Vefthranlyphrone

Privacy Policy

Last updated: 7 April 2026. This document explains how Vefthranlyphrone collects, uses, stores, and protects personal data when you interact with vefthranlyphrone.world and related communications.

Transparency first

We describe processing in plain language and avoid unnecessary data collection. If something is optional, we say so at the point of collection.

UK GDPR aligned

We apply UK GDPR principles: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.

Your control

You can exercise rights such as access and erasure where applicable, and manage cookie preferences through our banner and settings.

1. Data controller and contact details

The data controller responsible for personal data processed through this website is Vefthranlyphrone, with a correspondence address at 15 Henrietta St, London, WC2E 8QG, United Kingdom. For privacy-specific enquiries, email callback@vefthranlyphrone.world or telephone +44 7367 011269. When you contact us, please avoid including special category data unless strictly necessary; we will tell you if we need additional information to handle your request lawfully.

If we appoint a Data Protection Officer in the future, we will publish their contact details here and reference them in relevant notices.

2. Scope of this policy

This policy applies to personal data collected when you use our public website, send email to published addresses, submit contact forms, interact with cookie controls, or otherwise communicate with us in connection with our lifestyle and design-oriented content. It does not govern third-party platforms that we may mention; those platforms maintain their own policies.

Business-to-business contact details provided on a corporate basis may be processed under overlapping rules; where relevant, we clarify roles and documentation separately.

3. Categories of personal data

Depending on your interaction, we may process:

  • Identity and contact data: name, email address, telephone number if supplied, organisation name, and similar identifiers.
  • Communication content: free-text messages, optional attachments, and metadata such as date and time of delivery.
  • Technical data: IP address, browser type and version, device category, operating system, referral URL, and approximate geographic region inferred from IP for security and aggregated analytics when consented.
  • Usage data: pages viewed, scroll depth where measured, approximate session duration, and interaction events collected through analytics tools when you consent.
  • Preference data: cookie consent selections stored locally, newsletter preferences if offered, and communication channel preferences.
  • Professional context: sector, project type, or room-use descriptions you volunteer to help us tailor non-binding suggestions.

We do not ask you to provide health data. If you include sensitive information in a message despite this, we will delete it where feasible unless a legal exception applies.

4. How we collect personal data

We collect data directly from you when you complete forms, send email, call us, or adjust cookie settings. We also receive limited technical data automatically when your browser requests pages, fonts, or scripts necessary to render the site. Where we use processors, they access data only under contract and instructions.

5. Purposes and legal bases

We process personal data only when a lawful basis applies under UK GDPR. Typical mappings include:

  • Responding to enquiries: to read your message and reply. Bases: legitimate interests in operating an accessible contact channel, and/or steps prior to a contract at your request.
  • Website operation and security: to deliver pages, prevent abuse, monitor errors, and maintain logs. Bases: legitimate interests in secure infrastructure; legal obligations where applicable.
  • Analytics: to understand aggregated traffic and improve structure. Basis: consent via the cookie banner for non-essential analytics.
  • Optional marketing: to send updates if you subscribe. Basis: consent, or another lawful route where clearly available under UK rules.
  • Compliance: to meet tax, accounting, or regulatory duties, and to establish or defend legal claims. Bases: legal obligation and legitimate interests as applicable.

Where we rely on legitimate interests, you may object as described in Section 10. We balance our interests against your rights and offer clear opt-outs where appropriate.

6. Cookies and similar technologies

We use strictly necessary technologies to run the site and optional analytics or marketing technologies when permitted. Storage keys, categories, and retention are described in our Cookie Policy, which should be read together with this Privacy Policy.

Where you consent to optional analytics or marketing technologies, we may process limited personal data in connection with online advertising and measurement (for example, to understand whether a visit related to an ad campaign and to improve relevance in aggregate). Providers such as Google or similar platforms may set or read identifiers subject to their own terms and your cookie choices. We do not use such tools to make solely automated decisions with legal or similarly significant effects about you through this website.

7. Retention periods

We keep personal data only as long as needed for the purposes above, unless a longer period is required or permitted by law:

  • General enquiries: usually up to twenty-four months after the last substantive message, unless an ongoing dialogue or dispute requires longer retention.
  • Contracts and invoices: up to seven years where accounting, tax, or company-law obligations apply.
  • Security logs: typically thirty to ninety days in rolling form, extended if needed to investigate incidents.
  • Consent records: evidence of cookie and marketing consent for periods consistent with regulatory guidance.
  • Anonymised analytics: may be retained indefinitely in aggregated form that does not identify individuals.

8. Automated decision-making and profiling

We do not use solely automated decision-making that produces legal or similarly significant effects concerning you. If this changes, we will update this policy and provide meaningful information about the logic involved and your rights.

9. Sharing and recipients

We do not sell personal data. We may share data with hosting providers, email transport services, analytics vendors when consented, backup providers, and professional advisers under confidentiality obligations. Transfers outside the UK are addressed in Section 12.

We may disclose information if required by law, court order, or competent authority, or to protect vital interests where strictly necessary.

10. Your rights under UK GDPR

Subject to conditions in law, you may have the right to access, rectify, erase, restrict processing, port data, object to certain processing, and withdraw consent where processing is consent-based. You may also lodge a complaint with the ICO in the United Kingdom; visit the ICO website for current routes.

To exercise a right, contact us using the details in Section 1. We may request reasonable identity verification before disclosing information. We respond without undue delay and within statutory timeframes unless an extension is permitted.

11. Security measures

We implement technical and organisational measures appropriate to the risk, including HTTPS for site delivery where supported by hosting, access controls for administrative interfaces, principle of least privilege, patching expectations for managed services, and confidentiality commitments in contracts with processors. No system is perfectly secure; please protect your devices and credentials.

12. International transfers

If personal data is transferred outside the United Kingdom, we implement safeguards permitted under UK GDPR, such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other approved mechanisms. You may request a summary of safeguards by contacting us.

13. Children

Our website is not directed at children under sixteen, and we do not knowingly collect their personal data. If you believe we have received such data inadvertently, contact us so we can delete it subject to legal requirements.

14. Links and embedded content

Pages may reference external resources. Clicking third-party links is voluntary; those operators process data under their own policies. Review their notices before submitting personal data.

15. Changes to this Privacy Policy

We may update this policy to reflect new features, legal requirements, or organisational changes. Continued use of the site after updates, where permitted, constitutes acceptance of the revised policy regarding processing described therein. If we introduce new purposes or legal bases that require consent, we will collect consent before processing begins.

Can I request a copy of my data?

Yes, where the right of access applies. Email us from the address you used originally so we can match your request securely. We may ask for additional verification.

How do I object to marketing?

Use unsubscribe links in any marketing email we send, or contact us directly. Non-promotional service messages may still be sent where necessary.

16. Relationship to site content

This website provides general lifestyle information only and does not constitute professional or medical advice. Privacy disclosures do not change the informational nature of editorial content.