UK GDPR

I. Scope

This statement applies to the processing of personal data of users located in the United Kingdom.

It applies when providing goods or services to UK users, or analyzing and recording their behavior on the website, regardless of whether the data processing occurs within the UK.

This statement covers data stored electronically as well as structured paper records.

Data processing solely for personal or household purposes is not covered by this statement.

II. Core Principles

The processing of personal data follows these principles:

• Lawfulness, fairness, and transparency;

• Clear and specific purpose limitation, restricted to what is necessary to achieve the intended purpose;

• Data adequacy, relevance, and accuracy;

• Retention limited to the necessary period;

• Technical and organizational measures to ensure data integrity and confidentiality, preventing unauthorized access or disclosure.

III. User Rights

Under UK GDPR, users have the following rights:

• Right to be informed, access, and rectify data;

• Right to erasure (right to be forgotten);

• Right to restrict processing and object to processing;

• Right to data portability;

• Right to withdraw consent at any time.

For users under 16 years old, these rights must be exercised with the assistance or authorization of a legal guardian.

IV. Obligations of Processors and Partners

Partners involved in data processing (e.g., logistics, technical support, system hosting) must:

• Process data only according to clear instructions;

• Implement appropriate security and confidentiality measures;

• Support user rights requests;

• Report any data security incidents;

• Maintain necessary records of processing activities;

• Appoint a data protection officer when required by law.

V. Cross-Border Data Transfer

When personal data is transferred outside the UK, appropriate protection will be ensured, including but not limited to:

• Using recognized data adequacy mechanisms;

• Implementing contractual clauses compliant with UK GDPR;

• Applying supplementary technical and organizational measures such as encryption and access control.

VI. Supervision and Compliance

The UK Information Commissioner’s Office (ICO) supervises data protection compliance, including:

• Conducting compliance audits;

• Requiring suspension or rectification of non-compliant processing activities;

• Taking regulatory actions or imposing penalties according to law.

VII. Compliance Principles

Data processing activities are based on the following principles:

• Ensuring users maintain control over their personal data;

• Implementing clear and understandable data processing methods;

• Reducing privacy risks through appropriate technical and organizational measures.

VIII. Contact Information

Address: 501 TUBBS CT, BISHOPVILLE, SC 290101762, US

Phone: +1 (917) 817-5241

Email: vente@vibefurn.com

Service Hours: Monday to Friday 9:00–12:30 / 14:00–18:00 (CET)

IX. Data Protection Requests

Requests related to access, correction, or deletion of personal data can be submitted through the contact information above.
All requests will be processed within the timeframe specified by applicable regulations.