Privacy and cookies
What we collect when you shop or write to us, why, and the rights you have over it.
Draft for the client's approval — replace before launch.
This notice explains what personal information we collect when you use this website, why we collect it, and the rights you have over it.
Who we are
Vintage Warehouse Glasgow is a trading name of R and BM Logistics Limited, a company registered in Scotland with company number SC769949. Our registered office is Bay E, Barclay Curle Complex, South Street, Glasgow G14 0BX. We are the data controller for the information described here. You can write to us about anything in this notice at the address above, or email us at [email protected].
What we collect and why
| What | Why we need it | Lawful basis |
|---|---|---|
| Your name, email address, billing address, delivery address and phone number when you place an order | To take payment, pack and deliver your order, send your order confirmation and invoice, and deal with any return or complaint | Performance of a contract with you |
| What you ordered, how much you paid and your invoice | To keep the accounting and VAT records the law requires | Legal obligation |
| Your account: your name, email address, a scrambled (hashed) copy of your password, and which orders are yours. We set it up with your first paid order and email you a link to choose a password | So you can see your orders and how they are getting on | Our legitimate interest in letting customers follow their orders |
| Your name, email address, phone number and message when you use the contact form | To reply to you | Our legitimate interest in answering enquiries |
| Technical information such as your IP address, browser and the pages you request, held in server logs | To keep the site secure and to detect and prevent fraud and abuse | Our legitimate interest in running a secure service |
Your name, email address, phone number, billing address and delivery address are needed to place and fulfil an order. If you do not provide them you will not be able to buy online, but you are always welcome to visit the warehouse instead.
We do not make automated decisions about you and we do not use your information for marketing. We only email you about an order you have placed or a message you have sent us.
Payments
Card payments are taken by Stripe on Stripe's own secure payment page. We never see or store your card number. Stripe Payments Europe Limited and Stripe Payments UK Limited act as our payment processor and also use some payment data for their own fraud-prevention and legal purposes, as described in the Stripe privacy policy. Stripe may transfer data outside the UK, including to the United States, under the safeguards set out in its privacy policy.
Who we share your information with
- Stripe, to process your payment.
- Our delivery courier, who receives your name, delivery address and phone number so that they can deliver your bag.
- Our email and web hosting providers, who process data on our behalf and only on our instructions.
- Google, only if you press "Load map" on our home or Find us page. Your browser then loads the map from Google, which receives your IP address and browser details and may set its own cookies, as described in the Google privacy policy. Google may process this information outside the UK, including in the United States, under its own safeguards.
- HMRC, our accountants and the courts, where the law requires it.
We do not sell your information and we do not share it with advertisers.
How long we keep it
| Information | Kept for |
|---|---|
| Orders and invoices | At least six years after the end of the financial year of the sale, as VAT law requires |
| Your account | Until you ask us to delete it (your orders and invoices are then kept for as long as the row above says, without the account) |
| Contact form messages | Twelve months on this website, then deleted automatically |
| Server logs | Only as long as we need them to keep the website secure and to look into faults or misuse |
| Website session data | Two hours after your last visit, even if you close your browser; expired sessions are then deleted from our server in routine clean-up |
When you place an order or send us a message, a copy is also emailed to our shop inbox.
Your rights
Under UK data protection law you have the right to ask for a copy of the information we hold about you, to have it corrected, to have it deleted where we no longer need it, to restrict how we use it, and to receive it in a portable format.
You also have the right to object to our use of your information where we rely on our legitimate interests, and we will stop unless we have a compelling reason to continue.
To exercise any of these rights, email us at [email protected]. We will reply within one month. There is no charge.
Complaints
If you are unhappy with how we handle your information, please tell us first so that we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
Cookies
This website uses only the cookies and browser storage it needs to work. None of them are used for advertising or to follow you across other websites, which is why there is no cookie banner. Google can set its own cookies only if you choose to load the map, as explained below the table.
| Name | Set by | Purpose | Type | Lifetime |
|---|---|---|---|---|
| vintage-warehouse-glasgow-session | This website | Keeps your basket together between pages and protects the forms you submit against forged requests | Strictly necessary | Two hours after your last visit |
| XSRF-TOKEN | This website | A security token that protects the forms you submit | Strictly necessary | Two hours after your last visit |
| remember_web_* | This website, staff sign-in only | Keeps a member of staff signed in to the admin when they tick "Remember me" | Strictly necessary | Up to 400 days |
| flux.appearance (browser storage) | This website, staff admin only | Remembers the light or dark look a member of staff chose for the admin | Functionality | Until it is cleared in the browser or System is chosen again |
| flux-sidebar-collapsed-desktop (browser storage) | This website, staff admin only | Remembers whether the admin menu is collapsed | Functionality | Until it is cleared in the browser |
Payment pages are provided by Stripe at checkout.stripe.com. Stripe sets its own cookies there for security and fraud prevention under the Stripe cookie policy. The map on our home and Find us pages is loaded from Google only after you press "Load map"; nothing is requested from Google until then. Once you load it, Google may set its own cookies, which we do not control, as described in how Google uses cookies.
Changes to this notice
We will update this page if the way we use your information changes.