Limited (Meta), on our website. We and Meta are joint controllers for the data collected through the Pixel. Meta is responsible for facilitating data subject rights under Articles 15-20 of the GDPR, and we are responsible for providing you with information about the joint processing under Articles 13 and 14 GDPR. Further information, including how Meta enables you to exercise your data protection rights, and subsequently processes your information as an independent data controller can be found in their privacy notice: facebook.com/about/privacy. We use the Pixel to measure ad performance and personalise your experience on our website and Meta's platforms. You can withdraw your consent for the use of the Meta Pixel at any time through our website's cookie settings.

We will only use your personal data for the purposes and legal bases set out below:

It is necessary for us to process your personal data in order to perform our contract with you, or to take steps at your request prior to entering into a contract with you.

It is necessary for us to process your personal data to perform our contract with you.

This may include sending you service messages via email. We have a legitimate interest in managing our business, providing customer service and resolving any issues or complaints.

When we have a legal obligation under UK law, we process the data in order to comply with applicable law and regulations. When we have a legal obligation under laws outside the UK or our processing is not pursuant to a legal obligation, we have a legitimate interest in protecting our business interests and legal rights, and the interests and legal rights of our users.

Your consent in relation to direct marketing activities when required under law. Otherwise, we have a legitimate interest in promoting our products and services, as well as keeping you informed about updates and offerings that may be relevant to you.

Your consent. We have a legitimate interest in operating our site and improving its operation.

We have a legitimate interest in understanding our business and being able to report to management.

Consent. We have a legitimate interest in understanding our customers and improving our service to them.

There are instances where we have a legitimate interest in using your data. Our legitimate interest will vary depending on what we are using your data for, and we explained above what the interest is and how it relates to the processing operations that we are carrying out.

We may share your data with the following categories of recipients:

We share your data with other Vitsœ entities in the EU and the US to fulfil orders for products or services as needed.

We share your data with service providers, who will process it on our behalf for the purposes identified above. In particular, we use third-party technologies and platform providers for website hosting, maintenance, analytics, other supply-chain partners and email marketing.

We also share your data with banks and our payment service provider (such as Stripe) for the purpose of payments, transaction processing and fraud prevention.

We also share your data with our worldwide logistics and delivery providers to provide your products.

We also use AI-assisted tools to help us query and analyse data held in our internal business systems. Where these tools process your personal data on our behalf, we ensure the right contractual protections are in place – including a Data Processing Agreement and, where your data is transferred outside the UK, Standard Contractual Clauses. We only share the minimum data necessary for the task, and where a query can be answered without personal data, we ensure it is.

We share your data with legal advisors, accountants, auditors and other professional advisors as needed.

We may share your data with government authorities, court, regulatory authorities and law enforcement officials if required by law or to prevent, investigate and report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law.

We share information with third parties including advertising, social media and search engine partners. This includes sharing your data in some cases with social media and search engine partners (including Meta and Google) so that they may recognise your devices and deliver interest-based content and advertisements.

In the event that Vitsœ is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser's adviser and will be passed to the new owners of the business.

Your personal data is primarily stored within the UK. However, we may transfer your data to other Vitsœ entities in the EU and the US and some third parties (as described above), which host or access personal data outside of these jurisdictions. If that third party is in a country which is not subject to regulations from the UK government permitting data transfers to that country without further safeguards, we take additional steps to ensure your personal data is adequately protected, including by adopting standard contractual clauses, unless the law provides a relevant exemption from these requirements.

You have the following rights:

This enables you to receive a copy of your personal data.

This enables you to correct any inaccurate or incomplete personal data we hold about you.

This enables you to ask us to delete your personal data in certain circumstances.

This enables you to ask us to halt the processing of your personal data in certain circumstances.

This enables you to object to us processing your personal data on the basis of our legitimate interests (or those of a third party), including processing for direct marketing purposes or profiling for purposes of direct marketing, or where we are performing a task in the public interest. Your objection will be upheld, and we will cease processing your personal data, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defence of legal claims that may be brought by or against us.

This enables you to request us to transmit personal data that you have provided to us to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party, where technically feasible.

These rights may be limited, for example, if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep. If you wish to exercise any of these rights, please contact us at the contact details set out below.

Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We may, however, have other legal grounds for processing your data for other purposes, such as those set out above.

In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt out of direct marketing or profiling we carry out for direct marketing at any time. You can do this by following the instructions in the communication, which is an electronic message, or by contacting us using the details set out below.

We do not use your personal data to make any solely automated decisions, including profiling, which produce legal or significantly similar effects.

Where we collect personal data to administer our contract with you or to comply with our legal obligations, this is mandatory, and we will not be able to manage our contractual relationship without this information. In all other cases, provision of the requested personal data is optional, but may affect your ability to receive our services.

We process personal data as necessary for us to continue to provide you with our products and services. These vary based on the type of personal data, service and country. Where we process your personal data, we take necessary steps to destroy your personal data when it is no longer necessary for the purposes they were collected, or as otherwise required by law, whichever is earlier. For instance, payment-card details are only collected for specific transactions and are not held beyond processing each payment.

We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal data.

The data controller for your personal data is Vitsœ. If you have questions about this privacy notice or wish to contact us for any reason in relation to our personal data processing, please contact us at gdpr@vitsoe.com.

Vitsœ is a company registered in England and Wales. Registered office:

Old Warwick Road,
Royal Leamington Spa,
CV31 3NT
Company number 2014122.
VAT number GB 437 2545 47.