1. Who we are
Coral Vault LTD is a UK marine coral and livestock business operating through:
Website: www.coralvault.co.uk
For privacy-related enquiries, please contact us using the contact details available on our website.
Where CoralVault determines why and how personal information is used, CoralVault acts as the data controller for the purposes of applicable UK data-protection law.
2. Information we may collect
Depending on how you interact with CoralVault, we may collect and process information including:
- your name
- email address
- telephone number
- billing address
- delivery address
- order and purchase information
- payment-related transaction information
- customer-service communications
- marketing preferences
- competition or promotion entries
- information you provide when contacting us
- website usage information
- browser and device information
- IP address
- approximate location information derived from website analytics
- information relating to how you interact with our emails or website
We may also process information supplied by authorised third-party platforms in connection with CoralVault’s own business accounts, website and marketing activities.
3. How we collect information
We may collect information:
- directly from you
- when you place an order
- when you contact CoralVault
- when you subscribe to marketing
- when you enter a competition or promotion
- when you use our website
- through cookies and similar technologies
- from payment, ecommerce, delivery and marketing providers
- from authorised analytics and social-media platforms
4. How we use your information
We may use personal information to:
- process and fulfil orders
- take and manage payments
- arrange delivery
- communicate about your order
- respond to customer enquiries
- manage refunds, cancellations or livestock claims
- maintain business and accounting records
- provide customer support
- improve our website and services
- analyse website performance
- understand which products and content are of interest
- measure marketing performance
- manage email marketing and mailing lists
- prevent fraud or misuse
- secure our systems
- meet legal, tax and accounting obligations
- manage competitions and promotions
- operate and improve CoralVault’s internal business systems
5. Lawful bases for processing
Depending on the circumstances, we may process personal information because:
Contract
Processing may be necessary to enter into or perform a contract with you, for example when processing an order and arranging delivery.
Legal obligation
We may need to process and retain certain information to comply with tax, accounting, consumer-protection or other legal requirements.
Legitimate interests
We may process information where necessary for CoralVault’s legitimate business interests, provided those interests are not overridden by your rights.
These interests may include:
- operating and improving our business
- providing customer service
- securing our systems
- analysing business performance
- understanding website usage
- preventing fraud
- improving products, marketing and customer experience
Consent
Where required, we may rely on your consent, for example for certain forms of electronic marketing or non-essential cookies.
Where processing is based on consent, you may withdraw that consent at any time.
6. Orders and ecommerce
When you place an order with CoralVault, we may process information including your name, contact details, billing and delivery address, items ordered and order history.
Our website uses WooCommerce and related systems to manage ecommerce operations.
Order information may also be processed by payment providers, delivery providers and other services required to fulfil your purchase.
We do not intentionally store full payment-card details ourselves where payment is handled by a third-party payment provider.
7. Website analytics
CoralVault uses analytics services, including Google Analytics, to understand how visitors use our website.
Analytics information may include:
- visitor and session numbers
- pages viewed
- landing pages
- traffic sources
- device and browser type
- approximate geographic area
- engagement information
- ecommerce events
- purchases and conversion information
We use this information to understand website performance, improve the customer experience and assess the effectiveness of marketing.
Where required by law, non-essential analytics technologies are only used after appropriate consent has been obtained.
The ICO states that users should be informed about cookies and that consent is generally required for cookies that are not strictly necessary.
8. Social media and internal analytics
CoralVault may connect its own authorised business social-media accounts to internal business systems.
This may include platforms such as:
- Facebook / Meta
- TikTok
- other social-media or marketing platforms
Where CoralVault connects its own business account, we may process data supplied by that platform such as:
- account identifiers
- username or profile information
- follower counts
- published posts, photographs or videos
- captions
- likes
- comments
- views
- reach
- engagement statistics
- content-performance information
This information is used internally to:
- understand the performance of CoralVault’s own social-media content
- identify successful content formats
- analyse trends
- plan future marketing content
- compare social activity with website and ecommerce performance
These internal systems are not offered as public customer-facing social-media services.
9. TikTok data
If CoralVault connects its own authorised TikTok account to an internal business system, we may receive information permitted by TikTok’s APIs and by the permissions authorised for that account.
This may include:
- basic account information
- published videos
- video descriptions
- content statistics
- engagement and performance metrics
This information is used for CoralVault’s own internal analytics and content planning.
We do not sell TikTok account information.
Any use of information received through TikTok APIs is also subject to applicable TikTok developer terms and policies.
