Last updated: July 2026
At Varenza, we are committed to protecting your privacy and handling your personal data with care and transparency. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or make a purchase.
1. Information We Collect
We may collect the following types of personal information:
- Personal Identification: Name, email address, phone number, and billing/shipping address.
- Payment Information: Payment card details (processed securely via our payment provider — we do not store card details).
- Order Information: Details of products purchased, order history, and transaction records.
- Technical Data: IP address, browser type, device information, and cookies.
- Communications: Any messages or enquiries you send to us.
2. How We Use Your Information
We use your personal data to:
- Process and fulfil your orders
- Communicate with you about your orders and enquiries
- Send marketing communications (only with your consent)
- Improve our website and customer experience
- Comply with legal obligations
3. Legal Basis for Processing
We process your personal data on the following legal bases: performance of a contract (to fulfil your order), legitimate interests (to improve our services), legal obligation (to comply with applicable laws), and consent (for marketing communications).
4. Sharing Your Information
We do not sell or rent your personal data to third parties. We may share your information with trusted service providers who assist us in operating our website and fulfilling orders (e.g., payment processors, shipping carriers), subject to strict confidentiality agreements.
5. Cookies
Our website uses cookies to enhance your browsing experience, analyse site traffic, and personalise content. You can manage your cookie preferences through your browser settings. Please note that disabling cookies may affect the functionality of our website.
6. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, or as required by law. Order records are typically retained for 7 years for accounting and legal purposes.
7. Your Rights
Under UK GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (where applicable)
- Object to or restrict processing of your data
- Data portability
- Withdraw consent at any time (where processing is based on consent)
To exercise any of these rights, please contact us.
8. Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. All transactions are encrypted using SSL technology.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions or concerns about this Privacy Policy, please contact us.