Privacy policy
Last updated: 26 July 2026
This policy explains what personal information [BUSINESS_NAME] ("we", "us") collects when you visit or buy from [STORE_DOMAIN], why we collect it, and what you can do about it.
What we collect
Information you give us
- To fulfil an order: your name, email address, shipping address, billing address and phone number.
- To answer a question: your name, email address, and anything you write in the message — including your car's make and model if you tell us.
- If you subscribe: your email address.
Information collected automatically
- Device and usage data: IP address, browser and version, time zone, operating system, the pages you viewed and how you arrived at the site. Collected through cookies and similar technologies.
- Order metadata: Shopify records the technical details of the transaction for fraud prevention.
What we never see
We do not receive or store your full card number. Payment details are captured directly by our payment processors — Shopify Payments and PayPal — and are handled under the PCI-DSS standard. We only ever see the last four digits, the card brand, and whether the payment succeeded.
Why we use it
| Purpose | Lawful basis (GDPR) |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Sending order and shipping notifications | Performance of a contract |
| Answering your support enquiries | Legitimate interests |
| Detecting and preventing fraud | Legitimate interests / legal obligation |
| Keeping tax and accounting records | Legal obligation |
| Marketing emails | Consent — withdrawable at any time |
| Analytics and advertising measurement | Consent |
Who we share it with
We do not sell your personal information. We share it only with the service providers we need to run the store:
- Shopify Inc. — hosts the store and processes orders. Shopify's privacy policy.
- Shopify Payments and PayPal — processes payments.
- Our fulfilment partner and the postal carriers they use — receives your name and shipping address so the parcel can reach you.
- Shopify Email — sends transactional and, if you opted in, marketing email.
- [ANALYTICS / ADVERTISING — e.g. Google Analytics, Meta Pixel, TikTok Pixel] — measures site usage and ad performance. Delete any you do not actually install.
We may also disclose information where we are legally required to, or to enforce our terms.
International transfers
Our providers operate globally, so your information may be processed in countries other than your own, including the United States. Where information leaves the EEA or UK, transfers rely on Standard Contractual Clauses or an equivalent safeguard.
How long we keep it
- Order records: 7 years, because tax law requires it.
- Support emails: 2 years.
- Marketing subscriptions: until you unsubscribe, then we keep a suppression record so we do not email you again by mistake.
- Analytics data: per the retention period set in each tool, typically 14 months.
Your rights
Depending on where you live, you can ask us to:
- give you a copy of the personal information we hold about you;
- correct it if it is wrong;
- delete it, where we are not legally required to keep it;
- stop using it for marketing — every marketing email also has an unsubscribe link;
- port it to another provider;
- object to processing based on legitimate interests.
Email vandro.digital@gmail.com and we will respond within 30 days. We may ask you to confirm your identity first.
If you are in the EU or UK and are not satisfied with our response, you can complain to your national data protection authority. In Australia, you can complain to the Office of the Australian Information Commissioner.
Cookies
We use cookies that are strictly necessary to run the store — keeping your cart, keeping you logged in, preventing fraud. These cannot be switched off.
[If you install analytics or advertising pixels, list them here and describe your consent banner. If you serve the EU or UK, a consent banner that blocks non-essential cookies until the visitor agrees is a legal requirement, not an optional extra.]
You can clear or block cookies in your browser settings, though parts of the checkout may stop working if you block all of them.
Children
This store is not directed at children and we do not knowingly collect information from anyone under 16. If you believe a child has given us their information, email us and we will delete it.
Changes
If we change this policy we will update the date at the top. Material changes will be announced on the site.
Contact
[BUSINESS_NAME]
ABN 28 784 151 285
[BUSINESS_ADDRESS]
Email: vandro.digital@gmail.com