Privacy Policy

1. Who We Are & How to Contact Us

Vettil Ltd operates the Site and is responsible for your personal data. If you have any questions about this Privacy Policy or wish to exercise your privacy rights, you can contact us at:

Email: help@vettil.com

2. Personal Information We Collect

When we say "personal information", we mean any information that relates to an identified or identifiable individual. We collect the following categories of personal information:

• Identity & contact details such as your name, email address, billing and shipping addresses, and phone number (if provided).
• Order & personalisation information such as the products you purchase, customisation details (e.g. text, names, dates), and images or artwork you upload so we can create your personalised items.
• Payment information such as payment method and transaction details. Your full card details are processed by our payment providers and are not stored by us in plain form.
• Technical & usage data such as IP address, browser type, device information, pages viewed, time spent on pages, and cookie identifiers.
• Marketing & communications preferences such as whether you wish to receive marketing emails from us and your unsubscribe choices.

Some information is collected directly from you (for example when you place an order or contact us), and some is collected automatically when you browse the Site (for example through cookies and similar technologies).

3. How We Use Your Information

We use your personal information for the following purposes and legal bases:

• To process and fulfil your orders – including creating your personalised designs, processing payments, arranging shipping, and providing customer support. (Legal basis: performance of a contract.)
• To communicate with you – for example to send order confirmations, shipping updates, and responses to your enquiries. (Legal basis: performance of a contract and our legitimate interests.)
• To operate, improve, and secure our Site – such as by monitoring usage, troubleshooting, and preventing fraud. (Legal basis: our legitimate interests in running and protecting our business.)
• For marketing – such as sending you information about new products or offers, where permitted. (Legal basis: consent where required, or our legitimate interests in promoting our business. You can opt out at any time.)
• For legal and regulatory purposes – such as keeping records for tax and accounting, and complying with requests from authorities. (Legal basis: compliance with legal obligations.)

4. Uploaded Images & Content

A key part of our service is turning your photos and artwork into personalised products. We treat your uploaded content with care.

• We use the images and content you upload only to design, produce, and deliver your order, to provide customer support, and for internal quality control and training.
• We do not use your uploaded images in our marketing, social media, or advertising without your explicit consent (for example, where you clearly agree that we can share your photo).
• By uploading content, you confirm that you have the right to use it and that any individuals shown have given appropriate consent.

5. Sharing Your Information

We share your personal information only when necessary, with trusted third parties that help us provide our services:

• Shopify, which hosts our store and processes data for orders, payments, and store operations. You can read how Shopify handles data here: https://www.shopify.com/legal/privacy.
• Payment providers, to securely process your payments and refunds.
• Shipping and fulfilment partners, to produce, package, and deliver your orders.
• IT, analytics, and professional service providers, who assist us with website operation, analytics, accounting, and legal services.
• Authorities and law enforcement, where required by law or necessary to protect our rights or the rights of others.

We do not sell your personal data.

6. International Transfers

Shopify and some of our other service providers may store or process your data outside the UK and EEA, including in Canada and the United States. Where this happens, we ensure that appropriate safeguards are in place, such as adequacy decisions or Standard Contractual Clauses approved by relevant authorities.

7. Cookies & Similar Technologies

Our Site uses cookies and similar technologies to keep your shopping basket active, remember your preferences, improve site performance, and support security and analytics. Some cookies are essential, and others are used for analytics and marketing.

You can control cookies via your browser settings and, where required, via our cookie banner when you first visit the Site. Blocking certain cookies may affect site functionality.

8. How Long We Keep Your Data

We keep your personal information only for as long as necessary for the purposes described above or as required by law. For example:

• Order and invoice data is typically kept for up to 6 years to comply with tax and accounting requirements.
• Uploaded images and design files are normally kept for up to 24 months after your order is fulfilled, to help with re-orders, quality control, and customer support, unless we need them longer for legal reasons.
• Marketing data is kept until you unsubscribe or we stop using that channel.

9. Your Rights (UK & EU/EEA)

Under UK and EU data protection law, you may have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data in certain circumstances.
• Request restriction of processing in certain cases.
• Object to processing based on our legitimate interests, including direct marketing.
• Request data portability, where applicable, so your data can be provided in a structured, commonly used format.

To exercise any of these rights, please email us at help@vettil.com.

You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local data protection authority in the EU/EEA or Ireland.

10. Minors

Our Site is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.