Privacy Policy
Last updated: 30 July 2026
1. Data Controller
Velor Commerce Ltd is the data controller for personal data collected through the Velor platform. We are committed to protecting your privacy in accordance with UK GDPR and the Data Protection Act 2018.
2. Data We Collect
We collect: (a) Account data — name, email address, password hash; (b) Transaction data — order details, shipping address, payment confirmation; (c) Seller data — business name and payout account details (Stripe Connect, or Payoneer where applicable); (d) Usage data — pages visited, device type, browser; (e) Communications — messages sent via the platform.
3. How We Use Your Data
We use your data to: (a) process and fulfil orders; (b) manage your account; (c) communicate order and account updates; (d) operate and improve the platform; (e) comply with legal obligations; (f) detect and prevent fraud.
4. Lawful Basis
We process personal data on the following lawful bases: (a) Contract — necessary to fulfil orders and operate accounts; (b) Legal obligation — tax, fraud prevention, and other legal requirements; (c) Legitimate interests — platform security, analytics, and service improvement; (d) Consent — marketing communications (you may withdraw consent at any time).
5. Data Sharing
We share data with: (a) Sellers — order details necessary to fulfil your purchase; (b) Stripe — payment processing and seller payouts; (c) Payoneer — seller payouts, for sellers in countries where Stripe payouts are not available; (d) Vercel — platform hosting; (e) Resend — transactional email delivery. We do not sell personal data to third parties.
6. International Transfers
Some of our service providers process data outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.
7. Data Retention
We retain account data for as long as your account is active. Order data is retained for 7 years for tax and legal compliance. You may request deletion of your account at any time, subject to legal retention obligations.
8. Your Rights
Under UK GDPR, you have the right to: access your data; rectify inaccurate data; erase your data (where lawful); restrict or object to processing; data portability; withdraw consent. To exercise any right, email privacy@velorcommerce.store.
9. Community & Social Features
The Makers' Circle lets buyers follow sellers, and sellers publish journal posts that are public by their nature. Buyer collections (saved product lists) are private by default; a collection is only visible to anyone else if you explicitly switch it to public from your collections page. If you do, its name, saved items, and your existing pseudonymous display name (e.g. "First L.") may be shown to other users, including on the Makers' Circle homepage — never your full name, email, or other account data. You can switch a collection back to private, or delete it, at any time.
10. Cookies
We use strictly necessary cookies for session management and authentication. We do not use third-party advertising cookies without your consent.
11. Contact and Complaints
Data protection enquiries: privacy@velorcommerce.store. If you are unhappy with how we handle your data, you may lodge a complaint with the Information Commissioner's Office at ico.org.uk.