Privacy policy
Last Updated: 5 October 2026
At VintDrop, accessible from vintdrop.com, we respect your privacy and are committed to protecting your personal information.
This Privacy Policy explains how we collect, use, store and share personal information when you visit our website, browse our products, place an order, contact us, subscribe to marketing communications, or otherwise interact with VintDrop.
By using our website, you acknowledge that you have read and understood this Privacy Policy.
1. Who We Are
VintDrop is an online vintage clothing store offering carefully selected vintage and pre-owned fashion, including vintage sweaters, jumpers, knitwear, quarter-zips, cardigans, jerseys and other vintage clothing.
Business name: VintDrop
Website: vintdrop.com
Email: contact@vintdrop.com
For privacy-related questions, requests or concerns, you can contact us at:
For applicable data protection laws, VintDrop may act as the data controller for personal information collected through our website and services.
2. Information We Collect
We may collect different types of personal information depending on how you interact with VintDrop.
Information You Provide to Us
When you place an order, contact us, subscribe to marketing communications, or use certain features of our website, we may collect:
- Full name
- Email address
- Telephone or mobile number
- Billing address
- Shipping address
- Order information
- Products purchased
- Return or refund information
- Customer service messages
- Marketing preferences
- Information you provide when contacting us
- Other information you voluntarily provide
Order Information
When you purchase from VintDrop, we may collect information relating to your order, including:
- Order number
- Products purchased
- Product quantities
- Order value
- Shipping information
- Billing information
- Payment status
- Delivery information
- Return and refund information
Information Collected Automatically
When you visit our website, certain technical information may be collected automatically.
This may include:
- IP address
- Browser type
- Device type
- Operating system
- Approximate location based on technical information
- Pages visited
- Products viewed
- Website interactions
- Date and time of visits
- Referring website
- Session information
- Website performance information
The information collected may depend on your device, browser settings, cookies and the services enabled on our website.
3. How We Use Your Information
We may use your personal information for the following purposes.
To Process and Fulfil Orders
We use your information to:
- Process your orders
- Confirm purchases
- Process payments
- Prepare orders for delivery
- Arrange shipping
- Provide order updates
- Handle returns and refunds
- Provide customer support
To Communicate With You
We may use your information to respond to:
- Product enquiries
- Order questions
- Delivery enquiries
- Return requests
- Refund requests
- Customer service requests
- Other messages you send to us
To Improve Our Website
We may use information about how customers interact with our website to:
- Improve website functionality
- Improve navigation
- Improve product discovery
- Understand customer interests
- Improve our products and services
- Identify technical problems
- Improve the overall customer experience
Marketing
Where permitted by applicable law and where required, with your consent, we may use your information to send:
- New vintage drop announcements
- Product updates
- Special offers
- Discounts
- Promotions
- Seasonal campaigns
- Other VintDrop marketing communications
You can unsubscribe from marketing communications at any time.
Security and Fraud Prevention
We may process information to:
- Protect our website
- Detect suspicious activity
- Prevent fraud
- Protect customers
- Protect our business
- Maintain website and account security
Legal Purposes
We may use your information where necessary to:
- Comply with legal obligations
- Meet accounting or tax requirements
- Respond to lawful requests
- Establish, exercise or defend legal claims
- Protect our legal rights
4. Lawful Basis for Processing
Where UK GDPR or EU GDPR applies, we process personal information using one or more lawful bases.
Contract
We may process your information where it is necessary to fulfil a contract with you, including:
- Processing your order
- Processing payment
- Delivering your products
- Managing returns and refunds
- Providing customer support related to your order
Legal Obligation
We may process your information where necessary to comply with legal, accounting, tax or regulatory obligations.
Legitimate Interests
We may process information where necessary for our legitimate business interests, provided that those interests do not override your rights and freedoms.
These interests may include:
- Operating and improving our website
- Website security
- Fraud prevention
- Customer service
- Improving our products and services
- Managing our business
- Protecting our legal rights
Consent
Where required, we may rely on your consent for activities such as:
- Certain marketing communications
- Certain non-essential cookies
- Certain analytics or advertising technologies
Where processing is based on consent, you may withdraw your consent at any time.
5. Shopify
Our online store is powered by Shopify.
Shopify provides the ecommerce infrastructure used to operate our store, including website functionality, checkout, customer accounts, orders and other ecommerce services.
Shopify may process personal information in connection with providing these services.
The information processed may include customer, order, checkout, device and website activity information depending on the Shopify services and features enabled on our store.
Shopify's own privacy practices may also apply to information processed by Shopify.
6. Payments
VintDrop uses Shopify's payment infrastructure for online checkout.
Depending on the customer's location and available payment methods, checkout may support payment options such as:
- Visa
- Mastercard
- American Express
- Discover
- Diners Club
- Maestro
- UnionPay
- Shop Pay
- Apple Pay
- Google Pay
- Other payment methods made available through Shopify
The payment methods available to a customer may change depending on location, currency, market and payment-provider availability.
