Privacy policy

PRIVACY POLICY — VELURÈ PARIS
Last updated: June 9, 2026

This Privacy Policy explains how Velurè Paris ("we", "us", "our") collects, uses, shares and protects your personal data when you visit our website at velureparis.com or make a purchase from our store.

We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR), the UK GDPR, the Australian Privacy Act 1988, the California Consumer Privacy Act (CCPA), and all applicable data protection laws.

─────────────────────────────────────────────
1. WHO WE ARE
─────────────────────────────────────────────
Velurè Paris is a women's fashion brand operating globally. Our customer-facing email is support@velureparis.com.

For the purposes of applicable data protection law, we are the data controller of your personal information.

─────────────────────────────────────────────
2. WHAT DATA WE COLLECT
─────────────────────────────────────────────
We collect the following categories of personal data:

a) Data you provide directly:
   • Full name
   • Email address
   • Shipping and billing address
   • Phone number (optional)
   • Payment information (processed securely by Stripe or PayPal — we do not store card details)
   • Order history and purchase details
   • Communications you send us (emails, chat messages)

b) Data collected automatically:
   • IP address and approximate location
   • Browser type and device information
   • Pages visited and time spent on our website
   • Referring website or advertisement
   • Cookies and similar tracking technologies (see Section 8)

c) Data from third parties:
   • Social media information if you engage with our ads on Facebook or Instagram
   • Information from analytics providers (Google Analytics, Meta Pixel)

─────────────────────────────────────────────
3. HOW WE USE YOUR DATA
─────────────────────────────────────────────
We use your personal data for the following purposes:

a) To fulfil your order — processing payments, dispatching goods, sending tracking information. Legal basis: Performance of a contract.

b) To manage your account — creating and managing your customer account, processing returns and refunds. Legal basis: Performance of a contract.

c) To communicate with you — responding to customer service inquiries, sending order confirmations and shipping notifications. Legal basis: Legitimate interests / Contract performance.

d) To send marketing emails — if you have opted in, we will send you emails about new products, promotions and brand updates. Legal basis: Consent (you may withdraw at any time).

e) To improve our website and services — analysing how visitors use our website to improve user experience. Legal basis: Legitimate interests.

f) To run targeted advertising — using data such as browsing behaviour to show you relevant ads on Meta (Facebook/Instagram) and other platforms. Legal basis: Consent (via cookie preferences) / Legitimate interests.

g) To comply with legal obligations — tax records, fraud prevention, and compliance with applicable laws. Legal basis: Legal obligation.

─────────────────────────────────────────────
4. HOW LONG WE KEEP YOUR DATA
─────────────────────────────────────────────
• Order data: 7 years (required for tax and legal compliance)
• Account data: For the duration of your account, plus 2 years after closure
• Marketing data: Until you unsubscribe or withdraw consent
• Analytics data: 26 months (Google Analytics default)
• Customer service communications: 3 years

─────────────────────────────────────────────
5. WHO WE SHARE YOUR DATA WITH
─────────────────────────────────────────────
We do not sell your personal data. We share it only with trusted third-party service providers who help us operate our business:

• Shopify Inc. — e-commerce platform and order management
• Stripe Inc. / PayPal Holdings Inc. — payment processing
• DSers / AliExpress suppliers — order fulfilment and shipping
• Klaviyo Inc. — email and SMS marketing
• Meta Platforms Inc. — advertising (Facebook/Instagram)
• Google LLC — analytics and advertising
• DHL / FedEx / local couriers — delivery services
• Loox / Judge.me — customer review platforms

All third parties are required to protect your data and may only use it for the specific purposes we have authorised.

Where we transfer data outside the EEA or UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

─────────────────────────────────────────────
6. YOUR RIGHTS
─────────────────────────────────────────────
Depending on your location, you may have the following rights:

EU / UK residents (GDPR / UK GDPR):
• Right to access — request a copy of the data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure ("right to be forgotten") — request deletion of your data
• Right to restrict processing — request that we limit how we use your data
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — withdraw consent for marketing at any time

California residents (CCPA):
• Right to know — request disclosure of the personal information we collect, use, disclose and sell
• Right to delete — request deletion of personal information we have collected
• Right to opt-out — opt out of the sale of personal information (note: we do not sell personal data)
• Right to non-discrimination — we will not discriminate against you for exercising your rights

Australian residents (Privacy Act 1988):
• Right to access and correct your personal information held by us

To exercise any of these rights, email us at: support@velureparis.com
We will respond within 30 days (EU/UK: 1 month).

You also have the right to lodge a complaint with your local supervisory authority:
• EU: Your national Data Protection Authority
• UK: Information Commissioner's Office (ico.org.uk)
• Australia: Office of the Australian Information Commissioner (oaic.gov.au)

─────────────────────────────────────────────
7. EMAIL MARKETING
─────────────────────────────────────────────
If you subscribe to our newsletter or opt in at checkout, we will send you marketing emails. You can unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of any email, or by emailing support@velureparis.com.

We use Klaviyo to manage our email list. Your email address and purchase behaviour data are shared with Klaviyo solely to enable us to send you relevant communications.

─────────────────────────────────────────────
8. COOKIES
─────────────────────────────────────────────
We use cookies and similar technologies on our website. For full details, please see our Cookie Policy.

Essential cookies: Required for the website to function (shopping cart, checkout). No consent required.

Analytics cookies: Help us understand how visitors use our site (Google Analytics). Requires consent.

Marketing cookies: Used to track ad performance and show you relevant ads (Meta Pixel, Google Ads). Requires consent.

You can manage your cookie preferences at any time via the cookie banner on our website.

─────────────────────────────────────────────
9. SECURITY
─────────────────────────────────────────────
We take the security of your personal data seriously. Our website uses SSL/TLS encryption (HTTPS). Payment processing is handled by PCI-DSS compliant providers (Stripe, PayPal). We do not store payment card details on our servers.

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours, and affected individuals without undue delay, as required by applicable law.

─────────────────────────────────────────────
10. CHILDREN'S PRIVACY
─────────────────────────────────────────────
Our website is not directed at children under the age of 16 (or 13 in the USA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at support@velureparis.com.

─────────────────────────────────────────────
11. CHANGES TO THIS POLICY
─────────────────────────────────────────────
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. The "Last updated" date at the top of this page will reflect the most recent version.

─────────────────────────────────────────────
12. CONTACT US
─────────────────────────────────────────────
For any privacy-related questions, requests or complaints:

Email: support@velureparis.com
Website: velureparis.com
Response time: Within 2 business days