Privacy Policy

The controller responsible for your personal data is:

For any privacy question or request, write to support@vespernails.com.

When you place an order (checkout):

• Name, email address, shipping and billing address, and phone number (if you provide one).
• Order details: products, quantities, prices, discount codes and order history.
• Payment information. Card and wallet details are entered directly with our payment processor; we never see or store your full card number.
• If you create an account: your login email and an encrypted password.

When you use our contact form or email us:

• Your name, email address, the subject and content of your message, and any order number you include.

When you sign up for our newsletter:

• Your email address, the date and time of your consent, and the page where you signed up.

Automatically, when you browse:

• Device and browser type, IP address (shortened where possible), approximate location derived from it, pages viewed, referring page and time on site.
• Cookie and similar technology data as described in section 6 and in our Cookie Policy.

• To process, ship and support your order, including order confirmations, shipping updates and refunds.
• To answer questions sent through the contact form or by email.
• To send our newsletter, only if you opted in.
• To prevent fraud and keep the store and payments secure.
• To understand how the store is used and improve it (analytics, only with your consent where required).
• To meet our legal obligations, for example tax and accounting record-keeping.

If the GDPR or UK GDPR applies to you, we rely on the following legal bases:

• Performance of a contract (Art. 6(1)(b)): processing your order, delivery, refunds and customer service.
• Consent (Art. 6(1)(a)): newsletter, non-essential cookies and analytics. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): tax, accounting and consumer law record-keeping.
• Legitimate interests (Art. 6(1)(f)): fraud prevention, IT security and answering general inquiries.

We send marketing emails only to people who actively signed up. Every newsletter contains an unsubscribe link; one click removes you from the list. You can also unsubscribe at any time by emailing support@vespernails.com. After you unsubscribe we keep your email address only on a suppression list so that we do not contact you again by mistake.

Order and shipping emails are service messages and are sent regardless of newsletter consent.

We use strictly necessary cookies to run the store, for example to keep your cart and complete checkout. These cannot be switched off. Analytics and marketing cookies are only set after you accept them in our cookie banner. You can change your choice at any time with “Manage cookies” in the footer of every page. Details are in our Cookie Policy.

We share personal information only with service providers who help us run the store, and only as far as needed:

• Payment processors: Stripe (including Apple Pay, Google Pay, Link and Klarna when you choose them) to process payments and prevent fraud.
• Shipping carriers and fulfilment partners (for example USPS, UPS or Royal Mail) to deliver your order. They receive your name, shipping address and, where needed, phone number or email for delivery notifications.
• Our e-commerce platform and hosting providers, which store and process data on our behalf.
• Email service providers that send order emails and, if you opted in, our newsletter.
• Analytics providers, only with your consent, to measure store usage in aggregated form.
• Authorities, where we are legally required to disclose information.

We do not sell your personal information and we do not “share” it for cross-context behavioral advertising as those terms are defined under California law.

Vesper is based in the United States and our service providers may process data in the United States or other countries. When we transfer personal data of EU or UK residents, we rely on appropriate safeguards such as the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or the EU-U.S. Data Privacy Framework where the recipient is certified.

• Order and invoice records: as long as required by tax and accounting law, generally up to 7 years.
• Customer account data: until you delete your account or ask us to delete it.
• Contact form and support emails: up to 2 years after your inquiry is resolved.
• Newsletter data: until you unsubscribe (then only on the suppression list described above).
• Analytics data: up to 14 months.

If you are in the European Economic Area or the United Kingdom, you have the right to:

• Access the personal data we hold about you and receive a copy (Art. 15).
• Have inaccurate data corrected (Art. 16).
• Have your data erased ("right to be forgotten") (Art. 17).
• Restrict processing (Art. 18).
• Data portability: receive your data in a structured, machine-readable format (Art. 20).
• Object to processing based on legitimate interests, and to direct marketing at any time (Art. 21).
• Withdraw consent at any time, without affecting processing carried out before withdrawal (Art. 7(3)).
• Not be subject to decisions based solely on automated processing that significantly affect you (Art. 22). We do not make such decisions.
• Lodge a complaint with a supervisory authority, in particular in the country where you live or work (in the UK, the Information Commissioner’s Office).

If you are a California resident, you have the right to:

• Know what personal information we collect, use and disclose, and the categories of sources and recipients.
• Access the specific pieces of personal information we hold about you.
• Request deletion of your personal information, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share personal information.
• Limit the use of sensitive personal information. We do not use sensitive personal information for purposes that require this right.
• Not be discriminated against for exercising any of these rights.

Categories collected in the last 12 months: identifiers (name, email, address, IP address), commercial information (orders), internet activity (browsing on our store) and approximate geolocation. Residents of other U.S. states with similar privacy laws may exercise comparable rights in the same way.

Email support@vespernails.com or use our contact form. We will verify your request using the email address associated with your order or account and respond within 30 days (45 days under the CCPA, extendable where the law allows). You may use an authorized agent; we may ask for proof of their authorization.

We use encryption in transit (HTTPS), access controls and reputable service providers to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.

Our store is intended for adults. We do not knowingly collect personal information from children under 16. If you believe a child has given us personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last changed. Material changes will be highlighted on this page.