10. Instagram and Meta data
Where CoralVault connects an authorised Instagram professional account or other Meta business asset, we may receive permitted account, media and insight information.
This may include:
- account information
- published media
- captions
- follower statistics
- likes and comments
- reach and engagement metrics
- other authorised account insights
This information is used for CoralVault’s own business analytics and content planning.
11. Email marketing
CoralVault may use services such as Mailchimp to manage mailing lists and email campaigns.
Where you have subscribed to marketing, we may process information such as:
- your name
- email address
- subscription status
- marketing preferences
- email opens or clicks where supported and lawful
You can unsubscribe from marketing emails at any time using the unsubscribe link provided in the message.
12. Artificial intelligence and internal business tools
CoralVault may use artificial intelligence and internal software tools to assist with activities such as:
- drafting product descriptions
- analysing business information
- summarising data
- preparing marketing content
- analysing CoralVault’s own social-media performance
- suggesting future content ideas
- supporting administrative tasks
Important business decisions and outward-facing actions remain subject to human oversight where appropriate.
We do not intentionally provide AI systems with information that is unnecessary for the task being performed.
13. Who we may share information with
We may share information with trusted providers where reasonably necessary to operate CoralVault.
These may include:
- website hosting providers
- WooCommerce and WordPress services
- payment providers
- delivery and shipping companies
- email marketing providers
- analytics providers
- Meta / Instagram
- TikTok
- technology and AI providers
- accountants or professional advisers
- regulators or public authorities where legally required
We only provide information that is reasonably necessary for the relevant service.
We do not sell personal information to advertisers.
14. International processing
Some of the technology providers used by CoralVault may process information outside the United Kingdom.
Where personal information is transferred internationally, we take reasonable steps to ensure appropriate safeguards are used where required by applicable data-protection law.
These safeguards may include recognised contractual protections or other lawful transfer mechanisms.
15. How long we keep information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.
Retention periods may vary according to the type of information and why we hold it.
For example:
- order and transaction records may be kept for accounting, tax and legal purposes
- customer-service communications may be retained where necessary to resolve issues or maintain relevant records
- marketing information may be retained until you unsubscribe or the information is no longer required
- analytics information may be retained according to the settings and retention controls of the relevant analytics platform
- internal business records may be retained where reasonably necessary for operational or legal purposes
When information is no longer required, we will take reasonable steps to delete or anonymise it.
UK data-protection guidance requires organisations to consider how long information is needed and not keep it indefinitely without justification.
16. Security
We take reasonable technical and organisational measures to protect information against:
- unauthorised access
- loss
- misuse
- disclosure
- alteration
- destruction
Access credentials, API keys and authentication tokens used by CoralVault’s internal systems are stored on secured server-side systems and are not intentionally exposed through public website code.
No internet-based system can be guaranteed to be completely secure, but we take proportionate measures to reduce risk.
17. Your rights
Depending on the circumstances and applicable law, you may have the right to:
- request access to personal information we hold about you
- request correction of inaccurate information
- request deletion of information
- request restriction of processing
- object to certain processing
- request transfer of information in certain circumstances
- withdraw consent where processing is based on consent
These rights are subject to legal conditions and exemptions.
To exercise a data-protection right, contact CoralVault using the contact details available on our website.
18. Complaints
If you have concerns about how CoralVault handles your personal information, please contact us first so that we can investigate.
You also have the right to complain to the UK Information Commissioner’s Office where applicable.
Information about data-protection rights and complaints is available from the ICO.
19. Cookies
The CoralVault website may use cookies and similar technologies.
These may include:
- essential cookies required for the website or checkout to function
- preference cookies
- analytics cookies
- marketing technologies
Where consent is required for non-essential cookies, we will seek that consent through the website’s cookie controls.
For more information, please refer to any Cookie Policy or cookie-management information provided on the CoralVault website.
20. Third-party websites and platforms
Our website may link to third-party websites or services.
Third-party companies such as Meta, Instagram, TikTok, Google, Mailchimp and payment providers operate under their own privacy policies and terms.
CoralVault is not responsible for the independent privacy practices of third-party websites and services.
21. Children
CoralVault’s products and services are not intentionally directed at children.
We do not knowingly seek to collect personal information from children through our business website or internal analytics systems.
22. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect:
- changes to our business
- new services or integrations
- legal or regulatory changes
- changes to the technology we use
The latest version will always be published on this page.
Where appropriate, we may provide additional notice of material changes.
23. Contact CoralVault
If you have any questions about this Privacy Policy or how your personal information is used, please contact CoralVault using the contact details available at: