Privacy policy
Privacy Policy
Version 2.0 · Effective 15 October 2026
1. Who is responsible
The controller of your personal data is Valeryia Herasimava, trading as Velvele, Via Pietro Colletta 55, 20137 Milano, Italy, VAT IT12988980962, hello@velvele.store.
2. What we collect
- Order data: name, e-mail, billing address and country, VAT number if you give one, products, license, prices and taxes. Card details go directly to the payment provider; we never see them.
- Account data: e-mail, sign-in details and order history. Current Shopify customer accounts use passwordless email verification.
- Messages and purchase declarations: support and withdrawal requests, including the submitted declaration, order reference, confirmation email, record ID and server-recorded submission time, and any recorded request for early digital delivery, its wording and version, the covered cart items and quantities, and our acknowledgement or confirmation, where applicable.
- Newsletter: your e-mail and whether you opened or clicked our e-mails.
- Site use: device, browser, IP address, pages viewed and how you arrived, collected with cookies and similar tools where you allow it.
3. Why, and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Selling and delivering products, licenses, support, refunds | Contract |
| Invoices, VAT and accounting records | Legal obligation |
| Receiving statutory withdrawal declarations and sending acknowledgements | Legal obligation |
| Preventing fraud and keeping the site secure | Legitimate interest |
| Newsletter and offers | Your consent, withdrawable at any time |
| Analytics and advertising cookies | Your consent, given in the cookie banner |
| Short e-mails about products similar to ones you bought | Legitimate interest; you can opt out in every e-mail |
4. Who receives your data
We share information with providers that help operate the store, where the corresponding service is enabled, and with authorities where required. Their roles and applicable data-processing terms depend on the service:
- Shopify (store, checkout, hosting, Shop Pay, Shopify Payments for cards, Apple Pay and Google Pay)
- PayPal and Klarna, if you choose them at checkout
- Mailchimp (newsletter and customer e-mails)
- Jotform (the online withdrawal form, retained declaration record and automatic email/PDF acknowledgement). The account is configured to store form data in Europe (Germany); Jotform provides the form and transactional email infrastructure. See Jotform Privacy Policy.
- Google (Google Analytics and Google Ads conversion measurement), Meta (Facebook and Instagram pixel) and Pinterest (Pinterest tag), for statistics and ads, only with your cookie consent
- Our internal operations tools, including Notion and Make, where enabled for order administration
- Our accountant and tax authorities, where the law requires
We do not sell your personal data.
5. Transfers outside the EU
Some providers are based in the United States or other countries. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
6. How long we keep it
Order and invoice data: 10 years, as Italian accounting law requires. Account data: until you delete your account. Newsletter data: until you unsubscribe. Messages and withdrawal case records: up to 2 years after the case closes, unless a longer legal retention or dispute period applies. We retain declarations and acknowledgements in the case archive and export records from the form service so its storage quota does not determine legal retention. Cookie data: as stated in the cookie banner.
7. Your rights
You can ask to access, correct, delete, restrict or transfer your data, object to processing based on legitimate interest, and withdraw consent at any time without affecting earlier processing. Write to hello@velvele.store; we reply within one month. You can also complain to the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it) or the authority in your country.
8. Cookies
Necessary cookies keep the cart and checkout working. Analytics and advertising cookies are used only if you accept them in the cookie banner, where you can change your choice at any time.
9. Age
The store is not intended for people under 16, and we do not knowingly collect their data.
10. Changes
We will publish any update here with a new date, and tell you by e-mail if the change is significant.