Privacy Policy

1. Who controls your information

The business trading as HoloVault controls the information described in this notice. Privacy enquiries can be sent to support@holovault.co.uk or through the Contact page.

2. Information we collect

• Identity and contact details, including name, billing and delivery address, email address and telephone number.
• Order information, including items, value, delivery choice, returns, correspondence and fraud-prevention checks.
• Payment status and transaction references. Full card details are handled by the payment provider and are not intended to be stored by HoloVault.
• Technical and usage information such as IP address, device, browser, security logs and necessary cookie identifiers.
• Customer service messages and any information voluntarily included in them.
• Your email address, signup source and consent time when you choose to join drop alerts.

3. How and why we use it

Contract

We use information to take payment, fulfil orders, provide delivery updates, handle returns and answer order enquiries because it is necessary to perform the purchase contract or take requested steps before it.

Legal obligation

We use and retain certain records for tax, accounting, consumer protection, product safety and lawful authority requests.

Legitimate interests

We use proportionate information to secure the store, prevent fraud and purchase-limit abuse, improve operations and establish or defend legal claims. We balance those interests against customer rights.

Consent

If you join drop alerts, we use your email address to send release announcements, pre-order openings and relevant drop updates. You can withdraw consent at any time by replying with “unsubscribe”, emailing support@holovault.co.uk or using the Contact page. Optional non-essential cookies will require the choice explained when they are introduced.

4. Who receives information

Information may be shared only as needed with hosting and ecommerce providers, email providers, payment processors, delivery carriers, professional advisers, fraud-prevention services and public authorities where legally required.

These organisations may act as processors or independent controllers. Their own notices apply where they decide how information is used. If information is transferred outside the UK, an applicable lawful transfer mechanism must be used.

5. How long we keep it

Order and accounting records are normally retained for the period required by tax and legal obligations, commonly up to six years after the relevant financial year. Customer service and security records are kept only as long as reasonably needed for the issue, prevention purpose or legal claim. Unsuccessful checkout and technical logs should be deleted on a shorter operational schedule. Drop-alert records are kept while consent remains active and are removed or suppressed after withdrawal.

6. Your data protection rights

Depending on the circumstances, you may have rights to access, correct, erase or restrict personal information, object to processing, receive portable information and withdraw consent. Some rights are limited where information must be retained by law or for legal claims.

You can raise a concern with HoloVault using the privacy contact above. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

7. Cookies and local storage

The store uses necessary technologies to keep the shopping bag, secure the session and operate checkout. Optional analytics or advertising cookies must not be activated without an appropriate choice mechanism. The local shopping bag can be cleared through browser settings.

8. Children

The store sells products that may appeal to children but orders must be placed by an adult or with an adult’s involvement. HoloVault does not knowingly use children’s information for profiling or targeted advertising.

9. Changes

This notice will be updated when suppliers, processing activities or legal requirements change. The current date will be shown at the top of the page.