Customer Care · Draft Policy
PRIVACY POLICY.
This page provides a structured privacy-notice draft for VELORA. The actual controller details, processing practices, providers, retention periods, and contact route must be verified and completed before launch.
Pre-launch draft — review required
Bracketed items are business-detail placeholders. This draft is not legal advice and should be checked against VELORA’s actual data practices before publication.
1. Who is responsible for personal information?
[Insert the verified legal name and contact details of the data controller, including the address and privacy contact before launch.] This draft identifies the topics VELORA intends to explain; it is not a completed privacy notice.
2. Information that may be collected
Depending on the services enabled, this may include contact and delivery details supplied during checkout, order and payment references, customer-service correspondence, and essential technical information generated when the site is used. Confirm the actual information collected by the live site before publishing this list.
3. How information may be used
Describe the actual purposes for which information is used, such as processing orders, arranging delivery, responding to enquiries, preventing misuse, and meeting applicable record-keeping duties. Remove any purpose that does not apply.
4. Lawful bases
[Document the applicable UK GDPR lawful basis for each purpose, after reviewing VELORA’s actual processing. Do not publish a basis until verified.]
5. Service providers and disclosures
Identify the categories of service providers that process personal information for VELORA, such as payment, hosting, delivery, or email providers, and describe when information may be shared. Confirm actual providers, roles, and any international transfers before launch.
6. Retention and security
[Set the retention periods or criteria for each category of information and describe the safeguards actually used. Do not promise a specific retention period or security measure until verified.]
7. Your data protection rights
Explain the rights available under applicable data protection law, how a person can make a request, and how to contact the controller. The correct contact route must be added before launch. A person may also have the right to complain to the UK Information Commissioner’s Office; verify and complete this section for the final notice.
8. Cookies and similar technologies
[List the cookies and similar technologies the site actually uses, their purposes, and any consent choices required. Complete this section after checking the production configuration and analytics.]
9. Changes and effective date
Effective date: [Insert date after policy approval]. Describe how material changes to this notice will be communicated once VELORA’s process has been decided.