Privacy policy

Last updated: October 2, 2026

Varahouse operates this store and website, including all related information, content, features, tools, products and services, in order to provide you with a curated shopping experience (the “Services”).

The Services are powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy explains how Varahouse collects, uses, stores and discloses your personal information when you visit, use, or make a purchase or other transaction through the Services, or otherwise interact with us.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read and understood how your personal information may be collected, used and disclosed as described in this Privacy Policy.

1. Personal Information We Collect

“Personal information” means information that identifies you or that can reasonably be linked to you or another individual.

Depending on how you interact with the Services, we may collect or process the following categories of personal information:

Contact information

This may include your name, billing address, shipping address, telephone number and email address.

Payment and transaction information

This may include payment card information, payment details, transaction information, billing information, payment method and payment confirmation.

Payment information may be processed by third-party payment providers and Shopify. We do not necessarily have access to your complete payment card information.

Account information

If you create an account, we may collect information such as your username, password, account preferences and settings.

Shopping and transaction information

This may include products you view, add to your cart, save to a wishlist, purchase, return, exchange or cancel, as well as information about your previous transactions.

Communications

If you contact us by telephone or through other communication channels available through the Services, we may collect the information you provide and information relating to your request.

Device and technical information

We may automatically collect information about the device and browser you use to access the Services, including your IP address, browser type, operating system, network information and certain unique identifiers.

Usage information

We may collect information about how you interact with the Services, including pages viewed, links clicked, products viewed and other browsing or interaction activity.

2. How We Collect Personal Information

We may collect personal information from the following sources:

  • Directly from you, when you place an order, create an account, communicate with us, subscribe to marketing communications, or otherwise provide information to us.

  • Automatically through the Services, including through cookies and similar technologies when you browse or use our website.

  • From Shopify and our service providers, when they process information on our behalf or provide services necessary to operate the store.

  • From third parties and business partners, where permitted by applicable law.

3. How We Use Your Personal Information

Depending on how you interact with Varahouse, we may use your personal information for the following purposes.

Providing and improving the Services

We may use your information to:

  • process and fulfil orders;

  • process payments;

  • arrange shipping and delivery;

  • process returns, refunds and exchanges;

  • maintain and manage customer accounts;

  • remember your preferences;

  • provide customer support;

  • provide product recommendations;

  • improve our website, products and services;

  • personalise your shopping experience; and

  • communicate with you about your transactions.

Marketing and advertising

Where permitted by applicable law, we may use your information to send promotional communications or provide advertising relating to our products and services.

Depending on your choices and applicable law, this may include email, SMS, postal communications or online advertising.

You may opt out of promotional communications by following the unsubscribe instructions included in those communications or by using the available communication preference controls.

Opting out of marketing communications will not prevent us from sending you necessary non-promotional communications, such as information concerning an order or account.

Security and fraud prevention

We may use personal information to:

  • authenticate accounts;

  • protect the security of the Services;

  • detect and prevent fraud;

  • investigate suspicious, illegal or harmful activity;

  • protect our customers and business; and

  • enforce our policies and terms.

Legal and regulatory purposes

We may process personal information when necessary to comply with applicable laws, regulations or legal obligations, respond to lawful requests from authorities, resolve disputes, establish or defend legal claims, or enforce our agreements and policies.

4. Lawful Bases for Processing

Where applicable law requires us to identify a lawful basis for processing personal information, we may rely on one or more of the following:

  • Contract: where processing is necessary to provide the Services, fulfil an order or perform a contract with you.

  • Legal obligation: where processing is necessary to comply with applicable legal or regulatory requirements.

  • Legitimate interests: where processing is necessary for legitimate business interests, such as operating, securing and improving our Services, preventing fraud, providing customer support and managing our business, provided that these interests are not overridden by your rights.

  • Consent: where we ask for your consent to process personal information for a particular purpose. Where we rely on consent, you may withdraw it at any time, subject to applicable law.

The lawful basis used will depend on the particular circumstances and purpose of the processing.

5. Cookies and Similar Technologies

We use cookies and similar technologies to operate, secure and improve the Services and to understand how visitors interact with our website.

Cookies may be used for purposes such as:

  • keeping the website functioning correctly;

  • remembering preferences;

  • maintaining shopping carts and sessions;

  • analysing website traffic and performance;

  • improving the shopping experience; and

  • supporting advertising and marketing activities where permitted.

Where required by applicable law, we will request your consent before using non-essential cookies or similar technologies.

You can manage cookies through your browser settings and, where available, through the cookie preferences provided on our website.

