Vestu

Privacy Policy

Last updated: 1 September 2026

This Privacy Policy explains how Dance and Beyond trading as Vestu ("Vestu", "we", "us" and "our") collects, uses and shares personal data when you use the Vestu mobile application, website, marketplace, payment flows, messaging features, support channels and related services.

For privacy questions or requests, contact us at [email protected].

1. Who We Are

Dance and Beyond trading as Vestu is the controller of personal data collected through Vestu, except where a third party such as Stripe acts as an independent controller for its own payment, identity verification, fraud prevention and compliance processing.

2. Personal Data We Collect

Account and profile data

We collect information used to create and manage an account, including name, email address, password credentials, account type, profile photo, profile details, user ID, login tokens and account settings.

Address and fulfilment data

We collect billing, shipping, collection and drop-off addresses, including house number, building name, street, town, city and postcode. Address data is used to support checkout, delivery, collection, seller fulfilment, account profile features and order records.

Listing and marketplace data

When you list an item, we collect product names, descriptions, categories, brands, conditions, prices, colours, sizes, quantities, stock levels, delivery charges, fulfilment options, hire periods, unavailable dates, deposits, late return fees and uploaded photos or videos.

Order, hire and payment data

We collect order history, basket contents, hire date ranges, order statuses, cancellation records, return statuses, delivery confirmations, seller order records, transaction values, platform fees, delivery charges, deposits, late return fees, refunds and dispute information.

Payments and seller payouts are processed using Stripe and Stripe Connect. Vestu does not store full payment card numbers. Stripe may collect payment method details, bank account details, identity verification information and compliance information directly from you.

Messages, reviews and support

We collect messages sent between buyers and sellers, chat records, reviews, favourites, notifications, customer support requests and related correspondence.

Technical and usage data

We collect technical data needed to operate and protect the service, including IP address, device and app information, server logs, security logs, error logs, crash information, performance information and records of how users interact with the app and website.

3. How We Use Personal Data

To create, authenticate and manage user accounts.
To provide marketplace features for buying, selling and hiring dancewear.
To publish and display listings, uploaded media, prices, stock and availability.
To process baskets, checkout, orders, hire bookings, delivery charges, refunds, deposits and payouts.
To enable buyer and seller communication, order updates, notifications and support.
To manage seller onboarding, Stripe Connect status, payment confirmations, transfers and compliance checks.
To prevent fraud, protect accounts, enforce our terms and investigate disputes.
To maintain, debug, secure and improve the app, website and backend systems.
To comply with legal, tax, accounting, regulatory and platform obligations.

4. Lawful Bases For Processing

Where UK GDPR or similar privacy laws apply, we process personal data under the following lawful bases:

Contract: to provide accounts, listings, orders, hire bookings, payments, delivery and support.
Legitimate interests: to secure the service, prevent fraud, resolve disputes, maintain records, improve functionality and operate the marketplace.
Legal obligation: to comply with tax, accounting, regulatory, payment, consumer protection and law enforcement obligations.
Consent: where we ask for permission, such as optional marketing communications or device permissions.

5. Sharing Personal Data

We share personal data only where needed to operate Vestu, provide the marketplace, comply with law or protect users.

Other users: buyers and sellers may see information needed to complete a transaction, such as listing details, profile information, messages, delivery or collection information and order status.
Stripe: Stripe and Stripe Connect process payments, seller onboarding, identity verification, fraud checks, refunds, deposits, transfers and payouts.
Hosting and storage providers: we use providers such as DigitalOcean and compatible storage services to host the app backend, website, database, logs and uploaded media.
Email and notification providers: we use service providers to send account, password reset, order, support and service messages.
Professional and legal advisers: we may share data with advisers, insurers, auditors, regulators or law enforcement where necessary.
Business transfer: data may be transferred if Vestu is involved in a merger, acquisition, restructuring or sale of assets.

6. Public Listings And User Content

Product listings, product photos, product descriptions, prices, stock, seller names and seller profile details may be visible to other users and visitors. You must only upload content that you have the right to use and that does not include private or sensitive information you do not want displayed as part of a marketplace listing.

7. Cookies And Similar Technologies

The Vestu website and backend may use cookies, session storage, local storage or similar technologies to keep the service secure, remember preferences, support login sessions and maintain essential functionality. We do not use cookies for third-party advertising unless this policy is updated and any legally required choices are provided.

8. International Transfers

Some service providers may process personal data outside the United Kingdom or the European Economic Area. Where this happens, we rely on appropriate safeguards such as adequacy regulations, standard contractual clauses or other lawful transfer mechanisms.

9. Data Retention

We keep personal data for as long as needed to provide Vestu, maintain accounts, complete orders and hire bookings, resolve disputes, prevent fraud and meet legal, tax, accounting and regulatory duties. Listing media and account data may be deleted or anonymised when no longer needed, subject to backups and records we are required or entitled to retain.

10. Account Deletion

You can request account deletion through the app where available or by contacting [email protected]. We may retain limited information after deletion where required for completed transactions, disputes, fraud prevention, legal compliance, tax or accounting records.

11. Your Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to or receive a copy of your personal data. You may also have the right to withdraw consent where processing is based on consent. To exercise your rights, contact [email protected].

12. Children

Vestu is not directed at children under 13. Users under 18 should use Vestu only with permission from a parent or guardian. Parents or guardians can contact us at [email protected] if they believe a child has provided personal data without appropriate permission.

13. Security

We use technical and organisational measures designed to protect personal data, including access controls, authentication, secure hosting, payment processing through Stripe and operational monitoring. No service can guarantee absolute security, so users should keep login details safe and contact us if they believe an account has been accessed without permission.

14. Changes To This Policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page with the date it was last updated.

15. Contact

Dance and Beyond trading as Vestu
Email: [email protected]