Privacy policy

This notice applies when you browse vcprom.com, save dresses on your device, book or manage an appointment online, or contact VC Prom about a visit.

Online booking collects the details shown in the booking form. The separate Appointment Booking Terms are available on the Terms page.

VC Prom is responsible for personal information handled through this website and its appointment interactions. The boutique is located at 350–352 Kingston Road, Epsom, KT19 0DT, United Kingdom.

You can browse the catalogue without creating an account or giving VC Prom your contact details. Booking an appointment requires your name, email address and telephone number.

The website may handle technical request information through ordinary server and security logs. This can include an IP address, browser or device information, requested pages, timestamps and information used to detect faults or abuse.

When you save a favourite dress, the list is stored locally in your browser under the key vcprom.appointment-shortlist.v1. A record may include a style code, colour, dress route and product image. The list is limited to five dresses and stores no preferred size.

The favourites list is browser and device specific and contains no name, email address, telephone number or payment information. VC Prom receives only the dress references you choose to include when you submit an online booking.

Saving a favourite does not reserve a dress. You can remove favourites on the favourites page or by clearing browser data. Selected favourites submitted with a booking are retained with that appointment record.

VC Prom uses Shopify as the source of public catalogue, product media, variant and boutique availability information. Catalogue requests are made by the VC Prom server using a server-only Storefront credential.

The browser does not receive that private credential, and favourite dresses are not transmitted to Shopify.

For an online booking, VC Prom records your name, email address, telephone number, appointment type and time, any selected dress favourites, your acknowledgement of the Privacy policy and Appointment Booking Terms, their recorded versions and the acknowledgement time. A private management link allows changes and cancellations; keep it confidential.

VC Prom uses booking details to arrange and manage your visit and prepare and, when delivery is configured, send service emails such as confirmations, changes, cancellations and applicable reminders. These are appointment messages, not marketing. If you separately choose WhatsApp, VC Prom also records that choice and may send the same appointment updates to your number through that channel. WhatsApp is off by default.

You can stop future WhatsApp messages from your appointment management link or by contacting VC Prom. This cancels messages waiting to be sent, but cannot retract a message already sent. Email service messages continue. Telephone enquiries may also be recorded to arrange or manage a visit.

Hosting and security systems may create ordinary technical logs to deliver pages, protect the website, diagnose errors, maintain reliability and prevent abuse. The exact log retention and hosting arrangements depend on the production provider and its operational settings.

VC Prom does not use those logs to create advertising profiles.

Information may be used to provide and manage appointment interactions you request, answer enquiries, operate and secure the website, diagnose problems, maintain accurate services, comply with legal duties and establish or defend legal rights where necessary.

Selected dress favourites submitted with a booking help the team prepare for your visit. Browser-only favourites remain on your device until you submit them. Booking contact details are not used for marketing through this flow.

VC Prom uses the contact and appointment details needed to take steps you request and provide the appointment arrangement. It uses legitimate interests, where appropriate, to operate and secure the website and manage service records, and complies with legal duties where required.

Optional WhatsApp appointment messaging depends on your separate choice, which you can withdraw for future messages. The booking acknowledgement confirms you have seen the notices; it is not a condition for consenting to marketing. Non-essential browser technologies require a separate assessment and choice where applicable.

Booking records are handled in the Operations Centre system backed by Supabase. If configured, an email provider such as Resend receives the contact and appointment details needed for transactional service messages. If configured and separately chosen by you, the WhatsApp Business Platform, provided by Meta, receives the details needed for WhatsApp appointment messages. These providers are not all active by default. Shopify supplies catalogue data through the server; selected dress references are checked against the catalogue when submitted.

VC Prom may also disclose information where required by law or where reasonably necessary to protect legal rights, safety or the security of the service.

Some technology providers may operate or support services outside the United Kingdom. Where personal information is transferred internationally, VC Prom will consider the destination, the provider's arrangements and any safeguards required by UK data protection law.

VC Prom will review the actual hosting, Supabase and messaging provider arrangements, contracts, processing locations and transfer safeguards before deployment or activation.

VC Prom keeps appointment and acknowledgement records while needed to manage the booking, related enquiries and applicable legal or business requirements. The exact booking-contact retention period remains under review; VC Prom will document and apply a defined schedule once approved.

Favourite-dress information remains in the visitor's browser until the visitor removes it or clears browser data. VC Prom cannot centrally delete browser-local favourites because they are not held remotely. Technical log retention depends on the production provider and configured security needs.

VC Prom uses proportionate technical and organisational measures. Booking management links are private, the public API limits requests, and the Shopify catalogue credential stays on the server. Please do not include sensitive details in dress preferences.

No internet service can guarantee absolute security. Visitors should avoid placing sensitive or personal information in fields that are intended only for dress preferences.

UK data protection law may give you rights to request access to personal information, correction, erasure, restriction, objection and data portability where applicable. If processing relies on consent, you may withdraw that consent without affecting earlier lawful processing.

The rights available can depend on the purpose and lawful basis for processing. VC Prom may need enough information to verify a request and identify the relevant records. You may also complain to the Information Commissioner's Office at ico.org.uk.

The catalogue is relevant to young people preparing for prom. Online booking asks only for the contact and appointment details needed to arrange a visit. A parent or guardian may book or contact the boutique about a young person.

A parent or guardian can contact VC Prom if they have a question about information relating to a young person.

The website uses browser local storage for favourite dresses and consent preferences. With your choice, Vercel Web Analytics collects aggregated page-view information without analytics cookies. Advertising and behavioural tracking are not installed.

More detail and browser-control information is provided in the Cookies and local storage policy.

The website may link to services operated by other organisations, such as directions or public regulatory information. Those services control their own websites and privacy practices. Review their information before providing personal data.

This policy is updated when the appointment process or service providers change. The updated date at the top identifies this published copy; operational review of providers and retention continues.

Contact VC Prom if you have a question or wish to exercise a data protection right. You may also complain to the Information Commissioner’s Office at ico.org.uk; you do not have to contact VC Prom first.