Privacy Policy

Last updated: 10 August 2026

This Privacy Policy explains how Vesta Custom Creations (“Vesta”, “we”, “us”, “our”) collects, uses, and protects your personal information when you use https://vesta.scot and when you buy from or contact us.

We are committed to handling your information lawfully, fairly, and transparently under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Business name: Vesta Custom Creations
Website: https://vesta.scot
Location: Motherwell, Scotland, United Kingdom
Email: [email protected]
Telephone: (+44) 7356 206 466

For data protection queries, please contact us using the details above. We are the data controller for personal information collected through this website and our order processes.

2. Information we collect

Depending on how you use our site, we may collect:

Identity and contact details — name, email address, phone number, billing and shipping addresses
Order and account information — products ordered, personalisation details, order history, account login details if you create an account
Custom order / enquiry information — brief details, artwork or photos you upload, messages you send via forms or email
Payment information — payments are processed by our payment provider(s); we do not store full card numbers on our servers
Technical information — IP address, browser type, device information, and pages visited (including via cookies and similar technologies)
Communications — emails, messages, and support correspondence

3. How we use your information

We use personal information to:

process and fulfil orders, including personalised and made-to-order products
communicate about orders, proofs, delivery, returns, and enquiries
provide and manage customer accounts
improve our website, products, and services
comply with legal and accounting obligations
detect and prevent fraud or misuse of our services
analyse site performance and marketing effectiveness where permitted (for example via Google tools, where used)

4. Legal bases for processing

We process personal data where one or more of the following applies:

Contract — to take steps at your request and to fulfil an order or service
Legitimate interests — to run and improve our business, respond to enquiries, and keep our site secure, where these interests are not overridden by your rights
Legal obligation — for example tax, accounting, and consumer law requirements
Consent — where we ask for it (for example certain cookies or marketing), which you may withdraw at any time

5. Personalised products and uploaded files

If you send names, photos, logos, or other artwork for engraving, printing, or 3D work, we use that content only to produce and support your order (and related customer service). You must have the right to use any images or branding you provide. We may retain production files for a reasonable period for reprints, quality checks, and dispute handling, then delete or anonymise them when no longer needed.

6. Cookies and similar technologies

Our site uses cookies and similar technologies that are necessary for the shop to work (for example cart and checkout sessions). We may also use analytics or advertising-related cookies (for example via Google Site Kit / Google services) where configured. You can control cookies through your browser settings. Blocking some cookies may affect site features such as cart and login.

7. Who we share information with

We do not sell your personal information. We may share it with trusted service providers who help us operate the business, such as:

website hosting and security providers (including Cloudflare where used)
e-commerce and payment providers (WooCommerce / payment processors)
email delivery and form tools
analytics or advertising platforms where used
delivery / courier partners for shipping
professional advisers (for example accountants) where required

These parties are only given access to information needed to perform their services and are expected to protect it appropriately. We may also disclose information if required by law or to protect our rights, customers, or security.

8. International transfers

Some providers we use may process data outside the United Kingdom. Where that happens, we take steps to ensure appropriate safeguards are in place as required by UK data protection law.

9. How long we keep information

We keep personal information only for as long as needed for the purposes above. Order and invoice records are typically retained for legal and accounting periods. Enquiry messages and unused uploads are kept for a shorter operational period and then deleted or anonymised. Exact retention can vary depending on the type of record and legal requirements.

10. Your rights

Under UK GDPR you may have the right to:

access your personal data
rectify inaccurate data
request erasure (in certain circumstances)
restrict or object to certain processing
data portability (in certain circumstances)
withdraw consent where processing is based on consent

To exercise these rights, contact [email protected]. You also have the right to complain to the UK Information Commissioner’s Office (ICO): https://ico.org.uk.

11. Security

We use technical and organisational measures appropriate to a small online shop to protect personal information (including HTTPS). No method of transmission or storage is completely secure; please use a strong password for any account and contact us if you suspect unauthorised access.

12. Children’s privacy

Our website and shop are intended for adults. We do not knowingly collect personal information from children under 16 for account or marketing purposes. If you believe a child has provided us personal data, please contact us and we will take appropriate steps.

13. Links to other sites

Our site may link to third-party websites. We are not responsible for their privacy practices. We encourage you to read their policies.

14. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Please review this page periodically.

15. Contact

Questions about this policy or your personal data:
Email: [email protected]
Phone: (+44) 7356 206 466
Web: Contact page

This policy is provided for transparency for customers of Vesta Custom Creations. It is not legal advice. If you need formal legal review, please consult a qualified adviser.