Personal data we may process

Depending on how you use the website, we may process information needed to provide products and services, including identity and contact details, delivery and billing information, order information, customer-service correspondence, payment-related transaction information, and technical information such as device, browser, IP address and website interaction data.

We do not ask customers to send full card numbers, CVV/CVC, PINs or security codes through ordinary support email.

Processing purposes and GDPR legal bases

Personal data may be processed to perform a contract or take steps requested before a contract, including order handling, delivery, payment administration, returns and customer service. We may also process data where necessary for legitimate interests such as fraud prevention, website security, service improvement and the establishment or defence of legal claims, where those interests are not overridden by applicable rights.

Where processing depends on consent, including certain non-essential cookie or marketing activities where enabled, consent may be withdrawn at any time without affecting the lawfulness of processing before withdrawal. Where required, processing may also be based on compliance with legal obligations.

Payment processing

Payments are processed through Stripe and relevant financial institutions or card networks. Payment providers may process transaction information under their own terms and privacy notices. The payment methods actually displayed at checkout are the methods available for a transaction.

Service providers and disclosures

We may share personal data with service providers where reasonably necessary to operate the store, process payments, fulfil and deliver orders, provide customer support, maintain website infrastructure, prevent fraud, comply with law or protect legal rights. Providers receive only the information reasonably necessary for the relevant function and are subject to applicable contractual or legal obligations.

We do not add specific analytics or advertising platform names here unless their use has been separately confirmed.

International transfers

Because the store serves international customers and may use service providers in different countries, personal data may be transferred outside your country. Where GDPR transfer rules apply, appropriate transfer mechanisms and safeguards are used as required by applicable law.

Data retention

Personal data is retained only for as long as reasonably necessary for the purposes described in this policy, including order administration, customer support, accounting, fraud prevention, dispute handling and compliance with applicable legal obligations. Retention periods may differ by data category and legal requirement.

Your data-protection rights

Subject to applicable law, you may have rights including access, rectification, erasure, restriction, portability, objection, withdrawal of consent and the right to lodge a complaint with a competent supervisory authority.

Security

We use reasonable administrative, technical and organisational measures designed to protect personal data. No online system can be described as absolutely or guaranteed secure. Customers should avoid sending sensitive payment-security information through ordinary email.

Privacy contact

For privacy, cookie, consent or data-protection requests, contact privacy@velquri.com. For order or general customer support, use support@velquri.com.