Privacy Policy

This Privacy Policy explains how VITIUM LTD and VITIUM LLC (“VITIUM,” “we,” “us,” or “our”) collect, use, store, and share personal information when you visit vitiumtattoo.com (the “Website”) or otherwise interact with us. We are committed to processing your data fairly, lawfully, and transparently in accordance with the UK GDPR, EU GDPR, and applicable US state privacy laws (including the CCPA).

1. Who we are

Which company is the data controller for your personal data depends on where your order ships:

• VITIUM LTD — controller for the United Kingdom and all countries outside the United States, and for the Website generally
• Registered address: 74a Hayes Road, Bromley, BR2 9AB, United Kingdom
• Company number (England & Wales): 13745319
• VAT number: GB513222540

• VITIUM LLC — controller for orders sold to customers in the United States
• Registered address: 30 N Gould Street, Suite R, Sheridan, WY 82801, United States

Either can be reached at info@vitiumtattoo.com.

2. Personal data we collect

Depending on how you interact with us, we may collect the following:

• Identity & contact data: name, email address, phone number, shipping and billing address, country. For wholesale enquiries, also your studio name.
• Order data (direct purchases on this Website): the items you bought, order value, currency, delivery method, any discount code used, your order reference, and delivery status. Card payments are taken by Stripe; we receive confirmation that a payment succeeded and the last four digits and card type, but we never receive or store your full card number.
• Order data (marketplace purchases): orders placed on Amazon or TikTok Shop are collected by that marketplace under its own privacy notice; we receive limited order and review information from them.
• Communications: messages you send through our contact form or by email.
• Marketing preferences: if you subscribe to our newsletter, your email address and consent state.
• Technical & usage data: IP address, browser type, device info, pages visited, referrer, and cookie identifiers (see our Cookie Policy).

3. How we collect your data

• Directly: when you submit a form, sign up to our newsletter, or email us.
• Automatically: via cookies and similar technologies when you use the Website.
• Automatically at checkout: from Stripe, confirmation of payment and the contact and delivery details you entered.
• From third parties: order and review data surfaced by Amazon and TikTok Shop for orders made on those platforms.

4. Why we use your data (legal basis)

• To take payment, fulfil and deliver your order, and handle returns and refunds — legal basis: performance of a contract with you.
• To operate the Website and respond to enquiries — legal basis: legitimate interest.
• To prevent fraud and misuse of discount codes (including recording that an email address has redeemed a one-per-customer code) — legal basis: legitimate interest.
• To process wholesale applications — legal basis: steps prior to entering a contract.
• To send marketing communications (newsletter, drops) — legal basis: your consent. You can withdraw consent at any time via the “unsubscribe” link in every email.
• To improve the Website using anonymous analytics — legal basis: your consent (via the cookie banner).
• To comply with legal, tax, and accounting obligations — legal basis: legal obligation.

5. Who we share data with

We only share data with trusted service providers for the purposes described above:

• Stripe — payment processing for direct orders. Stripe handles your card details as a controller in its own right under its own privacy policy.
• Amazon — fulfilment. For direct orders we send your name, delivery address and phone number to Amazon’s fulfilment network so your parcel can be picked, packed and shipped. Amazon and TikTok Shop also act as marketplaces for orders placed on their own platforms.
• Resend — transactional email (order confirmations, delivery updates, back-in-stock notices).
• Mailchimp — newsletter and marketing email, if you have subscribed.
• Cloudflare — bot and spam protection on our forms.
• Hosting & analytics providers — e.g. Vercel, Google Fonts. See our Cookie Policy for the current list.
• Professional advisers, regulators, and authorities — where legally required.

We do not sell your personal data. If you are a California resident, see Section 9 for your CCPA rights, including the right to opt out of any “sharing” for cross-context behavioural advertising.

6. International transfers

Some of our service providers are based outside the UK/EEA (notably in the United States). When we transfer personal data internationally we rely on appropriate safeguards such as the UK International Data Transfer Agreement, EU Standard Contractual Clauses, or the UK Addendum, and the EU-U.S. Data Privacy Framework where applicable.

7. How long we keep it

• Order records: up to 6 years after the order, to meet tax, accounting, and consumer-law obligations.
• Enquiries / contact form submissions: up to 24 months after our last interaction.
• Wholesale applications: up to 6 years for tax and accounting purposes.
• Newsletter subscription: until you unsubscribe.
• Cookies / analytics: see our Cookie Policy.

8. Your UK / EU rights

If the UK GDPR or EU GDPR apply to you, you have the right to:

• Access a copy of your personal data.
• Rectify inaccurate or incomplete data.
• Request erasure (“right to be forgotten”).
• Restrict or object to our processing.
• Data portability — receive your data in a machine-readable format.
• Withdraw consent at any time where we rely on it.
• Lodge a complaint with a supervisory authority — in the UK, the Information Commissioner’s Office (ICO); in the EU, your local data protection authority.

To exercise any of these rights, email info@vitiumtattoo.com. We respond within one month.

9. California residents (CCPA / CPRA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and (if applicable) sell or share.
• Delete personal information we hold about you, subject to exceptions.
• Correct inaccurate personal information.
• Opt out of “sale” or “sharing” of personal information for cross-context behavioural advertising. We do not sell personal information; if we ever share for such advertising, you can opt out via the cookie banner or by emailing us.
• Limit the use of sensitive personal information. We do not process sensitive personal information for purposes requiring this right.
• Non-discrimination for exercising your rights.

Email info@vitiumtattoo.com to exercise these rights. We may need to verify your identity.

10. Cookies

Our Cookie Policy explains the cookies we set, their purposes, and how you can manage or withdraw consent at any time via the cookie preferences in the footer.

11. Security

We use appropriate technical and organisational measures to protect your data from loss, misuse, or unauthorised access. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

12. Children

Our products and Website are not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The “effective” date at the top tells you when it was last revised. Material changes will be notified via a banner on the Website.

14. Contact us

VITIUM LTD
74a Hayes Road, Bromley, BR2 9AB, United Kingdom

VITIUM LLC
30 N Gould Street, Suite R, Sheridan, WY 82801, United States

Either company: info@vitiumtattoo.com