Legal

Privacy Policy

Last updated: 8 June 2026

1. Data controller

Maison Velüra — full company details available on our Imprint. For privacy enquiries: privacy@velura.eu.

2. Data we process

• Order data: name, billing & shipping address, email, phone, payment reference.
• Account data: email and password hash if you create an account.
• Marketing data: email address if you opt in to the newsletter.
• Technical data: IP address, browser, device, referring page, cookies (see §5).

3. Legal basis (GDPR Art. 6)

• Order processing & delivery — Art. 6(1)(b) (contract performance).
• Tax & accounting records — Art. 6(1)(c) (legal obligation).
• Newsletter — Art. 6(1)(a) (consent), revocable at any time.
• Analytics & advertising cookies — Art. 6(1)(a) (consent via cookie banner).

4. Processors & recipients

• Shopify Inc. — checkout, payment processing, hosting of order data.
• BigBuy S.L. (Spain) — order fulfilment & shipping.
• DHL, GLS, Poste Italiane, BRT — carriers.
• Google Ireland Ltd. — analytics (only with consent).
• Meta Platforms Ireland Ltd. — advertising pixel (only with consent).

5. Cookies

We use strictly necessary cookies (session, cart) which require no consent, and analytics/marketing cookies which load only after you accept them in the cookie banner. You can change your choice any time by clicking "Cookie settings" in the footer.

6. Retention

Order data is kept for 10 years (tax law). Newsletter data is kept until you unsubscribe. Marketing-cookie data is kept for up to 12 months.

7. Your rights (GDPR Art. 15–22)

You have the right to access, rectify, erase, restrict and port your data, and to object to processing. To exercise these rights, contact privacy@velura.eu. You may also lodge a complaint with your national supervisory authority.

8. International transfers

Some processors (Shopify, Google, Meta) may transfer data outside the EU. Transfers are protected by EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.