[[vc:badge]]
[[vc:image]]
This policy explains what Velvet Candies collects, why we need it, who helps us process it and the choices available to you. We use personal information to run the store—not to make the relationship feel mysterious.
Details you provide, information generated while you use the store and limited information received from service partners.
Processing payments, dispatching parcels, customer support, fraud prevention, legal records and improvements.
Your exact rights depend on the law that applies, but we will handle requests fairly and transparently.
Velvet Candies is the data controller for personal information collected through this website and through direct customer support, except where another provider acts as an independent controller for its own service.
Contact: support@velvetcandies.com
Address: 483 Green Lanes, London, United Kingdom, N13 4BS
Payment providers, delivery companies, ecommerce and hosting providers, fraud-prevention services, advertising platforms and social networks may return transaction status, tracking, attribution or account information needed to provide their service.
| Purpose | Typical information | Lawful basis |
|---|---|---|
| Take and fulfil an order | Identity, contact, order, payment status and delivery details. | Necessary to perform our contract with you. |
| Customer service and issue resolution | Messages, order history and evidence you provide. | Contract, legal obligations and legitimate interests in resolving genuine enquiries. |
| Security, fraud and misuse prevention | Transaction, device, network and account signals. | Legitimate interests and, where required, legal obligations. |
| Accounting, tax and legal records | Orders, refunds, payments and correspondence. | Compliance with legal obligations. |
| Improve the website and product range | Aggregated usage, search, basket and feedback information. | Legitimate interests, or consent where optional tracking requires it. |
| Email or advertising marketing | Contact details, consent and engagement information. | Consent, or another basis permitted by applicable direct-marketing law. |
Where we rely on legitimate interests, we consider whether the use is necessary, proportionate and compatible with what a customer would reasonably expect.
We share only what is reasonably needed with providers that help operate the store, including:
Our store sells to the UK, USA, Europe and other supported regions, and some service providers may process information outside the United Kingdom. Where UK data protection law requires safeguards, we use an approved transfer mechanism, an adequacy decision, contractual safeguards or another lawful route.
Providers may also process data under the laws of the country in which they operate. You can contact us for more information about the safeguards relevant to a particular service.
We keep personal information only for as long as reasonably needed for the purpose collected, including order fulfilment, warranty or refund queries, tax and accounting, security, disputes and legal obligations.
We may anonymise information so it can no longer identify you and use the anonymous information for statistical purposes.
We may send product drops, restocks or offers when you have asked to receive them or where direct-marketing law otherwise permits. Every marketing email should include an unsubscribe option. You can also email support@velvetcandies.com.
Unsubscribing from marketing does not stop necessary service messages about an order, refund, security issue or account.
Optional analytics and advertising storage is controlled through our cookie settings. Social media platforms may process information independently when you visit or interact with their services.
Depending on where you live and the law that applies, you may have rights to:
To protect customers, we may need to verify identity and authority before completing a request. We will not ask for more identification than is reasonably necessary.
We use reasonable technical and organisational measures designed to protect information against loss, misuse, unauthorised access, alteration and disclosure. No internet service can guarantee absolute security, so please use a unique password where accounts are available and contact us promptly if something looks wrong.
Velvet Candies is a general-audience retail store and is not designed to collect personal information directly from children. Orders must be placed by someone legally able to enter into the purchase. If you believe a child has provided personal data without appropriate involvement, contact us.
Please contact us first so we can investigate. You also have the right to complain to the UK Information Commissioner’s Office (ICO) or, where applicable, a data protection authority in your country.
ICO information is available at ico.org.uk.
We may update this policy when services, laws or processing activities change. The updated date at the top shows when this version was last revised. Material changes will be highlighted where appropriate.