Privacy Policy
How we collect, use, and protect your personal data when you shop with Obscura Vault Limited.
1. Who We Are
Curio Haven Ltd (Company No. 16670017), 6 Marius Grove, Fairfields, Milton Keynes, England, MK11 4DH.
Status: Active · Private limited company · Incorporated 25 August 2025.
Accounts: First accounts made up to 31 August 2026, due by 25 May 2027.
Confirmation statement: First statement date 24 August 2026, due by 7 September 2026.
Data controller contact: privacy@obscuravault.co.uk
2. What We Collect
Contact details: name, email, phone, billing/shipping address.
Order details: items purchased, payment method (tokenized by payment provider), totals, delivery info.
Site usage: analytics events (e.g., pages viewed, device/browser), collected via cookies where consented.
3. How We Use Data
To process and fulfill orders, provide customer support, and handle returns.
To prevent fraud and maintain site security.
To improve our site and services (analytics, performance).
To send service emails about your orders; marketing emails only with your consent (you may opt out anytime).
4. Lawful Bases (UK GDPR)
Contract: to process and deliver your orders.
Legitimate interests: site security, fraud prevention, service improvements.
Consent: marketing communications and non-essential cookies/analytics.
Legal obligation: accounting, tax, and compliance requirements.
5. Sharing
Payment processors (for secure payments).
Delivery and logistics providers to ship orders.
Service vendors (hosting, analytics) under contract with appropriate safeguards.
We do not sell your personal data.
6. International Transfers
If data is processed outside the UK/EEA by our vendors, we use safeguards such as Standard Contractual Clauses or equivalent lawful transfer mechanisms.
7. Retention
Order and invoicing records: typically retained for 6 years for accounting/legal compliance.
Marketing data: retained until you opt out or withdraw consent.
Analytics data: retained per vendor default windows unless deleted sooner.
8. Your Rights (UK GDPR)
Access, rectification, erasure, restriction, objection, and data portability where applicable.
Withdraw consent for marketing and non-essential cookies at any time.
To exercise rights, email privacy@obscuravault.co.uk. We may need to verify your identity.
9. Cookies
We use necessary cookies for site functionality and checkout, and (with consent) analytics/performance cookies.
See our Cookies Notice for details and how to manage preferences.
10. Security
We use appropriate technical and organisational measures to protect personal data. No system is 100% secure, but we continuously improve safeguards.
11. Complaints
If you have concerns, contact privacy@obscuravault.co.uk.
You also have the right to lodge a complaint with the UK ICO (ico.org.uk).
12. Updates
We may update this policy periodically. Material changes will be posted on this page.
Last updated: December 2025.