Privacy Policy

Privacy Policy

Summary: We collect only the data we need to process your orders, support you, and improve our store. We never sell your data, and you have the right to access, correct, or delete it. This is a general template — please have it reviewed by a qualified professional before relying on it.

Last updated: [DATE]. This Privacy Policy explains how Velora (“we”, “us”) collects, uses, and protects your personal data when you visit or buy from [STORE URL]. We act as the data controller for the personal data described here. For any privacy question, contact privacy@velora.com.

1. What we collect

  • Order & account data: name, billing and shipping address, email, phone, and order history.
  • Payment data: processed securely by our payment providers. We do not store full card numbers.
  • Usage data: pages visited, device and browser information, and cookies (see our Cookie Policy).
  • Communications: messages you send us and your marketing preferences.

2. How and why we use it

We process your data to: fulfil and deliver orders; provide customer support; prevent fraud; meet legal and tax obligations; and — with your consent — send marketing emails. Our legal bases (under the EU/UK GDPR) are contract performance, legal obligation, your consent, and our legitimate interests in running the store securely.

3. Sharing your data

We share data only with providers who help us operate: our e-commerce platform (Shopify), payment processors, shipping carriers, and email/marketing tools. They process data on our instructions and under appropriate safeguards. We never sell your personal data.

4. International transfers

Some providers may process data outside the EU/UK. Where they do, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or equivalent UK mechanisms.

5. How long we keep it

We keep order data for as long as needed to provide our services and to meet legal, accounting, and tax requirements, then delete or anonymise it.

6. Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or object to processing of your data, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority (in the UK, the ICO). To exercise any right, email privacy@velora.com.

7. Security

We use industry-standard measures to protect your data, including encryption in transit. No method is 100% secure, but we work to keep your information safe.

8. Changes

We may update this policy from time to time. The “last updated” date shows the latest version.

This document is a draft template and not legal advice. Please review it with a qualified legal professional in your jurisdiction before publishing.