Privacy Policy & Cookie Policy

1. Who We Are

Veyvora operates the website veyvora.co and is the data controller responsible for your personal data. If you have any questions about this policy or how we handle your information, you can contact us at info@veyvora.co or via WhatsApp.

2. What Data We Collect

We may collect the following categories of personal data:

• Identity data -- your name as provided when placing an order.
• Contact data -- email address, phone number, and delivery address.
• Transaction data -- details of the products you have purchased and payment references.
• Technical data -- IP address, browser type and version, device information, time zone, operating system, and platform.
• Usage data -- information about how you use our website, including pages visited, time on site, and navigation paths.
• Communication data -- any messages you send us via WhatsApp, email, or the contact page.

3. How We Collect Your Data

We collect data directly from you when you place an order, contact us, or browse our website. We also collect technical and usage data automatically through cookies, server logs, and analytics tools such as Google Analytics and Google Tag Manager. We do not purchase personal data from third parties.

4. How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfil your orders, including shipping and delivery confirmation.
• To communicate with you about your order, respond to enquiries, and provide customer support.
• To improve our website, products, and services based on usage patterns.
• To detect, prevent, and address fraud or other illegal activity.
• To comply with legal obligations and enforce our terms and conditions.

We do not use your personal data for automated decision-making or profiling. We do not sell your personal data to third parties for marketing purposes.

5. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases:

• Contract -- processing necessary to fulfil your order and provide our services.
• Legitimate interest -- improving our website, preventing fraud, and ensuring security.
• Consent -- for non-essential cookies and analytics tracking. You can withdraw consent at any time.
• Legal obligation -- where we are required to retain data by law.

6. Data Sharing

We may share your personal data with:

• Shipping carriers -- to deliver your order (name and address only).
• Payment processors -- to securely process your payment. We do not store card details.
• Analytics providers -- Google Analytics processes anonymised usage data to help us understand site performance.

We do not sell, rent, or trade your personal data. All third-party providers are contractually required to protect your data and process it only for the purposes we specify.

7. Data Retention

We retain your personal data only for as long as is necessary to fulfil the purposes described in this policy. Order records are retained for up to 6 years to comply with tax and accounting obligations. Communication records are kept for up to 2 years. Technical and usage data collected through analytics is retained for up to 14 months. Once the retention period expires, your data is securely deleted or anonymised.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit via HTTPS, secure storage of order information, and restricted access to personal data on a need-to-know basis. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security, but we implement industry-standard safeguards.

9. Your Rights

Under UK GDPR, you have the right to:

• Access -- request a copy of the personal data we hold about you.
• Rectification -- ask us to correct any inaccurate or incomplete data.
• Erasure -- request that we delete your personal data, subject to legal retention requirements.
• Restriction -- ask us to limit how we process your data in certain circumstances.
• Data portability -- receive your data in a structured, machine-readable format.
• Object -- object to processing based on legitimate interest.
• Withdraw consent -- for any processing based on consent, at any time.

To exercise any of these rights, contact us at info@veyvora.co. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

10. International Transfers

Some of our service providers (such as Google Analytics) may process data outside the UK. Where this occurs, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with UK GDPR.

11. What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help the site remember your preferences, understand how you use the site, and improve your experience. Cookies may be set by the website you are visiting (first-party cookies) or by third-party services embedded on the page.

12. Cookies We Use

We use the following types of cookies:

13. Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling cookies may affect the functionality of parts of this website. You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

14. Changes to This Policy

We may update this Privacy Policy and Cookie Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Your continued use of the website after any changes constitutes your acceptance of the updated policy.

15. Contact

If you have any questions about this Privacy Policy or Cookie Policy, or wish to exercise any of your data rights, please contact us at info@veyvora.co, via WhatsApp, or visit our Contact page.