Privacy policy.

 

Privacy policy

Last updated: June 2026

1. Who we are

This website is operated by Hey, Vivacious!, registered at info@heyvivacious.com. We are the data controller responsible for your personal information. You can contact us at info@heyvivacious.com.

2. What data we collect

We may collect the following personal data when you use our store:

  • Account information — name, email address, and password when you create an account.

  • Contact form submissions — name, email, and any message content you send us.

  • Usage and analytics data — pages visited, time spent on site, browser type, device type, and approximate location (via IP address). This data is collected in aggregate and is not linked to your identity.

  • Technical data — cookies, session tokens, and similar identifiers (see Section 6).

We do not collect payment card details directly — payments are processed by a third-party provider Stripe.

3. How we use your data

We use your personal data to:

  • Create and manage your account.

  • Respond to enquiries you submit via our contact form.

  • Send order confirmations and transactional emails.

  • Understand how visitors use our site and improve our service (analytics).

  • Send marketing emails, only if you have opted in.

  • Comply with our legal obligations.

4. Legal basis for processing

We process your data based on: contract performance (to fulfil your orders), legitimate interests (to improve our service and prevent fraud), consent (for marketing emails and non-essential cookies), and legal obligation (to comply with applicable laws). You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Third parties we share data with

We share data only where necessary:

  • Payment processors (Stripe) — to securely handle transactions. We never see or store your card details.

  • Analytics providers (Squarespace) — to help us understand site usage.

  • Email service providers (Squarespace) — to send transactional and marketing emails.

  • Hosting and infrastructure provider (Squarespace, Google) that run our website.

We do not sell your personal data to third parties.

6. Cookies

We use cookies to keep you logged in, remember your cart, and collect anonymous analytics data. Essential cookies are necessary for the site to function and cannot be disabled. Non-essential cookies (analytics, marketing) are only set with your consent. You can manage cookie preferences at any time via your browser settings. Cookie policy.

7. How long we keep your data

We retain account data for as long as your account is active or as required by law. Analytics data is retained for 14 months. You may request deletion of your account and data at any time (see Section 8).

8. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.

  • Correct inaccurate or incomplete data.

  • Request deletion of your data ("right to be forgotten").

  • Object to or restrict certain processing.

  • Receive your data in a portable format.

  • Withdraw consent for marketing at any time (unsubscribe link in every email).

To exercise any of these rights, contact us at info@heyvivacious.com. You also have the right to lodge a complaint with your local data protection authority.

9. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by displaying a notice on our website. The date at the top of this page reflects when it was last revised.

Questions? Contact us at info@heyvivacious.com.