Privacy policy
Who we are
Vespré sells silicone sleep earplugs online. In this policy, "we", "us" and "our" mean Vespré. We are the data controller responsible for the personal information described here.
Email: hello@vesprebuds.com
Address: 20 Kylemore Crescent, Motherwell, Scotland, ML1 3XP, United Kingdom
This policy explains what we collect, why we collect it, who we share it with, how long we keep it, and what you can ask us to do about it. If anything here is unclear, email us and we will explain it in plain terms.
What information we collect
Information you give us when you order
Your name, billing address, shipping address, email address, and your phone number where you provide one. You also give us payment details, which are processed directly by Shopify Payments. We never see, receive or store your full card number.
Information collected automatically when you browse
Your browser type and version, your device type, your operating system, your IP address, your approximate location derived from that IP address, your time zone, which pages you view, how long you spend on them, and which site or advert you arrived from. This is collected through cookies and similar technologies.
Information you give us directly
Anything you write to us by email or through our contact form, including your email address and the contents of your message. If you subscribe to our emails, your email address and the fact that you consented.
Information we do not collect
We do not collect special category data, we do not ask for date of birth, and we do not collect any health information. Nothing on our site asks you to disclose a medical condition.
How we collect it
- Directly from you, when you place an order, contact us, or subscribe.
- Automatically, through cookies and similar technologies, when you browse our store.
- From third parties, including Shopify as our platform and payment processor, our analytics providers, and advertising platforms that report on how their adverts performed.
Why we use your information
- To fulfil your order. Taking payment, passing your delivery address to the warehouse and carrier, and getting the parcel to you.
- To communicate about your order. Confirmations, dispatch notices, tracking, and answering your questions.
- To handle returns and refunds.
- To prevent fraud. Screening orders and protecting both of us against fraudulent transactions and chargebacks.
- To run and improve the store. Understanding which pages work, where people get stuck, and what to fix.
- To market to you, with your consent. Sending emails you have asked for, and measuring and targeting advertising.
- To meet legal obligations. Keeping the accounting and tax records the law requires.
Our legal bases for using it
Performance of a contract. We process your order information because we cannot deliver a product you have bought without it.
Legitimate interests. We use analytics and fraud screening because we have a genuine interest in running a store that works and is not defrauded, balanced against your privacy. You can object to this at any time.
Consent. We use marketing and advertising cookies, and send marketing emails, only where you have consented. You can withdraw that consent whenever you like, without affecting anything we did before you withdrew it.
Legal obligation. We keep transaction records because tax and accounting law requires it.
Who we share it with
We share the minimum necessary, with the following categories of recipient:
- Shopify. Hosts our store, processes payments, and stores order data. Their privacy policy is at shopify.com/legal/privacy.
- Our fulfilment partners and supplier warehouses. They receive your name, delivery address and order contents so they can pack and ship it.
- Shipping carriers. They receive your name, address and contact details in order to deliver and to notify you.
- Google. Analytics, advertising measurement, and our product listings.
- Meta. Advertising measurement and targeting across Facebook and Instagram.
- Microsoft. Clarity, which records anonymised session behaviour so we can see where the site is confusing.
- Our email provider. For order emails and, where you have consented, marketing emails.
- Professional advisers and authorities. Where we are legally required to disclose information.
We do not sell your personal information for money, and we never will. Some advertising cookies may nonetheless count as "selling" or "sharing" under certain United States state privacy laws, because those laws define those words broadly. You can opt out at any time through our cookie banner, and we honour Global Privacy Control signals.
International transfers
We are based in the United Kingdom. Our customers are in the United States and Canada. Our suppliers and service providers are in several countries.
This means your information may be transferred to, stored in, and processed in countries outside the United Kingdom and the European Economic Area, including the United States and China. Where that happens we rely on appropriate safeguards, such as standard contractual clauses approved for that purpose, or transfers to countries recognised as providing adequate protection.
How long we keep it
- Order and transaction records: six years from the end of the relevant tax year, as UK tax law requires.
- Customer support emails: two years, so we can refer back to what was agreed.
- Marketing data: until you withdraw consent or ask us to delete it, and in any case not more than three years after your last interaction with us.
- Analytics data: according to the retention settings of the relevant provider, typically fourteen months.
Your rights
Wherever you live, you can ask us to:
- Give you a copy of the personal information we hold about you.
- Correct anything that is wrong or incomplete.
- Delete your information, where we are not required to keep it.
- Transfer your information to another provider.
- Restrict how we use it while a question about it is resolved.
- Object to us using it for a particular purpose.
- Withdraw consent you previously gave.
To exercise any of these, email hello@vesprebuds.com. We will respond within one month. We will not charge you, and we will not treat you differently for asking.
If you are in the UK or the European Economic Area
You have the rights above under the UK GDPR and the EU GDPR. If you are unhappy with how we have handled your information, you can complain to your data protection authority. In the United Kingdom that is the Information Commissioner's Office, at ico.org.uk. We would rather you told us first, so we can put it right.
If you are a resident of a United States state with privacy legislation
Depending on your state, you may have the right to know what personal information we collect and why, to obtain a copy of it, to have it deleted, to have it corrected, to opt out of its sale or sharing for targeted advertising, and not to be discriminated against for exercising any of these rights.
You can opt out of advertising cookies through our cookie banner at any time. We honour Global Privacy Control signals sent by your browser, which opts you out automatically.
Cookies and similar technologies
We use three categories:
- Strictly necessary. These make the store work: keeping your cart, remembering your consent choice, and securing checkout. They cannot be switched off.
- Analytics. These tell us how the store is used so we can improve it.
- Advertising. These measure whether our adverts worked and help show relevant ones.
Our cookie banner lets you accept or decline the optional categories before they load, and you can change your choice at any time by reopening the banner from any page. Declining does not stop you from ordering.
Security
Payments are processed by Shopify Payments over an encrypted connection, and card details never reach us. Our store runs over HTTPS. Access to order data is limited to those who need it to fulfil orders and answer questions.
No system is completely secure, and we will not claim otherwise. If a breach ever affects your information and creates a risk to you, we will tell you and the relevant authority within the time the law requires.
Children
Our store is not directed at children and our products are not intended for use by young children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, email us and we will delete it.
Automated decision making
We do not make decisions about you by automated means that produce legal or similarly significant effects. Fraud screening may flag an order for manual review, but a person makes the final decision.
Changes to this policy
We may update this policy as our business or the law changes. The date below tells you when it last changed. If we make a significant change we will make that clear on the store rather than quietly editing the page.
Last updated: 15 August 2026