Privacy Policy

Last updated: 12 April 2026

Velour & Co ("we", "us", "our") is a trading name of Bellevarie Ltd (Company No. 17026133), registered at 128 City Road, London EC1V 2NX, United Kingdom. We are the data controller of the personal data you provide when using velourandco.co.uk. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK GDPR and the Data Protection Act 2018.

1. What data we collect

Identity & contact data: name, email address, billing/delivery address, phone number.
Payment data: processed securely by our payment providers (Shopify Payments, PayPal). We never store full card details.
Order data: products purchased, order history, returns.
Technical data: IP address, browser type, device, cookies, pages visited.
Marketing data: preferences for receiving marketing from us.

2. How we use your data (lawful bases)

Contract: to process and deliver your order, handle returns and refunds.
Legal obligation: to keep accounting records (HMRC, 6 years).
Legitimate interest: to improve our website, prevent fraud, and secure our systems.
Consent: to send marketing emails (you can unsubscribe at any time).

3. Who we share your data with

We share your personal data only with trusted third parties who help us run our business:

Shopify Inc. — e-commerce platform hosting this store.
Payment processors — Shopify Payments, PayPal.
Delivery partners — Royal Mail, Evri, DPD, and similar couriers.
Fulfilment partners — for dropshipped items, limited order data (name, address, item) is shared with our supplier for shipment only.
Marketing platforms — Google, Meta, Klaviyo (with your consent).
HMRC and authorities — where legally required.

Some of these processors are located outside the UK/EEA. Where this is the case, we ensure appropriate safeguards (Standard Contractual Clauses or adequacy decisions) are in place.

4. How long we keep your data

Order and accounting records: 6 years (HMRC requirement). Marketing data: until you unsubscribe. Account data: until you request deletion.

5. Your rights

Under UK GDPR you have the right to: access your data, correct inaccuracies, request erasure, restrict processing, object to processing, data portability, and withdraw consent. To exercise any right, email contact@velourandco.co.uk.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

6. Cookies

We use cookies for essential site functionality, analytics (Google Analytics), and advertising (Google Ads, Meta Pixel). You can manage cookie preferences via our cookie banner or your browser settings.