Privacy policy
This policy explains what personal data we collect when you use this site, why we collect it, and what rights you have over it. It is written to meet the EU General Data Protection Regulation (GDPR, Regulation 2016/679).
What we collect
When you place an order: your name, email address, delivery address, billing address, phone number if you give one, and details of what you bought.
When you pay: we do not see or store your card number. Payment details go directly to our payment providers (Shopify Payments, PayPal). We receive only confirmation that payment succeeded and the last four digits of the card.
When you browse: your IP address, browser and device type, pages viewed, and how you reached the site. This comes from cookies and similar technologies.
When you contact us: whatever you put in your message, plus your email address.
If you subscribe: your email address, and nothing more.
Why we use it, and on what legal basis
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order | Performance of a contract |
| Order and delivery emails | Performance of a contract |
| Answering your questions | Legitimate interest |
| Fraud prevention and site security | Legitimate interest |
| Accounting and tax records | Legal obligation |
| Marketing emails | Your consent |
| Analytics and non-essential cookies | Your consent |
Where we rely on consent, you can withdraw it at any time. Every marketing email carries an unsubscribe link that works immediately.
Who we share it with
We do not sell your data. We share it only with the companies that make the shop work:
- Shopify — hosts this store and processes orders on our behalf
- Payment providers — Shopify Payments, PayPal, and any other method shown at checkout
- Our fulfilment and delivery partners — they receive your name and address so your parcel can reach you
- Email and analytics providers — only where you have consented
Some of these providers operate outside the European Economic Area. Where personal data is transferred outside the EEA, we take steps to ensure it remains protected to the standard required by EU law, and we share only what is needed to get your order to you — your name, delivery address and order contents.
How long we keep it
Order and invoice records are kept for as long as tax and accounting law requires, which in most EU countries is between 7 and 10 years. Marketing consent is kept until you withdraw it. Support emails are kept for 2 years. Analytics data is kept for up to 26 months.
Your rights
Under GDPR you have the right to:
- Ask what data we hold about you, and get a copy
- Have inaccurate data corrected
- Have your data deleted, where we have no legal reason to keep it
- Restrict or object to how we use it
- Receive your data in a portable format
- Withdraw consent at any time
Email support@velouraroutine.com to exercise any of these. We respond within 30 days, free of charge.
If you are not satisfied with our response, you have the right to complain to the data protection authority in the EU country where you live, where you work, or where the problem happened. The list is published at edpb.europa.eu.
Cookies
We use cookies that are strictly necessary for the site to function — keeping your cart, remembering your session, security. These do not require consent.
We also use analytics and marketing cookies, which only run if you accept them. You can change your choice at any time through your browser settings or the cookie banner.
Children
This site is not intended for anyone under 16, and we do not knowingly collect data from children.
Changes
If we change this policy, the updated version is published on this page. Material changes will be communicated by email where we hold your address.