Data Protection and Privacy Compliance Statement

1. Overview

During the operation of the website and the provision of related services, certain activities may involve the processing of personal information.
This statement provides a general overview of the applicable data protection framework in the United Kingdom and Europe, outlines common processing principles, and explains the types of rights that may apply under relevant laws.

Its purpose is to help users understand how personal information is handled within a compliant and regulated environment.

2. Applicable Legal Framework and Purpose

Within the UK and European context, the processing of personal information is primarily governed by:

• The UK Data Protection Act 2018

• The UK General Data Protection Regulation (UK GDPR)

These laws are designed to improve transparency around how personal data is used, define appropriate boundaries for processing activities, and reduce risks associated with misuse, unauthorised access, or disclosure.

3. Scope of Application

This compliance statement applies to personal data processing activities carried out in situations such as:

• Providing goods or related services to users located in the United Kingdom

• Operating website functions, online tools, or customer support channels

• Processing information for order fulfilment, communication, or compliance-related purposes

Activities carried out purely for personal or household use are generally outside the scope of this statement.

4. Core Principles of Data Processing

Personal information is typically processed in line with recognised data protection principles, which may include the following.

Lawfulness and transparency
Information is collected and used on an appropriate legal basis and explained in a clear and understandable manner.

Purpose limitation
Data is processed only for specified, legitimate purposes that are relevant to the services provided.

Data minimisation
The information collected is limited to what is necessary to achieve the intended purpose.

Accuracy
Reasonable steps may be taken, where appropriate, to ensure information remains accurate and up to date.

Storage limitation
Personal data is not retained for longer than required for operational or legal reasons.

Security safeguards
Common technical and organisational measures are generally applied to reduce data-related risks.

5. Rights That May Apply to Users

Subject to the conditions set out in UK and European data protection law, users may have certain rights in relation to their personal information, including:

• Requesting access to personal data held about them

• Asking for corrections where information is inaccurate or incomplete

• Requesting restriction or deletion of data where legal requirements are met

• Raising questions or concerns about specific processing activities

Requests related to these rights can be submitted using the contact details published on the website.

6. Compliance Management and Processing Practices

When carrying out data processing activities, reference is typically made to practices such as:

• Processing information in line with service needs and legal obligations

• Applying access controls, encryption, or similar safeguards where appropriate

• Assessing potential data security risks

• Keeping necessary records of processing activities in applicable cases

Whether additional measures are required is assessed based on the specific context and legal requirements involved.

7. International Data Processing

In certain technical or operational scenarios, personal information may be stored or processed outside the United Kingdom.
Where this occurs, recognised compliance mechanisms may be used to help ensure that appropriate data protection standards are maintained.

8. Regulatory Oversight and Compliance Outcomes

In the United Kingdom, data protection matters are subject to oversight by the relevant regulatory authorities.
Where applicable data protection requirements are not met, outcomes may include review, corrective actions, or other measures depending on the nature and impact of the issue.

9. Why Compliance Matters

For users
Understanding how personal information is used can support transparency and informed use of online services.

For platform operations
A compliant approach helps reduce regulatory risk and supports stable operation within an appropriate legal framework.

10. Contact Information

If you have questions regarding personal data processing, privacy documentation, or data protection rights, you may contact us at:

Email: suivi@viberoomz.com

Enquiries will be reviewed based on their content and context and responded to where appropriate.