Privacy Policy

FitzAlan.com Privacy Policy
Last updated 8 June 2025

Vernly, LLC (‘we’, ‘us’, ‘our’) is committed to protecting the privacy of every customer. This notice sets out how we collect, use, share, and safeguard personal information when you visit FitzAlan.com or buy our products.


1. Information we collect

We collect and store the following categories of data:

  1. Identity data such as name, postal address, email address, and telephone number.

  2. Transaction data including the products you purchase and payment details.

  3. Technical data such as IP address, browser type, time-zone setting, and operating system.

  4. Usage data showing how you navigate our site.

  5. Marketing preference data confirming whether you wish to receive email updates.

We do not intentionally collect special category data or information relating to children under thirteen years of age.


2. How we use personal information

We process data only where a lawful basis applies:

  • Contract performance to accept and dispatch your order and manage payments.

  • Consent when you choose to receive marketing emails; you can withdraw consent at any time via the unsubscribe link in each message.

  • Legitimate interests such as improving site performance and fraud prevention.

  • Legal obligation for example, keeping records required by tax authorities.


3. Email marketing

Marketing messages are sent only to subscribers who have given clear permission. Every email contains an easy method to opt out. We maintain a suppression list so that opted-out addresses do not receive further marketing.


4. Cookies

We use first-party cookies and similar technologies to

  • remember the items placed in your basket,

  • analyse site traffic and performance, and

  • measure the success of our email campaigns.

You may refuse non-essential cookies through your browser settings. Essential cookies are needed for checkout to function.


5. Sharing personal data

We never sell personal data to any third party. We share information only with:

  • Payment processors and delivery partners who must receive limited details to complete your order.

  • Professional advisers such as accountants or lawyers where this is required for compliance.

  • Regulators, courts, or law-enforcement bodies when the law requires us to do so.

All service providers are bound by written contract to keep the data secure and to use it only for the agreed purpose.


6. International transfers

Our primary servers are located in the United States. If we transfer personal data outside your jurisdiction, we will rely on a lawful transfer mechanism recognised by the relevant authority, such as standard contractual clauses or an adequacy decision.


7. Data retention

We keep personal data only as long as necessary to meet the purposes stated in this policy, including satisfying legal, accounting, or reporting obligations. For example, order records are retained for at least seven years under United States tax law.


8. Security

We apply appropriate technical and organisational safeguards, including encryption in transit and at rest, access controls, security monitoring, and regular staff training.


9. Your rights

Depending on where you live, you may have rights to:

  • access the personal data we hold,

  • correct inaccurate data,

  • delete data that is no longer required,

  • restrict or object to certain processing,

  • receive a copy of your data in a portable format, and

  • complain to a supervisory authority.

Residents of California, Colorado, Connecticut, Utah, Virginia, Texas, Montana, Oregon, Delaware, Iowa, Nebraska, New Hampshire, and New Jersey enjoy additional consumer privacy rights under state law, including the right to opt out of targeted advertising and certain profiling. European Union and United Kingdom visitors may exercise rights granted under the GDPR. To exercise any right, email us using the contact details below. We will verify your identity before acting on a request and may ask for additional information if an authorised agent acts on your behalf.


10. Children

FitzAlan.com is not directed to children under thirteen years of age. We do not knowingly collect data from children. If you believe we hold data about a child, please contact us and we will delete it promptly.


11. Changes to this policy

Privacy regulations continue to evolve, with further state and federal developments expected during 2025. We will post any changes on this page and, where material, provide a prominent notice or direct email.


12. Contact us

Privacy Office
Vernly, LLC
1930 18th St NW, Suite B2 PMB 2266
Washington, DC 20009
United States

Email: hello@fitzalan.com

If you have concerns about how we handle your personal data, please email us first so we can address the issue. You also have the right to raise concerns with your state attorney general or, for EU and UK residents, with your local supervisory authority.