Privacy policy

This Privacy Policy explains how Mana Vault Shop (“we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you use our website, place an order, contact us, or otherwise interact with our services.

Mana Vault Shop operates using the Shopify ecommerce platform, which provides the infrastructure used to power our online store and related services.

This Privacy Policy is intended primarily for customers in the United Kingdom and European Economic Area (“EEA”) and is designed to support compliance with:

  • the UK General Data Protection Regulation (“UK GDPR”)
  • the Data Protection Act 2018
  • the EU General Data Protection Regulation (“EU GDPR”), where applicable

By using our website or services, you acknowledge that you have read this Privacy Policy.

1. Data Controller

For the purposes of applicable data protection law, Mana Vault Shop is the data controller of your personal information.

Contact details:

Mana Vault Shop
Email: enquiries@manavaultshop.co.uk
Website: https://www.manavaultshop.co.uk
Business address: 79 Adams Way, Croydon, CR0 6XR, United Kingdom

2. Personal Information We Collect

We may collect and process the following categories of personal information:

Identity & Contact Information

  • full name
  • billing address
  • shipping address
  • email address
  • telephone number

Account Information

  • login credentials
  • account preferences
  • saved wishlists or shopping preferences

Order & Transaction Information

  • products purchased
  • order history
  • payment confirmations
  • returns, refunds, and exchanges

Payment Information

Payments are processed securely by third-party payment providers. We do not store full payment card details on our servers.

Payment providers may process:

  • payment card information
  • billing information
  • transaction authentication data

Technical & Usage Information

  • IP address
  • browser type
  • device identifiers
  • operating system
  • website interaction data
  • browsing behaviour
  • referral URLs
  • cookie and analytics data

Customer Support Communications

Information you provide when contacting us, including:

  • emails
  • support requests
  • messages
  • attachments
  • feedback or reviews

3. How We Collect Your Information

We collect information:

  • directly from you when you place orders or contact us
  • automatically through cookies and similar technologies
  • through Shopify and integrated ecommerce tools
  • through payment providers and fraud prevention services
  • through analytics and advertising partners where permitted

4. How We Use Your Information

We use personal information for the following purposes:

Order Processing & Fulfilment

  • processing payments
  • fulfilling orders
  • arranging shipping
  • managing returns and refunds
  • providing customer support

Account Management

  • creating and maintaining customer accounts
  • remembering preferences and shopping activity

Fraud Prevention & Security

  • verifying transactions
  • detecting suspicious activity
  • protecting customers and our business

Certain orders may be subject to automated fraud screening processes used to help prevent unauthorised transactions and protect customers.

Communications

  • responding to enquiries
  • sending order updates
  • sending service-related communications

Marketing

Where permitted by law, we may send:

  • promotional emails
  • product announcements
  • offers and updates

You may unsubscribe from marketing communications at any time using the unsubscribe link in emails or by contacting us.

We will only send marketing communications where permitted under applicable law or where you have provided consent where required.

Website Improvement & Analytics

  • analysing website performance
  • improving user experience
  • understanding customer behaviour
  • optimising products and services

5. Legal Bases for Processing

Under UK GDPR and EU GDPR, we rely on one or more of the following legal bases:

  • performance of a contract
  • compliance with legal obligations
  • legitimate business interests
  • your consent where required

Legitimate interests may include:

  • operating and improving our business
  • fraud prevention
  • customer support
  • website security
  • marketing our products and services

Where consent is required, you may withdraw it at any time.

For example, we process order information to fulfil contracts with custmores and retain certain records to comply with legal and tax obligations.

6. Cookies & Similar Technologies

We use cookies and similar technologies to:

  • operate our website
  • remember preferences
  • analyse website traffic
  • personalise content
  • improve advertising relevance

Some cookies are essential for website functionality, while others require your consent.

You can manage cookie preferences through your browser settings or cookie banner where available. Cookie policies

7. Sharing Your Information

We may share personal information with trusted third parties where necessary, including:

Shopify

Our website is hosted by Shopify, which processes data to operate and support the ecommerce platform.

You can view Shopify’s Privacy Policy here:

Shopify Privacy Policy

Payment Providers

To securely process transactions.

Shipping & Fulfilment Providers

To deliver orders and manage logistics.

Fraud Prevention & Security Providers

To help detect and prevent fraudulent activity.

Analytics & Advertising Partners

Where permitted, to improve website performance and marketing effectiveness.

Legal & Regulatory Authorities

Where required by law or to protect legal rights.

We do not sell personal information to third parties.

8. International Data Transfers

Some of our service providers may process data outside the United Kingdom or European Economic Area.

Where personal information is transferred internationally, we take reasonable steps to ensure appropriate safeguards are in place, including:

  • adequacy decisions
  • Standard Contractual Clauses
  • equivalent lawful transfer mechanisms

9. Data Retention

We retain personal information only for as long as reasonably necessary for:

  • fulfilling orders
  • legal and tax obligations
  • dispute resolution
  • fraud prevention
  • business operations

Retention periods may vary depending on the type of information and applicable legal requirements.

10. Your Rights

Under applicable data protection laws, you may have the right to:

  • access your personal information
  • correct inaccurate information
  • request deletion of information
  • restrict processing
  • object to processing
  • withdraw consent
  • request data portability
  • lodge a complaint with a supervisory authority

To exercise your rights, contact us using the details below.

Certain information may be retained where required for legal, tax, fraud prevention, or accounting purposes.

We may request proof of identity before processing certain requests.

11. Marketing Preferences

You can opt out of marketing emails at any time by:

  • clicking the unsubscribe link in emails
  • contacting us directly

Please note that transactional or service-related communications may still be sent where necessary.

12. Children’s Privacy

Our website and services are not intended for children and we do not knowingly collect personal information from children.

If you believe a child has provided personal information to us, please contact us so we can remove it.

13. Website Security

We take reasonable technical and organisational measures to protect personal information.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

Customers are responsible for maintaining the confidentiality of their account credentials.

14. Third-Party Links

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, content, or security of third-party websites.

You should review their policies before providing personal information.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect:

  • legal changes
  • operational updates
  • changes to our services

Updated versions will be posted on this page with a revised “Last updated” date.

16. Complaints

If you have concerns about how we process your personal information, please contact us first so we can attempt to resolve the issue.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO):

Information Commissioner’s Office (ICO)

17. Contact Us

If you have questions about this Privacy Policy or your personal information, please contact us:

Mana Vault Shop
Email: enquiries@manavaultshop.co.uk
Website: https://www.manavaultshop.co.uk
Business address: 79 Adams Way, Croydon, CR0 6XR, United Kingdom

Last updated: 17 May 2026