Privacy Policy

1. Introduction
This Privacy Policy explains how Shampvio (“Shampvio”, “we”, “us”, or “our”) collects, uses, stores, and processes personal data when you visit www.shampvio.com (“Website”) or place an order through the Website.
This Privacy Policy has been prepared in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK GDPR where applicable, and other relevant data protection legislation.

2. Data Controller
For the purposes of applicable data protection legislation, the Data Controller is:
Business Name: Shampvio
Website: www.shampvio.com
Email: handheld@shampvio.com

3. Personal Data We Collect
Depending on your interaction with our Website, we may collect the following categories of personal data:

Full name;

Billing address;

Delivery address;

Email address;

Telephone number;

Order information;

Communication records when you contact us;

Device and browser information;

IP address;

Cookie preferences where applicable.

We collect only the information strictly necessary for the purposes described in this Privacy Policy and for lawful e-commerce operations.

4. How We Use Personal Data
Your personal data may be processed for the following legitimate business purposes:

Processing, fulfilling, and managing orders;

Providing customer support and responding to inquiries;

Communicating regarding your order status;

Processing secure payments and preventing fraudulent transactions;

Complying with applicable legal and accounting obligations;

Maintaining website functionality and security;

Improving the operation of the Website through aggregated usage information where consent has been provided.

5. Legal Basis for Processing
Where required by applicable law, personal data is processed on one or more of the following legal bases:

Performance of a contract (e.g., fulfilling your order);

Compliance with legal obligations (e.g., tax and accounting laws);

Legitimate interests where those interests are not overridden by your rights (e.g., fraud prevention);

Consent, where consent is required by law.

6. Payment Processing and Security
Payments made through this Website are processed by Stripe, which acts as a secure payment gateway for our transactions.
When you submit payment information during checkout, your sensitive payment data is encrypted and transmitted directly to Stripe in accordance with Stripe’s Privacy Policy and applicable legal requirements. All payment processing is conducted in compliance with Payment Card Industry Data Security Standards (PCI-DSS).
Shampvio does not collect, process, or store your complete payment card information on our servers.

7. Sharing Personal Data
We strictly do not sell, rent, or trade your personal data to any third parties. We may share personal data only where necessary for operational purposes, including:

Payment processing and fraud prevention through Stripe;

Delivery and fulfillment of customer orders via our trusted shipping partners;

Compliance with legal obligations;

Professional advisers where required by law.

Personal data is never disclosed for purposes inconsistent with this Privacy Policy.

8. International Transfers
Where personal data is transferred outside the European Economic Area (EEA) or the United Kingdom, such transfers are carried out securely and in accordance with applicable data protection legislation using recognised legal transfer mechanisms.

9. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected or to comply with applicable legal obligations.
Typical retention periods include:

Customer enquiries: Up to 24 months after the enquiry has been resolved.

Order and Payment records: Up to 7 years where required for accounting, tax, or legal compliance.

Cookie consent records: Up to 12 months.

Website analytics data: Up to 13 months where consent has been provided.

Where data is no longer required, it will be permanently deleted or securely anonymised.

10. Cookies
Our Website uses cookies in accordance with our Cookie Policy. Non-essential cookies are used only after you have provided your explicit consent through our Cookie Banner. You may change your cookie preferences at any time.

11. Your Rights
Subject to applicable law, you have the right to:

Request access to your personal data;

Request correction of inaccurate or incomplete personal data;

Request deletion of personal data (“Right to be forgotten”) where applicable;

Request restriction of processing;

Object to certain processing activities;

Request data portability where applicable;

Withdraw consent where processing is based on consent.

Requests may be submitted using the contact details provided below. We will respond to all legitimate requests within the legally required timeframe.

12. Data Security
We implement industry-standard technical, organisational, and administrative measures to protect personal data against unauthorised access, alteration, disclosure, or accidental loss. This includes utilizing Secure Sockets Layer (SSL/TLS) encryption technology to safeguard data transmitted across our Website, ensuring a secure browsing and checkout experience.

13. Children’s Privacy
This Website is strictly not intended for children under the age of 18. We do not knowingly collect personal data from individuals under 18. If we become aware that we have inadvertently collected personal data from a child under 18 without verified parental consent, we will take immediate steps to delete such information from our records.

14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, operational, or administrative changes. Any revised version will be published on this page together with the updated effective date.

15. Contact Us
If you have any questions regarding this Privacy Policy, your data rights, or the processing of personal data, please contact:
Data Controller: Shampvio
Website: www.shampvio.com
Email: handheld@shampvio.com