Privacy Policy
This policy explains what personal data we collect when you visit velmiraae.shop, place an order or contact us, why we use it, who we share it with and what rights you have. It follows the UK GDPR, the Data Protection Act 2018 and, for visitors in the European Economic Area, the EU General Data Protection Regulation (GDPR).
Who is responsible
The controller is BORDERLINE APPAREL LIMITED (trading as VELMIRAAE), 51a Micheldever Rd, Lee, London, SE12 8LU, United Kingdom, company number 08641570. For any privacy question or request, email support@velmiraae.shop with “Privacy” in the subject line.
What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Name, email, phone (optional), billing and delivery address, items ordered, order history | Taking, delivering and supporting your order; sending order and delivery emails; handling withdrawals and refunds | Performance of a contract (Art. 6(1)(b)) |
| Payment status and limited payment details (e.g. card type, last four digits) returned by our payment providers | Confirming payment, refunds, preventing fraud | Contract; legitimate interest in preventing fraud (Art. 6(1)(f)) |
| Invoices and order records | Accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Account details (email, password hash, saved addresses) if you create an account | Giving you access to your orders and addresses | Contract |
| Messages you send us (contact form or email) | Answering your request | Contract or legitimate interest in answering you |
| Technical data: IP address, browser type, pages requested, delivery country and language choices | Running and securing the website, showing the right language, currency and prices | Legitimate interest in a secure, working shop |
We do not use advertising or analytics cookies, we do not sell your data, and we do not send marketing emails unless you have asked us to.
Who we share data with
- Payment providers — Stripe (Stripe Payments Europe Ltd. / Stripe, Inc.) and PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A.), when you pay with them. They process your payment details as independent controllers or as our processors under their own privacy notices.
- Carriers — name, address, phone and email needed to deliver your parcel and send tracking updates.
- Hosting and email — our website and email are hosted by Hostinger International Ltd., which processes data on our behalf.
- Authorities and advisers — where the law requires, for example tax authorities, or our accountants.
International transfers
We are based in the United Kingdom. Some of our providers process data in the EEA, the United States or other countries. Where data leaves the UK or EEA, we rely on adequacy decisions (including the UK–US data bridge and the EU–US Data Privacy Framework where the provider is certified) or on standard contractual clauses.
How long we keep data
- Order and invoice records: 6 years after the end of the financial year, as required by UK tax law.
- Customer accounts: until you delete your account, or after 3 years without activity.
- Contact messages: up to 24 months after your request is resolved.
- Server logs: up to 30 days.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. Where processing is based on consent, you may withdraw consent at any time. To use any of these rights, email support@velmiraae.shop. We respond within one month.
You also have the right to complain to a supervisory authority: in the UK the Information Commissioner’s Office (ico.org.uk); in the EU the data protection authority of your country, for example the Danish Datatilsynet or the data protection authority of your German federal state.
Cookies
We only use cookies that are needed for the shop to work. Details are in our Cookie Policy.
Security
The whole site is served over encrypted HTTPS. Card data is entered in fields provided by our payment providers and never touches our servers. Access to order data is limited to people who need it to fulfil and support orders.
Children
Our shop is not directed at children under 16 and we do not knowingly collect their data.
Changes
We will update this policy when our practices change and show the date of the last update at the top of this page.