Privacy Policy

Last updated: 30 March 2026

 

Introduction

House of Vayne (operated by Thorne & Noor Limited) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

 

1. Data Controller

Data Controller: Thorne & Noor Limited

Address: 1st Floor Swan Building, 20 Swan Street, Manchester, M4 5JW

Email: privacy@houseofvayne.co.uk

ICO Registration: ZC098939

 

2. Categories of Data We Collect

 

Identity Data

Name, date of birth, title. Contact information: email address, phone number, postal address.

 

Transaction Data

Order history, payment information (processed securely, not stored). Delivery and shipping information. Subscription details and payment method. Customer service correspondence.

 

Technical Data

Browser type and version, IP address, operating system. Device type and identifiers. Cookies and similar tracking technologies. Website access logs and page interaction data.

 

Usage Data

Pages visited, time spent on site, links clicked. Features used on our website. Search queries and product interactions.

 

Marketing Data

Email preferences and consent. Newsletter subscriptions. Preferences for promotional communications.

 

Special Categories of Data

We do not intentionally collect special categories of personal data (such as health information, race, religion, or biometric data) unless explicitly provided by you with your consent.

 

3. Lawful Bases for Processing

We process your personal data only where we have a lawful basis to do so:

•        Consent: Where you have given clear consent for us to process your personal data for specific purposes (e.g. marketing emails).

•        Contract: Where processing is necessary to fulfil a contract with you (e.g. processing your order).

•        Legitimate Interests: Where processing is necessary for our legitimate business interests, provided these do not override your rights (e.g. fraud prevention, website improvement).

•        Legal Obligation: Where processing is necessary to comply with a legal obligation (e.g. tax records).

 

4. How We Use Your Data

We use your personal data for the following purposes:

•        Processing and managing your orders and payments

•        Managing your subscription, including auto-renewals and payment retries

•        Delivering products and communicating about delivery status

•        Providing customer support and responding to enquiries

•        Sending service communications (order confirmation, delivery updates, account changes)

•        Marketing and promotional communications (with your consent)

•        Improving our website, products, and services

•        Preventing fraud, abuse, and security incidents

•        Complying with legal obligations

•        Analysing website usage and customer behaviour (anonymised)

 

5. Third-Party Data Processors

We share your personal data with the following third parties, each acting as a data processor on our behalf:

 

Service	Provider	Purpose
E-Commerce Platform	Shopify	Website hosting, order processing, payment handling
Payment Processing	Shopify Payments (Stripe)	Secure payment processing
Subscription Management	Recharge	Subscription billing, customer portal, payment retries
Email Marketing	Klaviyo	Marketing emails, transactional emails, automation
Analytics	Google Analytics	Website traffic and behaviour analysis (anonymised)
Advertising	Meta (Facebook/Instagram)	Advertising attribution, conversion tracking, audience targeting
Product Reviews	Judge.me	Review collection and display
Delivery and Logistics	Royal Mail and Courier Services	Product delivery and tracking

 

We do not share your data with any other third parties without your explicit consent, except where required by law.

 

6. International Data Transfers

Some of our third-party data processors (including Shopify, Klaviyo, Recharge, Google, and Meta) are based outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the UK Government.

You have the right to request details of these safeguards. Please contact us at privacy@houseofvayne.co.uk.

 

7. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

•        Transaction Data: 7 years (tax and accounting obligations under HMRC requirements).

•        Account Data: Duration of your account plus 2 years after closure.

•        Marketing Data: Until you withdraw consent (unsubscribe).

•        Technical and Usage Data: 26 months.

•        Customer Service Records: 3 years from last interaction.

 

If you request deletion of your account, we will delete or anonymise your data within 30 days, except where we are legally required to retain it.

 

8. Your Privacy Rights

Under the UK GDPR, you have the following rights:

•        Right of Access: Request a copy of the personal data we hold about you.

•        Right of Rectification: Request correction of inaccurate or incomplete data.

•        Right of Erasure: Request deletion of your personal data where there is no compelling reason to continue processing.

•        Right of Restriction: Request restriction of processing in certain circumstances.

•        Right of Data Portability: Request transfer of your data to another provider in a machine-readable format.

•        Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.

•        Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

 

To exercise any of these rights, please contact us at privacy@houseofvayne.co.uk with details of your request. We will respond within 30 calendar days.

 

9. Automated Decision-Making

We do not use automated decision-making or profiling that would have significant legal or operational effects on you. All subscription and account decisions are made by human review.

 

10. Cookies and Tracking

For detailed information about cookies, including types, purposes, and how to manage them, please see our Cookie Policy.

 

11. Data Protection Incidents

In the event of a data protection incident, we will notify you and the Information Commissioner’s Office as required by law. You will receive notification of any incident that poses a risk to your personal data.

 

12. Third-Party Links

Our website may contain links to third-party websites. This Privacy Policy applies only to House of Vayne and does not extend to external websites. We encourage you to review the privacy policies of any websites you visit.

 

13. Children’s Privacy

Our website and products are not intended for children under 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will delete it immediately.

 

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website with an updated “Last updated” date. Continued use of our website constitutes your acceptance of the revised policy.

 

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights:

Email: privacy@houseofvayne.co.uk

Address: 1st Floor Swan Building, 20 Swan Street, Manchester, M4 5JW

Data Protection Officer: No DPO appointed. Privacy queries: privacy@houseofvayne.co.uk

 

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

ICO Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Phone: 0303 123 1113

Website: ico.org.uk