Privacy Policy

Information you provide. When you place an order or contact us, we collect your name, email address, shipping address, and phone number. Payment details are collected and processed entirely by Stripe, our payment processor — they never touch or get stored on our servers.

Automatically collected information. When you visit our website we collect device and browser type, IP address, pages visited, and referring URLs to help us improve the site and understand how visitors use it.

Communications. If you contact us by email, we retain that correspondence to assist you and improve our service.

• Process and fulfil your orders, including shipping notifications and returns.
• Respond to enquiries and troubleshoot problems.
• Send transactional emails such as order confirmations and shipping updates.
• Detect and prevent fraud or other security issues.
• Improve our website and products through aggregated analytics.
• Comply with applicable laws and regulations.

We do not sell or rent your personal information. We share it only with:

• Service providers who assist with payment processing (Stripe), website hosting, shipping, and email delivery.
• Law enforcement or regulatory bodies when required by law or to protect our rights.
• Successors in the event of a merger, acquisition, or sale of all or part of our business, with prior notice to you.

We use cookies for session management (such as remembering your cart) and basic analytics. You can manage or disable cookies through your browser settings; some features of the site, like the cart, may not function correctly without them.

We retain personal data only as long as needed to provide our services and comply with legal obligations. Order and transaction records are kept for a minimum of 7 years for accounting and legal purposes. You may request deletion of your personal data at any time, subject to those legal retention requirements.

You may request to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Object to or restrict certain processing.

To exercise any of these rights, email hello@vialflask.com with the subject line "Privacy Request".

We use industry-standard measures — including TLS encryption and access controls — to protect your personal information against unauthorised access, loss, or misuse. No transmission over the internet is 100% secure; contact us immediately if you suspect any unauthorised use of your information.

Our products and website are not directed at children under 16, and we do not knowingly collect personal information from them. If you believe we have inadvertently done so, contact us and we will delete it promptly.

We may update this policy from time to time. We will post the updated policy here with a new "last updated" date, and notify you of material changes via a prominent notice on our website.