My Cart 0
£0.00

Velswa – Privacy Policy

Last updated: 6 November 2025

Fraud & Spam Notice. Suspicious, fraudulent or spam emails sent in Velswa’s name may be referred to the UK National Cyber Security Centre (NCSC) with relevant sender and tracking details.

1. Who We Are

This Privacy Policy applies to the website velswa.co.uk and any sub-domains (the “Website”) operated by VELSWA UK LIMITED (“Velswa”, “we”, “us”, “our”). We are the data controller for personal information processed through the Website.

Company number: SC830265 • Registered office: 45 John Street, Aberdeen, AB25 1LN, United Kingdom • Contact: support@velswa.co.uk

2. Scope

This Policy covers personal data collected via the Website and services (including customer accounts, checkout and support). It does not cover third-party websites linked from our Website. Please read their policies before using those sites.

3. The Data We Collect

  • Identity & contact data – name, email, telephone, billing/delivery address.
  • Account data – login credentials, preferences, saved addresses.
  • Order & payment data – order history, basket contents, payment status, last 4 digits/brand (from our processor). We do not store full card numbers.
  • Marketing & communications – your preferences and consents.
  • Technical & usage data – IP address, device info, browser type/version, operating system, pages viewed, time/date, referring/exit pages, clickstream.
  • Location & region – postcode/region for marketplace features.
  • User-generated content – reviews, messages to Sellers.

4. How We Collect Data

  • Directly from you – when you browse, register, place an order, contact support, complete surveys or manage preferences.
  • Automatically – via cookies and similar technologies (see Cookies).
  • From third parties – e.g., payment processors (Stripe), analytics providers (Google Analytics), anti-fraud tools, and marketplace Sellers (order fulfilment updates).

5. Lawful Bases for Processing (UK GDPR)

We process your personal data on the following legal bases:

  • Contract – to create/manage your account, process and fulfil orders, provide customer service.
  • Legitimate interests – to operate and improve our Website, prevent fraud/abuse, keep records, personalise content, defend legal claims. We balance these interests against your rights.
  • Consent – for email/SMS marketing (where required) and non-essential cookies/analytics. You may withdraw consent at any time.
  • Legal obligation – to comply with tax, accounting and consumer protection laws and respond to lawful requests.
  • Vital interests – only in rare safety-related circumstances.

6. How We Use Your Data

  • Provide, personalise and maintain the Website and your account.
  • Process payments, fulfil orders, coordinate delivery/collection and handle returns.
  • Communicate service messages (order updates, policy changes).
  • Run promotions/surveys (if you choose to participate).
  • Prevent and detect fraud, misuse and security incidents.
  • Serve marketing (with your consent or as permitted by soft-opt-in rules) and measure performance.
  • Generate aggregated, anonymised analytics to improve our services.

7. Marketplace Sharing

Velswa is a marketplace. For orders fulfilled by third-party Sellers, we share only the data necessary to complete your order (e.g., name, contact details, delivery address, items ordered). Sellers are independent data controllers for their own processing. They must process your data lawfully and securely and may contact you about your order where necessary.

8. Disclosure of Your Data

  • Service providers / processors – hosting, payments (e.g., Stripe), email/SMS, analytics (e.g., Google Analytics), support tools, fraud prevention.
  • Professional advisers & authorities – auditors, insurers, legal advisers, HMRC, law enforcement, NCSC where relevant, courts.
  • Corporate transactions – if we sell/merge/restructure our business, data may transfer under appropriate safeguards.

We do not sell your personal data.

9. International Transfers

Where data is transferred outside the UK (for example, to cloud or analytics providers), we put in place appropriate safeguards such as the UK International Data Transfer Agreement/Addendum or other mechanisms permitted by UK GDPR, and assess local laws where required.

10. Data Security

  • Encryption in transit (SSL/TLS) and restricted access on a need-to-know basis.
  • Payments processed by PCI-DSS compliant providers; we do not store full card details.
  • Security monitoring and incident response procedures. We will notify you and regulators of qualifying breaches as required by law.

11. Data Retention

We retain personal data only as long as necessary for the purposes set out above, including to meet legal, accounting and reporting requirements. Typical periods:

  • Orders & invoices: up to 7 years (accounting/tax).
  • Accounts: while active and for up to 24 months after inactivity (or sooner if you request deletion, unless we must retain some data by law).
  • Marketing: until you unsubscribe or withdraw consent.
  • Logs/analytics: short, rolling periods consistent with our security and analytics tools.

12. Your Rights (UK GDPR)

You have the right to request: access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interests or direct marketing. Where processing relies on consent, you may withdraw consent at any time.

To exercise your rights, email support@velswa.co.uk. We may need to verify your identity. You also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

13. Cookies & Similar Technologies (PECR)

We use cookies to operate the Website, remember your basket, improve performance and personalise content. Non-essential cookies (e.g., analytics/advertising) are used with your consent. You can change your preferences at any time in your browser or via our cookie banner (where available).

Types of Cookies We Use

  • Strictly necessary – required for site operation, checkout, authentication.
  • Performance/analytics – e.g., Google Analytics to understand site usage.
  • Functionality – remember preferences such as region or language.
  • Targeting/advertising – show relevant offers and measure campaigns.

Note: Disabling certain cookies may affect site functionality. For general guidance on cookies, see aboutcookies.org.

14. Marketing

We may send you marketing about similar products/services if you purchased from us (soft opt-in). Otherwise we will obtain your consent. You can opt out at any time using the unsubscribe link or by contacting us.

15. Children

Our services are not directed to children and we do not knowingly collect personal data from individuals under 16. If you believe a child has provided data, please contact us to delete it.

16. Links to Other Websites

Our Website may contain links to third-party sites. We are not responsible for their privacy practices. Please review their policies.

17. Changes to This Policy

We may update this Policy from time to time to reflect changes in law or our practices. Updates will be posted here with a revised “Last updated” date. Material changes may also be notified by email or on-site notice.

18. Contact Us

If you have questions about this Policy or how we handle your data, contact: support@velswa.co.uk.

This Policy reflects requirements under the UK GDPR, Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).