Privacy Policy

About this policy

This privacy policy explains how VMEP Ltd collects, uses, and protects personal data when you use our website or order from us. We are committed to handling personal data lawfully under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

VMEP Ltd, trading as Vision Design & Manufacturing. UK Limited company, registration number 10344667. Registered address: Unit 20, Bidavon Industrial Estate, Bidford-on-Avon, Alcester, B50 4JN, United Kingdom.

We are the data controller for personal data collected through this website. Contact us at info@vmep-ltd.co.uk or by post at the address above.

What personal data we collect

We collect the following categories of personal data:

  • Contact and identity information: name, email address, postal address, phone number (when you place an order, request a quote, contact us, or sign up for marketing)
  • Order information: products purchased, order value, billing and delivery addresses
  • Payment information: handled directly by our payment processors (Shopify Payments, PayPal, Klarna where applicable). We do not store full card details on our servers.
  • Technical and usage information: IP address, browser type, device information, pages visited, time spent on the site, referring URL
  • Communications: emails, contact form submissions, chat messages

How we use your personal data

We use your data for the following purposes:

  • To fulfil orders - process payments, dispatch goods, handle returns and warranty claims (legal basis: contract)
  • To provide customer support - respond to enquiries, manage your account (legal basis: contract or legitimate interest)
  • To send transactional emails - order confirmations, dispatch notifications, account notices (legal basis: contract)
  • To send marketing emails - only if you have opted in (legal basis: consent). You can unsubscribe at any time using the link in any marketing email.
  • To run the website - analytics, performance monitoring, fraud prevention (legal basis: legitimate interest)
  • To comply with the law - tax records, regulatory obligations (legal basis: legal obligation)

Who we share data with

We share personal data only with the following processors, as necessary to run our business:

  • Shopify - our e-commerce platform (stores order, customer, and product data; data processed in the EU/UK and US under standard contractual clauses)
  • Shopify Payments and other payment processors (PayPal, Klarna) - process payments securely
  • Google Analytics 4 - aggregated website usage analytics
  • Google Ads - conversion measurement for online advertising
  • Klaviyo - email marketing service provider
  • Microsoft Clarity - session recordings and heatmaps (aggregated)
  • Shopify Inbox - live chat handling
  • Couriers and pallet operators (UPS, pallet networks, international carriers) - to deliver your order
  • Email service providers - to send transactional and (with consent) marketing emails
  • Professional advisers - accountants, lawyers - on a confidential basis where required

We do not sell personal data to third parties.

How long we keep data

We retain personal data for as long as needed for the purposes described above, including:

  • Order and transaction records: 6 years (UK tax and accounting requirement)
  • Customer account data: while the account is active, plus 12 months after last activity
  • Marketing subscribers: until you unsubscribe
  • Website analytics: aggregated/anonymised after retention windows set by Google
  • Support correspondence: 3 years

Your rights

Under UK GDPR you have the right to:

  • Access a copy of the personal data we hold about you
  • Rectify inaccurate or incomplete data
  • Erase your personal data (subject to legal retention requirements)
  • Restrict processing in certain circumstances
  • Object to processing based on legitimate interest, including direct marketing
  • Data portability - receive your data in a structured, commonly used format
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, email info@vmep-ltd.co.uk. We will respond within one month.

Cookies

Our website uses cookies and similar technologies. See our Cookie Policy for details.

International transfers

Some of our processors (notably Google, Shopify, Klaviyo) are based outside the UK. Where data is transferred internationally, we rely on safeguards permitted under UK GDPR (UK adequacy decisions, standard contractual clauses, or equivalent measures).

Complaints

If you have a concern about how we handle your personal data, please contact us first at info@vmep-ltd.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Changes to this policy

We may update this policy from time to time. The current version is always published here, with the date of last update below.

Last updated: 1 June 2026.