Privacy Policy
Last updated: 31 October 2026
Who we are
VimStop ("we", "us") is an online shop based at 169 Chester Road, Northwich, CW8 4AG, United Kingdom. We are not VAT registered. We are the data controller for your personal data. Contact: support@vimstop.co.uk.
This policy explains how we collect and use your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What data we collect
- Identity and contact details: your name, billing and delivery address, email address and phone number.
- Age confirmation: when you enter our site, you give your date of birth to confirm that you are 18 or over. We do not send or store your date of birth; your device only remembers that you have passed the check. At checkout and on delivery, we or our courier may ask for further proof of age.
- Order data: the products you buy, order history, the discount codes you use, and your returns and refunds.
- Payment data: Shopify Payments processes your payment. We do not see or store your full card details.
- Technical data: your IP address, browser and device type, and the pages you visit, collected through strictly necessary cookies (see our Cookie Policy).
- Marketing preferences: your email address, if you sign up to our newsletter.
- Communications: messages you send us, including through our contact form.
How and why we use your data (lawful bases)
| Purpose | Lawful basis |
|---|---|
| Process and deliver your order, handle returns | Contract |
| Verify that you are 18+ | Legal obligation / legitimate interests (preventing sales to minors) |
| Take payment and prevent fraud | Contract / legitimate interests |
| Keep accounting and tax records | Legal obligation |
| Send marketing emails and the newsletter (including the 10% first-order code) | Consent – you can withdraw at any time |
| Customer service and improving our shop | Legitimate interests |
Who we share data with
- Shopify (our e-commerce, checkout and payment platform, including Shopify Payments) acts as our data processor. You can read Shopify's privacy policy at shopify.com/legal/privacy.
- Courier: Evri, which receives your name, delivery address and contact details to deliver your order.
- Website hosting: our website host stores newsletter sign-ups and contact form messages for us.
- Others: our professional advisers, and the authorities where the law requires it.
We do not sell your personal data.
International transfers
Some of our providers, including Shopify, may process data outside the UK. When they do, we rely on UK adequacy regulations or appropriate safeguards, such as the UK International Data Transfer Agreement or Addendum.
How long we keep data
- Order and accounting records: 6 years from the end of the financial year, as UK tax law requires.
- Marketing data: until you unsubscribe, plus a suppression record so we do not email you again.
- Customer service messages: 2 years.
- Cookies: see the Cookie Policy.
Your rights
You have the right to:
- access your data
- rectify (correct) your data
- erase your data
- restrict processing
- data portability
- object to processing, including direct marketing
- withdraw your consent at any time
To use any of these rights, or to unsubscribe from marketing, email support@vimstop.co.uk. We will reply within one month.
Complaints
If you are unhappy with how we use your data, please contact us first. You also have the right to complain to the Information Commissioner's Office: ico.org.uk, telephone 0303 123 1113.
Children
Our shop is for adults aged 18 and over only. We do not knowingly collect data from anyone under 18.
Changes
We may update this policy from time to time. The "Last updated" date shows when we last changed it.