Payment information is processed through the relevant payment service.
We do not intentionally store complete payment card numbers or card security codes on our own systems.
Payment providers may process information such as:
- Name
- Billing information
- Payment information
- Transaction information
- Fraud-prevention information
7. Shopify Messaging
We may use Shopify Messaging to send marketing and other email communications to customers and subscribers.
Where required by law, we will obtain appropriate permission before sending marketing communications.
Shopify Messaging may collect information about email campaign performance, including:
- Email opens
- Link clicks
- Unsubscribes
- Spam complaints
This information may be used to manage subscriber lists and understand the performance of our email campaigns.
You can unsubscribe from marketing emails at any time by using the unsubscribe option included in the email or by contacting us at:
8. Shopify Flow
We use Shopify Flow to automate certain processes within our Shopify store.
Depending on the workflows we create, Shopify Flow may process information relating to:
- Customers
- Orders
- Products
- Fulfilment
- Store activities
The information processed depends on the specific workflows enabled in our Shopify store.
We use this information only where necessary for the relevant store automation and operational purposes.
9. GOAFFPRO Affiliate Marketing
We use GOAFFPRO to manage our affiliate and referral marketing programme.
GOAFFPRO may process information relating to affiliate referrals, referral activity, orders and transactions in order to:
- Attribute sales to affiliates
- Track referrals
- Manage affiliate relationships
- Calculate affiliate commissions
- Operate our affiliate programme
GOAFFPRO may also use cookies or similar technologies for referral and sales attribution.
GOAFFPRO states that it processes personal information in connection with affiliate networks, referrals, orders and related services.
10. BUCKS
We use the BUCKS app for certain store functionality, which may include currency-related features.
Depending on the functionality enabled, BUCKS may process technical information necessary to provide its services, such as information relating to your browser, device, location or currency preferences.
11. Shopify Search & Discovery
We use Shopify Search & Discovery to help customers find products on our website.
This may include features such as:
- Product search
- Product filtering
- Product recommendations
- Product discovery
Information relating to website interactions may be processed to provide these features.
12. Digital Products
Our Shopify store has the Digital Products app installed.
Where digital-product functionality is used, information may be processed to provide and manage the relevant digital product or service.
If a particular digital-product feature is not used on our store, personal information will not be processed for that feature merely because the app is installed.
13. Shipping and Delivery
To fulfil your order, we may share relevant information with shipping and delivery providers.
This may include:
- Name
- Shipping address
- Telephone number
- Email address where necessary
- Order information
We only share information reasonably necessary to process and deliver your order.
Shipping providers may use your information to:
- Deliver your order
- Contact you regarding delivery
- Provide tracking information
- Handle delivery issues
14. WhatsApp and Other Communication Services
If you contact VintDrop through WhatsApp, social media, email or another communication platform, we may receive and process the information you provide.
This may include:
- Your name
- Phone number
- Messages
- Product enquiries
- Order information
- Images or files that you voluntarily send
We use this information to respond to your enquiry, provide customer support and assist with purchases or orders.
Third-party communication platforms have their own privacy policies and terms, which may also apply to your use of those services.
Please avoid sending sensitive or unnecessary personal information through messaging platforms.
15. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Cookies are small files or technologies that help websites remember information, operate correctly and understand how visitors interact with the website.
We may use different categories of cookies.
Strictly Necessary Cookies
These cookies may be necessary for:
- Shopping cart functionality
- Checkout
- Website security
- Customer accounts
- Essential website functions
- Remembering essential preferences
Analytics Cookies
Where enabled, analytics technologies may help us understand:
- How visitors use our website
- Which pages are visited
- Which products are viewed
- Website performance
- General website usage
Marketing and Advertising Cookies
Where enabled, marketing technologies may help us:
- Measure advertising performance
- Understand marketing campaigns
- Measure conversions
- Provide relevant advertising
- Track affiliate referrals
Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.
You can manage cookies through our cookie settings where available and through your browser settings.
The ICO states that visitors should be informed about cookies and that non-essential cookies generally require user agreement where the relevant rules apply.
16. Who We Share Your Information With
We may share personal information with trusted third parties where reasonably necessary to operate VintDrop and provide our services.
These may include:
- Shopify
- Shopify Payments
- Payment service providers
- Shipping and delivery providers
- Shopify Messaging
- Shopify Flow
- GOAFFPRO
- BUCKS
- Shopify Search & Discovery
- Digital Products, where applicable
- Website and technology service providers
- Customer support providers
- Fraud-prevention services
- Analytics or advertising providers, where enabled
- Professional advisers
- Government authorities or law enforcement where legally required
We do not sell your personal information simply because you visit our website.
We share information only where there is a legitimate reason, such as fulfilling your order, providing a requested service, operating our business, protecting our systems, complying with the law, or where consent is required and has been provided.