6. How We Disclose Personal Information

We may disclose personal information to third parties where reasonably necessary to provide the Services, operate our business, comply with legal obligations or for other purposes described in this Privacy Policy.

These third parties may include:

  • Shopify and companies within the Shopify group;

  • payment processors and financial service providers;

  • shipping and delivery providers;

  • fulfilment and logistics providers;

  • information technology and hosting providers;

  • cloud storage providers;

  • analytics providers;

  • customer service providers;

  • fraud prevention and security providers;

  • marketing and advertising partners; and

  • professional advisers and legal or regulatory authorities where required.

We may also disclose information:

  • when you request or authorise us to do so;

  • when necessary to comply with applicable law or a lawful request;

  • to protect our rights, property, customers or Services;

  • to investigate fraud or other unlawful activity; or

  • in connection with a business transaction, such as a merger, acquisition, restructuring, sale of assets or bankruptcy.

7. Shopify

Our store is hosted on Shopify.

Shopify collects and processes personal information relating to your access to and use of our Services in order to provide and improve Shopify's services and to support merchants such as Varahouse.

Information submitted through our store may be transmitted to and processed by Shopify and other service providers, including providers located outside the country in which you live.

Shopify may also process information relating to your interactions with our store and, depending on the Shopify services and features we use, interactions with other merchants and Shopify.

8. Third-Party Websites and Services

Our Services may contain links to websites, applications or services operated by third parties.

If you follow a link to a third-party website, that website will have its own privacy policy and terms. We are not responsible for the privacy, security or practices of third-party websites or services that we do not control.

We encourage you to review the privacy policies of third-party websites before providing them with personal information.

9. Children's Privacy

The Services are not intended for children.

We do not knowingly collect personal information from children where prohibited by applicable law.

If you believe that a child has provided us with personal information, you may contact us using the contact details provided in the “Contact” section below so that we can consider appropriate action.

10. Security

We take reasonable measures designed to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmission or storage is completely secure. We cannot guarantee the absolute security of personal information transmitted through the internet.

You are responsible for keeping any account credentials confidential and should not share your password or other account access information with others.

11. Retention of Personal Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

The length of time we retain information may depend on factors such as:

  • whether we need the information to provide Services to you;

  • whether you maintain an account with us;

  • whether we need the information to complete or document a transaction;

  • legal, tax or accounting requirements;

  • our need to resolve disputes;

  • our need to enforce agreements or policies; and

  • legitimate business requirements.

When personal information is no longer required, we will take reasonable steps to delete it or otherwise dispose of it securely, subject to applicable legal requirements.

12. Your Privacy Rights

Depending on where you live and subject to applicable law, you may have rights regarding your personal information.

These may include:

  • Right to access: You may have the right to request access to personal information we hold about you.

  • Right to correction: You may have the right to request correction of inaccurate or incomplete information.

  • Right to deletion: You may have the right to request deletion of personal information in certain circumstances.

  • Right to restriction: You may have the right to request that we restrict certain processing.

  • Right to object: You may have the right to object to certain processing, including certain direct marketing activities.

  • Right to data portability: In certain circumstances, you may have the right to receive your personal information in a structured, commonly used and machine-readable format.

  • Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time, subject to applicable law.

These rights are not absolute and may be subject to legal exceptions and limitations.

We may need to verify your identity before responding to certain requests.

13. Marketing Preferences

You may opt out of promotional marketing communications at any time by using the unsubscribe option included in our marketing messages or by using the relevant preference controls available through the Services.

If you opt out of marketing communications, we may still contact you where necessary for non-promotional purposes, including order confirmations, shipping information, account-related notices, security notifications or other transactional communications.

14. International Transfers

Your personal information may be transferred to, stored or processed in countries outside the country where you live.

Where required by applicable law, we will use appropriate safeguards for international transfers of personal information, such as an adequacy decision or recognised contractual safeguards.

Because Shopify and certain service providers operate internationally, your information may be processed in countries outside the United Kingdom or European Economic Area.

15. Complaints

If you have concerns about how we process your personal information, you may contact Varahouse using the contact details below.

If you are located in the United Kingdom, you may also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business practices, Services, legal requirements or regulatory obligations.

When we make changes, we will update the “Last updated” date at the top of this Privacy Policy and, where required by applicable law, provide additional notice.

We encourage you to review this Privacy Policy periodically.

17. Contact

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise a privacy right, you may contact us by telephone or post.

Varahouse
10 Marsh Wall
London E14 9GU
United Kingdom

Phone: +44 7869 765584