1. Introduction
VUNKED LTD (“we”, “us”, “our”) takes the protection of your personal data seriously. This privacy policy explains how we collect, use, store, and share your personal data when you visit our website at www.vunked.co.uk, use our services, or interact with us.
We comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 (DPA 2018), and the Privacy and Electronic Communications Regulations 2003 (PECR).
2. Data Controller
The data controller responsible for your personal data is:
VUNKED LTD
28 Ardmore Gardens, Drymen, Stirling, G63 0BD
Email: hello@vunked.co.uk
Website: www.vunked.co.uk
3. What Personal Data We Collect
We collect different types of personal data depending on how you interact with us:
3.1 When You Browse Our Website
When you visit our website, we automatically collect technical data that your browser sends to our server. This includes your IP address, browser type and version, operating system, referring website, pages visited, date and time of access, and the amount of data transferred. This data is necessary to display the website, ensure its security and stability, and for general analytics purposes. The legal basis is our legitimate interest in operating and improving our website (Article 6(1)(f) UK GDPR).
3.2 When You Use Our Builder Tool or Request a Quote
When you use our electrical system builder tool or request a quote, we collect the information you provide, which typically includes your name, email address, and details about your van and electrical requirements. We may also collect your phone number if you choose to provide it. This data is processed to provide you with a tailored system recommendation, quote, and related support. The legal basis is the performance of a contract or pre-contractual steps at your request (Article 6(1)(b) UK GDPR).
3.3 When You Place an Order
When you purchase from us, we collect the information necessary to fulfil your order, including your name, email address, delivery address, phone number, and payment details. Payment information is processed securely by our payment provider, Stripe, and we do not store your full card details on our systems. The legal basis is the performance of a contract (Article 6(1)(b) UK GDPR).
3.4 When You Contact Us
You can contact us by email, through our website contact form, or via WhatsApp. When you do so, we collect whatever information you provide in your message, along with your email address, phone number, or WhatsApp number as applicable. If you book a call with us through Cal.com, we collect your name, email, and any information you include in the booking. The legal basis is our legitimate interest in responding to your enquiry (Article 6(1)(f) UK GDPR) or, where applicable, the performance of a contract (Article 6(1)(b) UK GDPR).
3.5 When You Subscribe to Marketing
If you opt in to receive marketing emails from us, we collect your email address and, where provided, your name and phone number. We use this data to send you product updates, offers, educational content, and other marketing communications. The legal basis is your consent (Article 6(1)(a) UK GDPR). You can withdraw your consent and unsubscribe at any time by clicking the unsubscribe link in any marketing email, or by contacting us at hello@vunked.co.uk.
3.6 Affiliate Programme
If you arrive at our website via an affiliate link, we use URL parameters (such as a “via” tag) to identify the referring affiliate. This allows us to attribute your visit or purchase to the correct affiliate partner. This tracking is handled through our own systems and the data collected is limited to the referral identifier and your subsequent browsing and purchase activity. The legal basis is our legitimate interest in managing our affiliate programme (Article 6(1)(f) UK GDPR).
4. Cookies and Tracking Technologies
4.1 What Are Cookies
Cookies are small text files stored on your device when you visit a website. They help the website function, improve your experience, and allow us to understand how people use our site.
4.2 Cookie Consent
When you first visit our website, you will see a cookie consent banner. Non-essential cookies (including analytics and marketing cookies) are not set until you actively consent via this banner. You can change or withdraw your cookie preferences at any time through the cookie settings link on our website. Strictly necessary cookies, which are required for the website to function (such as session cookies), do not require your consent.
4.3 Types of Cookies We Use
Strictly Necessary (Vunked/Vercel): Core site functionality, session management, cookie consent preferences. No consent required.
Analytics (Google Analytics): Understanding how visitors use our site, page views, traffic sources, user journeys. Consent required.
Marketing/Advertising (Meta Pixel, Google Ads): Tracking conversions, building remarketing audiences, optimising ad delivery. Consent required.
Email Marketing (Klaviyo): Tracking email-driven site visits and conversions, personalising email content. Consent required.
Affiliate Tracking (Vunked internal): Attributing visits and purchases to affiliate partners via URL parameters. Consent required.
4.4 Managing Cookies
In addition to our cookie consent banner, you can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking certain cookies may affect the functionality of our website. For more information about cookies and how to manage them, visit www.allaboutcookies.org.
