Privacy policy

Who we are

This policy explains how Velvorex ("we", "us") collects, uses and protects your personal data when you visit velvorex.com or buy from us. For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is:

What we collect

  • Information you give us: name, email address, delivery and billing address, phone number, and order details. Payment card details are entered directly into our payment provider's systems and are never stored by us.
  • Information collected automatically: IP address, browser and device type, pages viewed, referring site, and similar analytics data, collected through cookies and comparable technologies.
  • Information from third parties: our payment providers may share limited transaction and fraud-screening data with us.

Why we use it, and our legal basis

  • To fulfil your order — process payment, ship goods, handle returns and provide support. Legal basis: performance of a contract.
  • To meet legal obligations — tax, accounting and consumer-law record keeping. Legal basis: legal obligation.
  • To prevent fraud and secure the store. Legal basis: our legitimate interests.
  • To improve the site and understand how it is used. Legal basis: consent, where required, or legitimate interests.
  • To send marketing emails. Legal basis: your consent. You can withdraw it at any time using the unsubscribe link in any email.

Who we share it with

We share personal data only with service providers who need it to operate the store, and only for that purpose:

  • Shopify — our e-commerce platform, which hosts the store and processes orders.
  • Payment providers — to take payment and screen for fraud.
  • Shipping carriers and fulfilment partners — to deliver your order.
  • Email and analytics providers — to send transactional and marketing email and to measure site usage.

We do not sell your personal data. We may disclose data where required by law or to establish or defend legal claims.

International transfers

Some of our providers operate outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

How long we keep it

Order and transaction records are retained for as long as required by tax and accounting law, typically 10 years in Romania. Marketing contact data is retained until you unsubscribe. Analytics data is retained in line with the settings of the analytics tools we use.

Your rights

If you are in the EEA or the UK, you have the right to access your personal data, to have inaccurate data corrected, to have data erased, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any of these, email support@velvorex.com. We respond within one month.

You also have the right to lodge a complaint with your local supervisory authority. In Romania this is the National Supervisory Authority for Personal Data Processing (ANSPDCP).

Cookies

We use cookies that are necessary for the store to function (such as keeping your cart), plus analytics and advertising cookies where you consent. You can manage your preferences through the cookie banner or your browser settings. See also our "Your Privacy Choices" page.

Children

Our store is not directed at children and we do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised.

Contact

Questions about this policy or your data: support@velvorex.com.