Privacy Policy
Last updated: 28 July 2026
This policy explains what personal data VAHEM Store collects, why we collect it, who we share it with, and the control you have over it. We are the data controller for the data described here. You can contact us at support@vahemstore.com.
1. What we collect
| Data | When | Why |
|---|---|---|
| Name, email address, phone number, delivery and billing address | When you place an order | To take payment, deliver your order, and contact you about it |
| Order contents and totals | When you place an order | To fulfil the order and keep accounting records |
| Email address, and name and profile photo if you use Google sign-in | If you create an account | To sign you in and identify your saved basket |
| Basket contents | While you shop | To remember your basket between visits and across your devices |
| Correspondence | If you email us | To answer your question and keep a record of the issue |
We do not collect or store your card number, expiry date or security code. Card details go directly to Stripe and never reach our servers.
2. Our legal bases
- Performance of a contract — processing and delivering the order you placed.
- Legal obligation — keeping transaction and tax records for the period the law requires.
- Legitimate interests — running and securing the Store, preventing fraud, and answering your enquiries.
- Consent — where you have specifically given it, for example by creating an account. You can withdraw consent at any time.
3. Who we share it with
We do not sell your personal data, and we do not share it for advertising. We use a small number of service providers to run the Store, and they only receive what they need:
| Provider | What they receive | Purpose |
|---|---|---|
| Stripe | Name, email, phone, billing and delivery address, order contents, payment details | Payment processing and fraud prevention |
| Google Firebase | Account email, sign-in identifiers, saved basket | Account sign-in and saving your basket |
| Netlify | Technical request data such as IP address | Website hosting and delivery |
| Discord | Name, email, phone, delivery address and order contents | Delivering each new order notification to our private order channel so we can fulfil it |
We may also disclose data where we are legally required to, or to establish or defend a legal claim.
4. International transfers
Some of these providers are based outside the EEA, including in the United States. Where personal data is transferred outside the EEA or the UK, that transfer relies on an approved safeguard — typically the European Commission's Standard Contractual Clauses or an adequacy decision.
5. Cookies and local storage
We do not use advertising or analytics cookies and we do not track you across other websites. We use browser storage for things the Store cannot work without:
- Your basket — stored in your browser's local storage so it survives a page reload.
- Sign-in session — set by Firebase if you log in, so you stay signed in.
- Payment session — set by Stripe on its own checkout page, including for fraud prevention.
Clearing your browser storage will empty your saved basket and sign you out.
6. How long we keep it
- Order and transaction records — for as long as tax and accounting law requires, generally five years.
- Account and saved basket — until you ask us to delete your account, or after a long period of inactivity.
- Emails — normally up to two years after the issue is resolved.
7. Your rights
Depending on where you live you have some or all of the following rights over your personal data:
- Access — a copy of the data we hold about you.
- Rectification — correction of data that is wrong or incomplete.
- Erasure — deletion of your data, where we have no overriding obligation to keep it.
- Restriction and objection — to limit or object to certain processing.
- Portability — your data in a portable, machine-readable format.
- Withdraw consent — at any time, where processing is based on consent.
To exercise any of these, email support@vahemstore.com. We will respond within one month. You also have the right to complain to your local data protection authority — in Norway, Datatilsynet.
8. Security
Payments run over an encrypted connection and are handled entirely by Stripe. Access to order data is limited to those who need it to fulfil orders. No system is perfectly secure, but if a breach affects your rights we will notify you and the relevant authority as the law requires.
9. Children
The Store is not intended for children, and we do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.
10. Changes to this policy
We may update this policy as the Store changes. The “last updated” date above shows when the current version took effect. Material changes will be made clear on this page.
11. Contact
Questions about privacy or your data: support@vahemstore.com.