Privacy Policy

This Privacy Policy explains how Vibe Centre ("Vibe", "we", "us") collects, uses and protects your personal information when you shop with us or use our website. We are committed to handling your data lawfully, transparently and in line with UK GDPR and the Data Protection Act 2018.

1. Who we are

Vibe Centre ("we", "us", "our") operates vibecentre.com. We are the data controller responsible for your personal data.

Registered company name: Vibe Centre

Company number: 5167237 Registered office: 5 Salop Street, Bolton , BL2 1DZ VAT number: 834 9609 95 Contact for data matters: support@vibecentre.com

If you have any question about how we handle your information, email us at the address above and we will respond within 30 days.

2. What information we collect

Information you give us:

• Name
• Email address
• Delivery and billing address
• Telephone number
• Order and purchase history
• Account login details, if you create an account
• Any correspondence you send us

Payment information: Card payments are processed by our payment providers. We never see or store your full card number. We retain only the last four digits and the card type, for order identification and fraud prevention.

Information collected automatically:

• IP address
• Browser type and version, device type, operating system
• Pages viewed, time spent, referring website
• Cookie data (see our Cookie Policy)

Information from others: Our payment providers and fraud-prevention services may share risk assessment data with us in connection with your order.

3. Why we use your information, and our lawful basis

What we doWhyLawful basisProcess and deliver your orderTo fulfil our contract with youContractTake payment and issue refundsTo fulfil our contract with youContractSend order confirmations and delivery updatesTo fulfil our contract with youContractAnswer your enquiries and handle returnsTo fulfil our contract and to serve you properlyContract / Legitimate interestsPrevent and detect fraudTo protect our business and our customersLegitimate interestsImprove our website and product rangeTo run and develop our businessLegitimate interestsSend marketing emailsTo tell you about products you may wantConsent (or soft opt-in for existing customers)Keep accounting and tax recordsTo meet our legal dutiesLegal obligationHandle legal claimsTo establish, exercise or defend legal claimsLegitimate interests

4. Marketing

We will only send you marketing emails if you have opted in, or if you have bought from us before and we are telling you about similar products.

You can unsubscribe at any time using the link in any marketing email, or by emailing support@vibecentre.com. Withdrawing consent is free and takes effect promptly.

Unsubscribing from marketing does not stop transactional messages such as order confirmations and delivery notifications, which we must send to fulfil your order.

5. Who we share your information with

We share your data only where necessary, with:

• Shopify Inc. — our e-commerce platform, which hosts our store and processes order data on our behalf
• Payment providers — to take payment and process refunds
• Delivery partners and couriers — to deliver your order (name, address, and where needed phone number or email for delivery notifications)
• Email and marketing platforms — to send communications you have consented to
• Our accountants and professional advisers — for tax, audit and legal purposes
• Fraud prevention services — to verify orders

We do not sell your personal data to anyone.

We may also disclose your data where we are legally required to, for example to law enforcement, HMRC, or a court.

6. Transfers outside the UK

Some of our service providers, including Shopify, process data outside the United Kingdom.

Where data is transferred outside the UK, we ensure it is protected by an appropriate safeguard — either a UK adequacy decision, or the UK International Data Transfer Agreement or Addendum. You can request details of these safeguards by emailing support@vibecentre.com.

7. How long we keep your information

DataRetention periodOrder and transaction records6 years from the end of the relevant financial year (HMRC requirement)Customer account dataWhile your account is active, plus 12 monthsMarketing consent recordsUntil you withdraw consent, plus 2 years as proof of consentCustomer service correspondence3 yearsAbandoned cart data30 daysWebsite analytics data26 monthsCCTV, if applicable at our premises30 days

After these periods we delete or anonymise the data.

8. Your rights

Under UK data protection law you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — have inaccurate data corrected
• Erasure — ask us to delete your data, where we have no overriding reason to keep it
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a portable format, or have it transferred
• Object — object to processing based on legitimate interests, and to direct marketing at any time
• Withdraw consent — where we rely on consent
• Not be subject to solely automated decisions that have a legal or similarly significant effect on you

To exercise any of these rights, email support@vibecentre.com. We will respond within one month. There is normally no charge.

9. Automated processing

Our payment and platform providers run automated fraud-screening on orders. This may result in an order being flagged or declined. If your order is declined and you believe this is wrong, contact us at support@vibecentre.com and a person will review it.

10. Security

We take appropriate technical and organisational measures to protect your data, including encrypted connections (SSL/TLS) across our website, restricted staff access on a need-to-know basis, and use of reputable providers who maintain their own security standards.

No transmission over the internet is completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and, where the risk is high, notify you directly.

11. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at support@vibecentre.com so we can try to put it right.

You also have the right to complain to the Information Commissioner's Office:

Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF Telephone: 0303 123 1113 Website: ico.org.uk

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Where changes are significant, we will notify you by email or by a notice on our website.