Privacy policy

Last Updated: September 13, 2026

At Velorea & Co, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and disclose your personal information when you visit our website, place an order, contact us, or otherwise interact with our services.

Velorea & Co is the controller of your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our store is powered by Shopify, which provides the e-commerce technology used to operate our online store.

Please read this Privacy Policy carefully. By using our website, you acknowledge that you have read and understood how we handle your personal information as described here.

1. Personal Information We Collect

"Personal data" means any information that identifies or can reasonably be linked to you. Depending on how you interact with our website, we may collect:

  • Contact details including your name, billing address, shipping address, phone number, and email address.
  • Payment information including payment card details, transaction details, and payment confirmations. We never see or store your full card number on our own systems; payments are processed directly by our PCI-DSS compliant payment providers.
  • Account information including your username, password, preferences, and settings, if you create an account.
  • Order information including the products you view, add to your cart, purchase, return, or exchange, and your order history.
  • Communications including the content of emails, messages, and other correspondence you send us.
  • Device and usage information including your IP address, browser type, device identifiers, and how you navigate and interact with our website, collected through cookies and similar technologies.

2. How We Collect Your Personal Information

  • Directly from you when you place an order, create an account, sign up for our newsletter, or contact us.
  • Automatically through cookies and similar technologies when you visit our website.
  • From our service providers such as Shopify, payment processors, and shipping partners, when they process information on our behalf.

3. How We Use Your Personal Information and Our Lawful Bases

Under the UK GDPR, we only process your personal data where we have a lawful basis to do so:

  • Performance of a contract: to process your orders and payments, arrange shipping and delivery, handle returns and refunds, manage your account, and provide customer support.
  • Legitimate interests: to improve our website and services, prevent fraud, secure our systems, understand how customers use our store, and show you relevant products, where these interests are not overridden by your rights.
  • Consent: to send you marketing emails where you have signed up for them, and to place non-essential cookies. You can withdraw your consent at any time.
  • Legal obligation: to comply with tax, accounting, consumer protection, and other legal requirements.

You can unsubscribe from marketing communications at any time via the link in each email. Unsubscribing does not affect non-promotional communications such as order confirmations and shipping updates.

4. Cookies

Our website uses cookies and similar technologies. Essential cookies are required for the website to function, for example to keep products in your cart and complete checkout. Non-essential cookies, such as analytics and marketing cookies, are only placed with your consent, which you can give or withdraw via the cookie settings on our website.

You can also manage cookies through your browser settings. Disabling essential cookies may affect the functionality of the website.

5. How We Disclose Personal Information

We may share your personal data with:

  • Shopify and service providers who perform services on our behalf, such as hosting, payment processing, data analytics, customer support, fulfilment, and shipping.
  • Marketing partners to show you relevant advertising, where permitted and subject to your consent choices.
  • At your direction, such as sharing your delivery address with a carrier to deliver your order.
  • Public authorities where required by law, such as tax authorities or law enforcement with a valid legal request.
  • In connection with a business transaction such as a merger, acquisition, or sale of assets, in which case we will ensure appropriate protections for your data.

We do not sell your personal data.

6. Relationship With Shopify

Our website is hosted by Shopify, which collects and processes personal data about your access to and use of our store in order to provide and improve its services. Information you submit may be transmitted to and shared with Shopify and third parties that may be located outside the United Kingdom.

We also use certain Shopify enhanced features that incorporate data obtained from your interactions with our store, other merchants, and Shopify. In these circumstances, Shopify is responsible for the processing of your personal data, including responding to requests to exercise your rights over that use. To learn more, visit the Shopify Consumer Privacy Policy.

7. Third-Party Websites and Links

Our website may contain links to websites or platforms operated by third parties. We do not control these sites and are not responsible for their privacy or security practices. We encourage you to review their privacy policies before providing personal information.

8. Children's Privacy

Our website is not intended for children, and we do not knowingly collect personal data from anyone under the age of 18. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at support@veloreaandco.com and we will delete it.

9. Security of Your Information

We take appropriate technical and organizational measures to protect your personal data, including SSL encryption on our website and the use of PCI-DSS compliant payment providers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. We recommend that you do not send sensitive information through unsecured channels.

10. How Long We Keep Your Information

We retain personal data only for as long as necessary for the purposes described in this policy: to fulfil your orders, maintain your account, comply with our legal obligations (for example, tax and accounting rules requiring us to keep transaction records), resolve disputes, and enforce our agreements. When personal data is no longer required, we delete or anonymize it.

11. International Transfers

Your personal data may be transferred to, stored, or processed outside the United Kingdom, for example by Shopify or other service providers. Where we transfer personal data outside the UK, we ensure an adequate level of protection through recognized transfer mechanisms, such as UK adequacy regulations or the UK International Data Transfer Agreement and Standard Contractual Clauses with the UK Addendum.

12. Your Rights Under UK GDPR

You have the following rights in relation to your personal data:

  • Right of access: request a copy of the personal data we hold about you.
  • Right to rectification: request correction of inaccurate or incomplete data.
  • Right to erasure: request deletion of your personal data in certain circumstances.
  • Right to restrict processing: request that we limit how we use your data in certain circumstances.
  • Right to data portability: receive your data in a structured, commonly used, machine-readable format and have it transferred to another controller.
  • Right to object: object to processing based on legitimate interests, and to direct marketing at any time.
  • Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@veloreaandco.com. We will respond within one month, as required under the UK GDPR. We may need to verify your identity before processing your request. Exercising your rights is free of charge, and we will never discriminate against you for doing so.

13. Complaints

If you have concerns about how we process your personal data, please contact us first at support@veloreaandco.com so we can try to resolve the issue. You also have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Telephone: 0303 123 1113

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for operational, legal, or regulatory reasons. When we make changes, we will post the revised policy on this page and update the "Last Updated" date. We encourage you to review this page periodically.

15. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, or if you would like to exercise any of your rights, please contact us.

Website name: Veloreaco
Company name: Dorcom Digital
E-mail: support@veloreaandco.com
Business Address: Capitool 10, 7521 PL Enschede, Overijssel, Netherlands
Chamber of Commerce (KVK): 78026741
VAT number: NL003275932B29
Customer Services Hours:
Monday to Friday: 9 am till 6 pm
Response time: Within 1 business day