5. How We Use Your Personal Data
We use your personal data for the following purposes:
- To operate and display our website
- To provide you with system recommendations, quotes, and product information
- To process and fulfil your orders, including delivery and payment
- To respond to your enquiries via email, contact form, WhatsApp, or booked calls
- To send you marketing communications where you have opted in
- To manage our affiliate programme and attribute referrals
- To analyse website usage and improve our products and services
- To serve relevant advertising through Meta and Google platforms
- To detect and prevent fraud, and to ensure the security of our website
- To comply with legal obligations, such as tax and accounting requirements
6. Who We Share Your Data With
We share your personal data only where necessary and with appropriate safeguards. Our key service providers (data processors) include:
- Stripe – Payment processing (name, payment details, order amount)
- Klaviyo – Email marketing (name, email, purchase history, browsing activity)
- Vercel – Website hosting (technical data, IP address, request logs)
- Google – Analytics and advertising (pseudonymised browsing data, conversion events)
- Meta – Advertising and conversion tracking (pseudonymised browsing data, conversion events)
- Cal.com – Call booking and scheduling (name, email, booking details)
- WhatsApp – Customer communication (phone number, message content)
- Shipping providers – Order delivery (name, address, phone number, order details)
We will not sell your personal data to any third party. We may also share data where required by law, regulation, or legal proceedings, or to protect our rights or the safety of others.
7. International Data Transfers
Some of our service providers are based in the United States or other countries outside the United Kingdom. Where your personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including UK Standard Contractual Clauses (SCCs) or reliance on the relevant provider’s compliance framework. This applies to transfers to Stripe, Klaviyo, Google, Meta, Vercel, and Cal.com.
If you would like more information about the specific safeguards in place, please contact us at hello@vunked.co.uk.
8. How Long We Keep Your Data
We retain your personal data only for as long as necessary for the purposes set out in this policy, or as required by law. Our general retention periods are:
- Order and transaction data: 6 years from the date of the transaction, as required by UK tax and accounting law (HMRC).
- Marketing data: Until you withdraw your consent or unsubscribe. We may retain a suppression record of your email address to ensure we do not contact you again.
- Quote and enquiry data: 12 months after your enquiry has been resolved, unless it leads to an order.
- Contact form and WhatsApp messages: 12 months after the conversation ends, unless the enquiry relates to an order.
- Website analytics data: Retained in anonymised or pseudonymised form in accordance with the retention settings of Google Analytics (default 14 months).
- Call booking data (Cal.com): 12 months after the booked call, unless it leads to an ongoing relationship.
9. Your Rights
Under the UK GDPR, you have the following rights in relation to your personal data:
- Right of access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct any inaccurate or incomplete data.
- Right to erasure: You can ask us to delete your data in certain circumstances.
- Right to restrict processing: You can ask us to limit how we use your data while a concern is being resolved.
- Right to data portability: You can request your data in a structured, machine-readable format.
- Right to object: You can object to processing based on our legitimate interests. You can also object to direct marketing at any time.
- Right to withdraw consent: Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us at hello@vunked.co.uk. We will respond within one month of receiving your request.
If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection. You can contact the ICO at ico.org.uk or by phone on 0303 123 1113.
10. Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. Our website uses SSL/TLS encryption (HTTPS) for all data transmitted between your browser and our servers. Our infrastructure is hosted on Vercel, which provides enterprise-grade security, and payment data is handled by Stripe, which is PCI DSS Level 1 certified. We regularly review our security practices and update them in line with current best practice.
11. Marketing Communications
We use Klaviyo to manage our email marketing. When you opt in to receive marketing from us (for example, by subscribing to our mailing list, ticking a consent box during checkout, or via our website), we will send you emails about our products, guides, offers, and related content. We may segment and personalise these emails based on your browsing behaviour and purchase history, where you have given consent for the relevant tracking cookies.
You can unsubscribe from our marketing emails at any time by clicking the unsubscribe link at the bottom of any email, or by contacting us at hello@vunked.co.uk. We comply with the Privacy and Electronic Communications Regulations 2003 (PECR) and only send marketing communications where we have your consent or, for existing customers, where the communication relates to similar products or services you have previously purchased from us (the “soft opt-in”).
12. Children’s Privacy
Our products and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate parental consent, we will delete it promptly.
13. Changes to This Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
14. Contact Us
If you have any questions about this privacy policy or how we handle your personal data, please contact us:
VUNKED LTD
28 Ardmore Gardens, Drymen, Stirling, G63 0BD
Email: hello@vunked.co.uk