17. International Data Transfers
Some of our service providers may process personal information in countries outside the United Kingdom or European Economic Area.
Where applicable data protection laws require safeguards for international transfers, we will take appropriate steps to protect personal information.
These safeguards may include:
- An adequacy decision
- Standard Contractual Clauses
- Other legally recognised transfer mechanisms
- Other appropriate safeguards available under applicable data protection laws
Because our third-party service providers may operate internationally, the location where information is processed may vary.
18. How Long We Keep Your Information
We keep personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
The length of time we keep information depends on factors including:
- The purpose for which it was collected
- Whether you have an active customer relationship with us
- Legal requirements
- Accounting and tax requirements
- Fraud prevention
- Dispute resolution
- Legal claims
- Business record-keeping requirements
For example, information relating to purchases may need to be retained for accounting, tax, legal or record-keeping purposes.
When information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it.
19. Your Privacy Rights
Depending on your location and the data protection laws that apply to you, you may have rights relating to your personal information.
These may include:
Right of Access
You may request a copy of the personal information we hold about you.
Right to Rectification
You may ask us to correct inaccurate or incomplete personal information.
Right to Erasure
You may request that we delete your personal information in certain circumstances.
Right to Restriction
You may ask us to restrict the processing of your personal information in certain circumstances.
Right to Object
You may object to certain types of processing, including direct marketing.
Right to Data Portability
In certain circumstances, you may request your personal information in a structured, commonly used and machine-readable format.
Right to Withdraw Consent
Where we process your information based on consent, you can withdraw your consent at any time.
Withdrawing consent does not affect the lawfulness of processing that took place before you withdrew your consent.
These rights are subject to applicable legal conditions and exceptions.
20. How to Exercise Your Rights
If you want to exercise any of your privacy rights, please contact us:
Email: contact@vintdrop.com
Please provide enough information for us to understand your request.
For security purposes, we may need to verify your identity before completing certain requests.
We will respond to valid requests in accordance with applicable data protection law.
21. Direct Marketing
If you subscribe to receive marketing communications from VintDrop, we may contact you about:
- New vintage drops
- New products
- Special offers
- Discounts
- Promotions
- Seasonal collections
- VintDrop updates
You can unsubscribe at any time.
You can unsubscribe by:
- Clicking the unsubscribe link in a marketing email; or
- Contacting us at contact@vintdrop.com.
Unsubscribing from marketing communications does not prevent us from sending essential communications relating to an order, transaction, account or service you have requested.
22. Data Security
We take reasonable technical and organisational measures to protect personal information against:
- Unauthorised access
- Loss
- Misuse
- Unauthorised disclosure
- Alteration
- Destruction
However, no online transmission or electronic storage system can be guaranteed to be completely secure.
We therefore cannot guarantee absolute security of personal information transmitted through the internet.
23. Third-Party Websites
Our website may contain links to third-party websites, services or social media platforms.
These websites are operated independently from VintDrop and may have their own privacy policies.
We are not responsible for the privacy practices, security or content of third-party websites.
We recommend reviewing the privacy policy of any third-party website before providing personal information.
24. Social Media
VintDrop may use social media platforms to communicate with customers, promote products and share content.
These platforms may include:
- TikTok
- YouTube
When you interact with VintDrop through social media, the relevant platform may collect and process information according to its own privacy policy.
Information that you voluntarily provide to us through social media may also be processed by VintDrop for customer service, communication or marketing purposes.
25. Children's Privacy
VintDrop does not knowingly collect personal information from children where doing so would be unlawful.
Our website is intended for a general audience and is not specifically directed at children.
If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us at:
26. Automated Decision-Making and Profiling
VintDrop does not intend to make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects on individuals.
Some third-party services may use automated technologies for purposes such as fraud prevention, advertising measurement, analytics or service functionality.
Where applicable law requires additional information or safeguards concerning automated decision-making, we will provide the relevant information.
27. Complaints
If you have concerns about how VintDrop uses your personal information, please contact us first:
We will try to resolve your concern.
If you are located in the United Kingdom and remain dissatisfied, you may contact the Information Commissioner's Office (ICO).
If you are located in the European Economic Area, you may also have the right to complain to the relevant data protection supervisory authority in your country.
The ICO guidance recommends informing individuals about their right to complain to a supervisory authority.
28. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
We may update it when:
- Our business changes
- We introduce new services
- We install or remove apps
- We introduce new payment methods
- We change our marketing practices
- We change our analytics or advertising services
- Applicable laws or regulations change
- Our data-processing practices change
When we update this Privacy Policy, we will change the "Last Updated" date shown at the top of this page.
We recommend checking this page periodically for the latest version.
29. Contact Us
If you have questions about this Privacy Policy or how VintDrop handles personal information, please contact us.
VintDrop
Website: vintdrop.com
Email: contact@vintdrop.com
Privacy enquiries:
contact@vintdrop.com