Privacy Policy

This Privacy Policy explains how VITIUM LTD (“VITIUM,” “we,” “us,” or “our”) collects, uses, stores, and shares personal information when you visit vitiumtattoo.com (the “Website”) or otherwise interact with us. We are committed to processing your data fairly, lawfully, and transparently in accordance with the UK GDPR, EU GDPR, and applicable US state privacy laws (including the CCPA).

1. Who we are

VITIUM LTD is the data controller responsible for your personal data.

• Registered address: 74a Hayes Road, Bromley, BR2 9AB, United Kingdom
• Company number (England & Wales): 13745319
• VAT number: GB513222540
• Contact: info@vitiumtattoo.com

2. Personal data we collect

Depending on how you interact with us, we may collect the following:

• Identity & contact data: name, email address, phone number, studio name, country, shipping/billing address (for wholesale enquiries).
• Transactional data: order details handled via Amazon and TikTok Shop. We do not process payments on this Website; those marketplaces collect payment and shipping information directly.
• Communications: messages you send through our contact form or by email.
• Marketing preferences: if you subscribe to our newsletter, your email address and consent state.
• Technical & usage data: IP address, browser type, device info, pages visited, referrer, and cookie identifiers (see our Cookie Policy).

3. How we collect your data

• Directly: when you submit a form, sign up to our newsletter, or email us.
• Automatically: via cookies and similar technologies when you use the Website.
• From third parties: order and review data surfaced by Amazon and TikTok Shop for orders made on those platforms.

4. Why we use your data (legal basis)

• To operate the Website and respond to enquiries — legal basis: legitimate interest.
• To process wholesale applications — legal basis: steps prior to entering a contract.
• To send marketing communications (newsletter, drops) — legal basis: your consent. You can withdraw consent at any time via the “unsubscribe” link in every email.
• To improve the Website using anonymous analytics — legal basis: your consent (via the cookie banner).
• To comply with legal, tax, and accounting obligations — legal basis: legal obligation.

5. Who we share data with

We only share data with trusted service providers for the purposes described above:

• Amazon & TikTok Shop — marketplaces fulfilling orders placed through their platforms.
• Email marketing provider (e.g. Mailchimp) — newsletter delivery, if you have subscribed.
• Hosting & analytics providers — e.g. Vercel, Google Fonts. See our Cookie Policy for the current list.
• Professional advisers, regulators, and authorities — where legally required.

We do not sell your personal data. If you are a California resident, see Section 9 for your CCPA rights, including the right to opt out of any “sharing” for cross-context behavioural advertising.

6. International transfers

Some of our service providers are based outside the UK/EEA (notably in the United States). When we transfer personal data internationally we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or the UK Addendum, and the EU-U.S. Data Privacy Framework where applicable.

7. How long we keep it

• Enquiries / contact form submissions: up to 24 months after our last interaction.
• Wholesale applications: up to 6 years for tax and accounting purposes.
• Newsletter subscription: until you unsubscribe.
• Cookies / analytics: see our Cookie Policy.

8. Your UK / EU rights

If the UK GDPR or EU GDPR apply to you, you have the right to:

• Access a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Request erasure (“right to be forgotten”).
• Restrict or object to our processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time where we rely on it.
• Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner’s Office (ICO); in the EU, your local data protection authority.

To exercise any of these rights, email info@vitiumtattoo.com. We respond within one month.

9. California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and (if applicable) sell or share.
• Delete personal information we hold about you, subject to exceptions.
• Correct inaccurate personal information.
• Opt out of “sale” or “sharing” of personal information for cross-context behavioural advertising. We do not sell personal information; if we ever share for such advertising, you can opt out via the cookie banner or by emailing us.
• Limit the use of sensitive personal information. We do not process sensitive personal information for purposes requiring this right.
• Non-discrimination for exercising your rights.

Email info@vitiumtattoo.com to exercise these rights. We may need to verify your identity.

10. Cookies

Our Cookie Policy explains the cookies we set, their purposes, and how you can manage or withdraw consent at any time via the cookie preferences in the footer.

11. Security

We use appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

12. Children

Our products and Website are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The “effective” date at the top tells you when it was last revised. Material changes will be notified via a banner on the Website.

14. Contact us

VITIUM LTD
74a Hayes Road, Bromley, BR2 9AB, United Kingdom
info@vitiumtattoo.com