Privacy Policy

How this policy is written

This policy follows your personal information through time: what we collect on the day you visit, what we collect on the day you order, who sees it along the way, what you can ask us to do with it on any day, and how long we keep it. After the timeline, "The fine print" covers children and changes.

The day you visit: what we collect before you buy anything

• Site usage: pages visited and basic technical data such as browser type.
• Cookies: essential cookies that keep the cart and checkout working, and optional analytics cookies that help us understand which pages visitors use. You can decline optional cookies in your browser settings; the cart and checkout keep working without them.

The day you order: what we collect when you buy

• Contact details: name, email address, phone number.
• Order details: shipping and billing address, items ordered, order total.
• Messages: the contents of emails and messages you send us.

Why we collect it

• Fulfillment: to process, pack, and ship your order.
• Shipping and tracking: to send your order to the carrier and share tracking with you.
• Support: to answer your messages and handle returns, refunds, and defect claims.
• Fraud prevention: to detect and prevent fraudulent orders.
• Legal and tax records: to keep the records the law requires us to keep.

What we never collect: your card numbers

We do not collect card numbers. Payments are processed through Shopify and its payment processors on secure checkout pages. We never see or store your full card number.

Who sees it along the way

We share personal information only with the service providers needed to run the store:

• Shopify — store hosting and order processing.
• Payment processors — to charge your order and issue refunds.
• USPS — to deliver your order and provide tracking.
• Email provider — to send order, shipping, and support emails.

We do not share personal information with anyone else except as required by law or to protect against fraud. We do not sell personal information.

Any day: your rights

On any day, you may ask us to access, correct, delete, or export your personal information. Send your request to business@velvete.site. We reply within 30 days. An identity check may apply before we release or delete information, so that we do not hand your data to someone else.

California privacy rights (CCPA / CPRA)

California residents have the right to know what personal information we collect, delete it, correct it, and opt out of selling or sharing it. We do not sell personal information, and we do not discriminate against anyone for exercising these rights. To make a request, email business@velvete.site.

The long run: retention

We keep order records for as long as tax and legal requirements demand, then delete them. Messages are kept only as long as needed to support your order or answer your question.

The fine print

• Children: Our site is not marketed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has sent us personal information, email us and we will delete it.
• Changes: If this policy changes, the updated version is posted on this page with a new effective date. Material changes are described at the top of the page for 30 days after posting.

Policy owner: Velvette, 4659 Heidelberg Ave, Saint Louis, MO 63123 · business@velvete.site · +1 (555) 0123-8890