Privacy Policy

Last updated 12 October 2026

In short: Digitaliced Ltd, trading as Velvora, uses your details to take payment for and deliver your orders, run your account and answer your questions. We only use measurement and advertising cookies if you agree, we never sell your data, and you can ask us about it at any time.

1) Who we are

Velvora is a trading name of Digitaliced Ltd, registered in England and Wales, company number 14934846, VAT number GB459922056.

We are the data controller for personal data collected through velvora.co.uk. You can reach us at support@velvora.co.uk or on WhatsApp.

This policy explains how we collect, use and protect your personal data under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 as amended by the Data (Use and Access) Act 2025, and the Privacy and Electronic Communications Regulations 2003 (PECR).

2) Information we collect

Personal details: your name, email address, phone number, and billing and delivery addresses.
Order information: what you bought, your order history, delivery status, returns and refunds.
Payment information: handled by our payment provider, Stripe. We never see or store your full card number.
Account details: your email address and password if you register, your Google account email address if you choose to sign in with Google, and your Velvora Rewards points.
Messages you send us: emails, contact form submissions and WhatsApp messages.
Technical and usage data: your IP address, browser and device type, the pages you view, and information from cookies and similar technologies.
Marketing preferences: whether you have opted in to our emails, and how you interact with them.
How you found us: the website, search or ad campaign that brought you to the shop.

3) How we use your information

To take payment for and deliver your orders, and to handle returns and refunds.
To answer your questions and provide customer support.
To manage your account and your Velvora Rewards points.
To send you marketing emails, where you have opted in or where the law allows us to email existing customers about similar products.
To measure how the shop is used and improve it, where you have agreed to measurement cookies.
To show you our ads on other websites and apps, and measure whether those ads led to a sale, where you have agreed to advertising cookies.
To keep the site secure and prevent fraudulent orders.
To meet our legal duties, including UK tax, accounting and consumer law.

4) Our legal basis for using your data

What we do	Our legal basis
Take payment for and deliver your order	Performance of a contract
Manage your account and Velvora Rewards	Performance of a contract
Advertising and measurement cookies	Your consent
Marketing emails to new subscribers	Your consent
Marketing emails to existing customers about similar products	Legitimate interests, relying on the PECR soft opt-in. You can unsubscribe at any time.
Security and fraud prevention	Legitimate interests, and our legal duties
Keeping order and tax records	Legal obligation

5) Cookies and your choices

Essential cookies and similar storage on your device keep your bag, checkout and sign-in working, and remember your cookie choice. These cannot be switched off.

Measurement and advertising cookies are only used if you agree to them. When you first visit, our cookie banner lets you accept all, reject all, or choose. Until you agree, Google's tags run with cookies switched off (Google Consent Mode), and the Meta Pixel is not loaded at all.

We manage consent with our own software. Your choice is stored on your own device and is not shared with any third-party consent provider. To change your choice, clear the stored data for velvora.co.uk in your browser settings and the banner will ask you again, or email support@velvora.co.uk.

See the full list of cookies we use

6) Hosting and platform

Our shop runs on our own software. Customer accounts, orders and newsletter sign-ups are stored in our database, which is hosted by Supabase.

7) Who we share your data with

We do not sell your personal data. We share it with the following providers, who process it on our behalf or, where noted, as controllers in their own right:

Provider	What they do
Supabase	Hosting our database, customer accounts and sign-in
Stripe	Card payments, and other options at checkout such as PayPal, Klarna, Apple Pay and Google Pay. If you pay with PayPal or Klarna, they also process your details under their own privacy policies.
Royal Mail (Click & Drop)	Creating delivery labels and delivering your order
Resend	Sending order confirmations, account emails and sign-up emails
Google (Tag Manager, Analytics, Sign-In)	Measurement, with your consent, and account sign-in if you choose to use Google
Meta Platforms	Advertising on Facebook and Instagram and measuring it, with your consent. WhatsApp messages you send us also pass through Meta.

Our newsletter sign-ups are kept in our own database rather than an external marketing platform.

We may also share data with our accountants, and with the police or other authorities where we are legally required to.

8) International transfers

Some of our providers process data outside the UK, mainly in the EU and the United States. Where that happens we rely on UK adequacy regulations, or on the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with appropriate technical safeguards. You can ask us for details of the safeguards that apply to a particular provider.

9) Advertising, analytics and profiling

If you agree to advertising cookies, we use the Meta Pixel to show you our ads on Facebook and Instagram, and to measure whether those ads led to an order. This can involve creating audiences of people with similar interests, and sharing a limited amount of data with Meta. Meta acts as a controller in its own right for some of that data, and its own privacy policy also applies.

If you agree to measurement cookies, we use Google Analytics, through Google Tag Manager, to count visits and understand which pages and products people struggle with.

None of this involves automated decisions that have a legal or similarly significant effect on you.

10) Marketing emails

We only send marketing emails if you have asked us to, or if you have bought from us and we are emailing you about similar products. Agreeing to cookies is not the same as agreeing to marketing emails, and we treat them separately.

Every marketing email has an unsubscribe link, and you can also email support@velvora.co.uk to opt out. We will always send you order confirmations and delivery updates, because those are part of your purchase rather than marketing.

11) How long we keep your data

What	How long
Orders, invoices and tax records	6 years after the end of the accounting period, as HMRC requires
Your account	Until you ask us to close it, then deleted apart from records we must keep for tax
Newsletter subscription	Until you unsubscribe, then a suppression record so we do not email you again by mistake
Customer service messages	2 years after your query is resolved
Analytics data	Up to 14 months
Advertising cookie data	Up to 90 days for most platforms, and up to 13 months for some
Your cookie choice	Stored on your device until you clear your browser's data for our site

12) Your rights

You have the right to:

Ask for a copy of the personal data we hold about you
Have inaccurate data corrected
Ask us to delete your data, where we do not have to keep it
Ask us to restrict how we use your data, or object to us using it
Object to direct marketing at any time
Ask us to transfer your data to you or another provider
Withdraw your consent at any time, including for cookies and marketing

Email support@velvora.co.uk and we will respond within one month. Exercising your rights is free, and it will never affect the service you get from us.

13) Complaints

If you are unhappy with how we have handled your personal data, please tell us first at support@velvora.co.uk with "Data protection complaint" in the subject line. We will acknowledge your complaint within 30 days, investigate it, and tell you the outcome.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office, at any time: ico.org.uk/make-a-complaint

14) Children

Our shop is intended for adults. We do not knowingly collect personal data from children under 13, and we do not target our marketing at children. If you believe a child has given us their data, email support@velvora.co.uk and we will delete it.

15) Keeping your data secure

Our site runs over an encrypted HTTPS connection, card details are handled entirely by our payment provider, and access to customer data is limited to the people who need it. No system is perfectly secure, but if a breach affects your rights we will tell you and the ICO as the law requires.

16) Changes to this policy

We update this policy when our practices or the law change. The date at the top shows when it was last revised. If we make a significant change to how we use your data, we will tell you and, where the law requires it, ask for your consent again.

17) Related policies

18) Contact us

Digitaliced Ltd (trading as Velvora)
Email: support@velvora.co.uk
WhatsApp: see our Contact Us page
Company number: 14934846
VAT number: GB459922056