How Vallejo handles your information
This page explains what information we collect, how we use it, and the choices you have. This is a general draft for you to review and adapt — it is not legal advice.
Last updated: November 2026 · Please review this policy before using our website or contacting us.
Overview
Your privacy at a glance
We collect only what we need to operate our website, respond to enquiries, and improve our services. We do not sell personal information.
1. Information we collect
We collect information in the following categories:
| Category | Examples | Source |
|---|---|---|
| Contact details | Name, email address, and contents of messages you send via forms or email | Provided directly by you |
| Enquiry information | Topic of interest, preferences you describe, and any files you choose to share | Provided directly by you |
| Technical data | Pages viewed, device and browser type, approximate location derived from IP, referral source | Collected automatically via logs and cookies |
| Communication records | Records of correspondence and your stated privacy preferences | Created when you contact us |
We ask that you do not send sensitive personal information, account credentials, or financial account numbers through website forms.
2. How we use information
We use personal information to:
- Respond to enquiries and provide requested information about Vallejo
- Operate, maintain, and improve our website and content
- Communicate administrative updates, such as changes to this policy
- Monitor website performance and prevent misuse, fraud, or security incidents
- Comply with legal obligations and enforce our terms where applicable
We do not use personal information to make solely automated decisions with legal or similarly significant effects.
3. Legal bases
Depending on your location, we may process personal information on one or more of the following bases, which you should confirm with your advisor:
Service and consent
Performance of steps taken at your request before entering into communication; consent where you have provided it, for example for optional newsletters or non-essential cookies.
Legitimate interests and law
Our legitimate interests in operating a secure and informative website; compliance with applicable legal obligations and protection of our rights.
You may withdraw consent at any time where consent is the basis, without affecting prior processing.
4. Sharing and disclosure
We share personal information only as needed:
- Service providers: hosting, email delivery, form processing, and analytics providers who act on our instructions and are bound by confidentiality obligations.
- Legal and safety: where required by law, court order, or to protect the rights, safety, and security of Vallejo, our users, or others.
- Business changes: in connection with a reorganisation or transfer of assets, subject to appropriate confidentiality safeguards.
We do not sell personal information and we do not share it with third parties for their own independent marketing.
5. Cookies and analytics
We use essential cookies to make the site work, and, only with your consent where required, optional cookies for preferences and aggregated analytics. You can control cookies through your browser settings. Blocking some cookies may affect site functionality.
Your cookie choices
Most browsers allow you to refuse cookies, delete existing cookies, or be notified before a cookie is stored. Refer to your browser help pages for instructions. If we deploy a consent banner or preference centre, your selections there will be respected in addition to browser controls.
6. Retention and security
Retention: We keep personal information only for as long as necessary for the purposes described above, including to respond to enquiries, maintain records of correspondence, and meet legal retention requirements. When no longer needed, information is deleted or de-identified.
Security: We apply reasonable administrative, technical, and organisational measures to protect information, including access controls, encrypted connections (HTTPS), and limited internal access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
International transfers: If information is processed outside your country, we will apply appropriate safeguards as advised for your situation, such as contractual protections, and will update this section with specific details after review.
Our approach to data minimisation
We aim to request the minimum information needed to help you, keep enquiry records separate from analytics data, and review our data practices periodically. If you believe we hold unnecessary information about you, please contact us so we can review it.
7. Your rights and choices
Depending on applicable law, you may have the right to request access, correction, deletion, restriction, portability, or objection to processing of your personal information, and to lodge a complaint with a supervisory authority. We will respond in accordance with applicable requirements.
How to make a request
Contact us using the details in Section 8. To help us respond, describe your request and the email address you used with us. We may need to verify your identity before acting. You may also authorise another person to act on your behalf where the law permits, subject to verification.
Marketing communications
If you receive administrative or informational emails from us, you may opt out of any optional marketing messages by using the unsubscribe link where provided or by contacting us. We will continue to send messages necessary to respond to your enquiry or provide requested information.
Children's privacy
Our website is intended for adults and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can review and delete it where appropriate.
8. Contact and updates
Data controller: Vallejo
For privacy questions, access requests, or complaints, please use our Contact page. We aim to acknowledge enquiries promptly and respond within the timeframes required by applicable law.
Changes to this policy: We may update this policy to reflect changes in our practices or legal requirements. The version posted on this page with its “Last updated” date is the current version. Where changes are material, we will provide additional notice as appropriate before they take effect.
This document is a general template for informational purposes only and does not constitute legal advice. Please adapt it to your actual data flows, vendors, retention periods, and jurisdictions, and obtain independent legal review.