Privacy policy

Last updated: 22 August 2026

This policy explains how Exploitant du site Velora (“Velora”, “we”) processes personal data when you use rzftwg-bg.myshopify.com and buy Velora products. We sell and ship worldwide.

Controller: Exploitant du site Velora, 4 Place de la Porte de Bagnolet, 75020 Paris, France. Email: velora.sav@outlook.com.

If you are in the EEA/UK, you also have rights under the GDPR / UK GDPR. California residents have CCPA/CPRA rights. Other local laws may give you extra rights; we honor them where they apply.

1. Data we collect

• Identity and contact: name, email, phone, billing and shipping address.
• Order data: products, amounts, currency, payment status (Shopify / Shop Pay process the card). We do not store full card numbers.
• Account (if you create one): login and order history.
• Support: emails, photos you send (e.g. a damaged parcel).
• Technical: IP address, device, browser, pages viewed, approximate location (from IP).
• Marketing (only with required consent or another lawful basis): email list, ad click IDs, pixel events.

We do not ask for health diagnoses. If you volunteer medical information in a message, we use it only to answer you and then delete it when no longer needed.

2. Why we use it (purposes and legal bases)

• Take payment, fulfill, ship, handle returns — contract.
• Fraud prevention, security, accounting, tax — legitimate interests and/or legal obligation.
• Customer email about your order — contract.
• Newsletters / abandoned cart (Klaviyo or similar) — consent or soft opt-in where allowed; unsubscribe anytime.
• Ads measurement (Meta Pixel and similar) — consent where required (EEA/UK).
• Improve the store — legitimate interests, with consent for non-essential cookies where required.

3. Who we share it with

We do not sell your personal information for money. We share it with processors who help us run the store:

• Shopify (store, checkout, hosting).
• Payment providers (Shopify Payments, Shop Pay, card networks, Apple/Google Pay).
• Fulfillment / dropshipping partner (name, ship-to address, phone, SKU) so the warehouse can send the parcel. That partner may be outside your country.
• Carriers (tracking).
• Klaviyo or another email tool, if enabled.
• Meta / Instagram if you accept ads cookies or we run matched events as allowed.
• Professional advisors (accountant, lawyer) and authorities if the law requires.

International transfers use Shopify’s and our vendors’ safeguards (including Standard Contractual Clauses where used).

4. How long we keep it

Orders and invoices: for the legal retention period (often 5–10 years for tax/accounting, depending on France). Support emails: typically up to 3 years after the last message, unless a dispute is open. Marketing list: until you unsubscribe or we delete inactive contacts. Cookies: see the Cookie policy.

5. Your rights

EEA/UK: access, correction, deletion, restriction, portability, objection (including to direct marketing), withdraw consent. Complaint: your local data authority (France: CNIL — cnil.fr).

California: know, delete, correct, opt out of “sale” or “sharing” for cross-context ads. We do not sell data for cash. Ads cookies may count as “sharing”; use the cookie banner / Do Not Sell or Share controls if we display them, or email velora.sav@outlook.com with subject “CCPA”. We will not discriminate for exercising rights. We do not knowingly collect data from children under 16 for sale/share.

To use these rights: email velora.sav@outlook.com. We may need to verify it is you.

6. Children

The store is for adults. We do not knowingly collect data from children under 16 (or a higher age if your country requires it).

7. Security

Checkout is encrypted (HTTPS / Shopify). No method is 100% secure. Tell us at velora.sav@outlook.com if you think an account or order was compromised.

8. Changes

We will update this page when our practices change. Material changes will be dated at the top.