At Vintage Youth, we are committed to protecting your personal data and ensuring your privacy. Our practices are fully compliant with the General Data Protection Regulation (GDPR), which sets a high standard for data protection and privacy in the European Union.

Key Principles of Our GDPR Compliance:

1. 1. Data Collection and Use: We only collect personal data that is necessary for processing your orders and providing a personalised shopping experience. This includes information such as your name, address, email, and payment details.
   2. Consent: We obtain your explicit consent before collecting or processing your personal data. You have the right to withdraw your consent at any time.
   3. Data Access and Portability: You have the right to access the personal data we hold about you. You can request a copy of your data or ask us to transfer it to another service provider.
   4. Data Correction and Deletion: If your personal data is incorrect or incomplete, you have the right to request correction. You can also request the deletion of your data under certain circumstances.
   5. Data Security: We implement robust security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction.
   6. Data Processing Agreements: We ensure that any third-party service providers we work with comply with GDPR standards and protect your data accordingly.
   7. Transparency and Communication: We are transparent about how we collect, use, and share your personal data. Our privacy policy provides detailed information about our data practices.

Your Rights Under GDPR:

• Right to Be Informed: You have the right to be informed about the collection and use of your personal data.

• Right of Access: You can request access to your personal data and obtain information about how it is processed.

• Right to Rectification: You can request corrections to any inaccurate or incomplete personal data.

• Right to Erasure: You can request the deletion of your personal data in certain circumstances.

• Right to Restrict Processing: You can request that we restrict the processing of your personal data in specific situations.

• Right to Data Portability: You can request that we transfer your personal data to another organisation or directly to you.

• Right to Object: You can object to the processing of your personal data in certain situations.

For more detailed information on how we protect your data and your rights, please refer to our full Privacy Policy. If you have any questions or concerns about our GDPR compliance, please contact us.