Privacy Policy

Who we are

VANTERA DIGITAL LTD, company number 17422035, registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, is the controller of personal data processed through the Website. Contact for privacy matters: privacy@e-com.casa.

What personal data we collect

• Identity and contact data — name, email address, and (where provided) telephone number.
• Account data — email address and hashed credentials if you create an account.
• Order and checkout data — products purchased, order number, delivery address, order history.
• Payment data — processed by our payment provider; we do not store full card numbers.
• Shipping data — delivery instructions and tracking status.
• Customer service data — messages you send us through forms, email or live chat.
• Newsletter data — email address and marketing preferences.
• Technical data — IP address, device and browser information, and cookie identifiers.

Why we use your data and on what legal basis

We only process personal data where a legal basis applies:

• Performance of a contract — to process orders, payments, delivery and returns.
• Legal obligations — to keep accounting records and to comply with tax, consumer and product-safety law.
• Legitimate interests — to secure and improve the Website, prevent fraud, and answer enquiries; we balance these interests against your rights.
• Consent — for marketing emails (opt-in) and for non-essential cookies and similar technologies; you can withdraw consent at any time.

Cookies and similar technologies

We use strictly necessary cookies to run the shop (basket, checkout, security). Non-essential cookies (preferences, analytics, marketing) are only used with your consent. Details are set out in our Cookie Policy, and you can change your choices at any time on the Cookie Settings page.

How long we keep your data

We keep order and accounting records for the statutory retention periods applicable to accounting and tax law. Customer service communications are kept only as long as needed to handle your request and for a limited period afterwards. Newsletter data is kept until you unsubscribe. Cookie identifiers follow the periods in our Cookie Policy.

Who we share your data with

We never sell your personal data. We share it only with service providers (processors) and authorities where necessary:

• Payment processing — Stripe (integration ready).
• Hosting and website operation — final hosting provider [TO BE COMPLETED].
• Email and newsletter delivery — provider [TO BE COMPLETED].
• Logistics and delivery partners — details confirmed at checkout.
• Professional advisers, auditors, and public authorities where required by law.

International transfers

Some of our service providers may process data outside the EEA or the UK. Where that happens, we aim to rely on appropriate safeguards such as adequacy decisions, the EU Standard Contractual Clauses or the UK International Data Transfer Addendum. The final list of processors and transfer mechanisms is pending completion [TO BE COMPLETED].

Your rights

Subject to applicable law, you have the following rights:

• Right of access to your personal data.
• Right to rectification of inaccurate data.
• Right to erasure (“right to be forgotten”).
• Right to restriction of processing.
• Right to data portability.
• Right to object, including to processing based on legitimate interests.
• Right to withdraw consent at any time (for marketing and cookies).
• Right to opt out of marketing communications at any time.
• Right to lodge a complaint with a supervisory authority.

Supervisory authorities

If you are in the UK, you can complain to the Information Commissioner’s Office (ICO). If you are in the EEA, you can complain to the supervisory authority of your habitual residence or place of work — for example the CNPD in Portugal, the CNIL in France or the relevant data protection authority in Germany.

How to contact us

For any privacy request, email privacy@e-com.casa or write to VANTERA DIGITAL LTD, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. We respond to requests within the statutory time limits.