This policy explains what personal data Origin VDC ("we", "us", "our") collects when you use originvdc.com or our trade ordering portal, why we collect it, and the rights you have over it. We are based in the United Kingdom and handle personal data in accordance with the UK GDPR and the Data Protection Act 2018.
Who we are
Origin VDC, [registered company name and number to be added], [registered address to be added]. For any privacy query, contact us at privacy@originvdc.com.
What we collect
- Contact details you give us directly — name, email, phone, and (for trade accounts) company name and delivery address, submitted through our forms or a trade account application.
- Order and payment information — retail purchases are processed by Shopify; trade purchases are processed by Stripe. We do not store full card numbers ourselves — payment processing is handled entirely by these providers.
- Account and session data — if you sign in to the trade portal, we use a session cookie to keep you signed in, and store your account identity (email, company name) to fulfil and reference your orders.
- Technical data — standard web server logs (IP address, browser type, pages visited, timestamps) collected automatically when you use the site, used for security and troubleshooting.
How we use it
We use your data to:
- Process and fulfil orders, and communicate with you about them (order confirmations, dispatch notices, invoices).
- Review and manage trade account applications and credit terms.
- Respond to support enquiries.
- Keep our systems secure and diagnose technical problems.
- Meet our legal and accounting obligations (e.g. record-keeping for tax purposes).
We do not sell your personal data, and we do not use it for third-party advertising.
Who we share it with
We share data only with the service providers needed to run the business:
- Shopify — retail storefront, catalogue, and checkout.
- Stripe — payment processing for trade orders.
- Amazon Web Services (SES) — sending transactional emails such as order confirmations.
- Couriers and delivery partners, solely to fulfil and dispatch your order.
Each of these providers processes data under their own privacy terms and only for the purpose of the service they provide us.
Cookies
We use strictly necessary cookies only — primarily a session cookie that keeps you signed in to the trade portal. We do not currently use analytics or advertising cookies. If that changes, this policy will be updated and, where required, you will be asked for consent first.
How long we keep it
We keep order and account records for as long as needed to fulfil orders, handle warranty/support queries, and meet our legal and tax obligations, after which they are deleted or anonymised.
Your rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your data, where we're not required to keep it for legal reasons.
- Object to or restrict certain processing.
- Ask for a copy of your data in a portable format.
To exercise any of these rights, email privacy@originvdc.com. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page will always reflect the latest version.