1. Introduction

Royal Vastar (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains what information we collect, why we collect it, how we use it and the rights you have in relation to your data when you visit royalvastar.com, contact us or place an order.

We handle personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully so you understand how and why we use your information.

2. Information We Collect

We collect information that you give to us directly when you place an order, contact us or use our website. This may include:

• Identity Data: First name, last name
• Contact Data: Email address, phone number, WhatsApp number
• Address Data: Delivery address and billing address
• Order Data: products purchased, order value, delivery details and payment method used
• Communication Data: Messages sent via email, Instagram DM, or WhatsApp
• Technical Data: IP address, browser type and pages visited, where collected through cookies or similar technologies

We do not knowingly collect special category data, such as health information, and we do not store full payment card details.

3. How We Collect Your Information

We may collect personal information through:

• Order forms and checkout processes on our website
• Emails, WhatsApp messages, and Instagram DMs you send to us
• Cookies and similar tracking technologies when you visit our website
• Interactions with our social media accounts

4. Legal Basis for Processing

Under UK GDPR, we only use your personal information where we have a lawful basis to do so. This will usually be one or more of the following:

• Contract: where we need your information to process, fulfil and deliver your order.
• Legitimate Interests: where it is necessary for running and improving our business, responding to enquiries and helping prevent fraud.
• Consent: where you have asked to receive marketing or have agreed to optional cookies.
• Legal Obligation: where we need to keep or share information to comply with the law.

5. How We Use Your Information

We use your personal information to:

• Process, fulfil and deliver your orders
• Send order confirmations, delivery updates and dispatch notifications
• Respond to enquiries and customer service requests
• Process returns, refunds, and complaints
• Improve our website and services
• Meet our legal, tax and accounting obligations
• Send marketing communications, where you have given consent

6. Sharing Your Information

We do not sell, trade or rent your personal information. We may share it only where necessary, including with:

• Delivery Partners: couriers or delivery partners who need your name, address and contact number to deliver your order.
• Payment Providers: secure payment providers who process transactions on our behalf. We do not store full payment card details.
• Professional or Legal Advisers: where this is needed for accounting, tax, legal or business purposes.
• Legal Compliance: where disclosure is required by law, regulation or court order.

Any third party we use must handle your information securely and only for the purpose for which it was shared.

7. Data Retention

We keep personal information only for as long as reasonably necessary for the purpose it was collected, including legal, tax, accounting and reporting requirements:

• Order and transaction records: normally retained for up to 7 years for tax and accounting record purposes
• Customer service communications: retained for 2 years
• Marketing consent records: retained until you withdraw consent

8. Cookies

Our website uses cookies and similar technologies to help the site work properly, remember preferences, understand how visitors use the site and improve our services. You can manage or block cookies through your browser settings. Some parts of the website may not work as intended if certain cookies are disabled.

9. Your Rights Under UK GDPR

Under UK GDPR, you have a number of rights in relation to your personal information, including:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your data in certain circumstances.
• Right to Restrict Processing: Request that we limit how we use your data.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at royalvastar@icloud.com. We will usually respond within one calendar month.

10. Data Security

We use appropriate technical and organisational measures to help protect your personal information from accidental loss, misuse, unauthorised access, disclosure or alteration. These include secure website connections and limiting access to personal information where possible.

No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

11. Third-Party Links

Our website may contain links to third-party websites, including social media profiles. We are not responsible for the content or privacy practices of those websites, and we recommend reading their privacy policies before sharing any personal information with them.

12. Children’s Privacy

Our products and services are not aimed at children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided information to us, please contact us so we can take appropriate steps.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date, so please check back periodically.

14. Contact & Complaints

For questions, requests or complaints about this Privacy Policy, please contact us:

If you are unhappy with our response, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.