Velova LLC (operating at https://velova.shop/, 748 E Market St,, Louisville, KY 40202, US) is committed to protecting the privacy and personal data of our customers, including those residing in the European Union (EU), in accordance with the General Data Protection Regulation (GDPR). Although Velova LLC is based in the United States and only ships domestically within the US, we acknowledge our responsibility to protect personal data collected from individuals in the EU when they interact with our website or services. This statement outlines our commitment to GDPR principles.

Data Controller Information: Velova LLC Address: 748 E Market St,, Louisville, KY 40202, US Email: support@velova.shop Phone: 16466212971

Types of Personal Data We Collect: When you visit https://velova.shop/, make a purchase, or contact us, we may collect various types of personal data, including:

  • Contact Information: Name, email address, shipping address, billing address, phone number.
  • Order Information: Details of products purchased, transaction history.
  • Payment Information: While we do not directly store credit card details, payment processors like Afterpay and Klarna handle transaction data securely.
  • Website Usage Data: IP address, browser type, device information, pages visited, and other diagnostic data collected via cookies and similar technologies.

Lawful Basis for Processing Your Data: We process your personal data based on the following lawful grounds as defined by GDPR:

  • Performance of a Contract: To fulfill your orders, process payments via Afterpay / Klarna, deliver products, and provide customer support related to your purchases.
  • Legitimate Interests: To improve our website and services, prevent fraud, conduct analytics, and manage our business operations, always ensuring these interests do not override your data protection rights.
  • Consent: Where required, for instance, for sending marketing communications (which you can opt-out of at any time).
  • Legal Obligation: To comply with applicable laws and regulations.

Your GDPR Data Protection Rights (for EU Residents): If you are an EU resident, you have the following rights concerning your personal data:

  • The Right to Access: You have the right to request copies of your personal data.
  • The Right to Rectification: You have the right to request that Velova LLC correct any information you believe is inaccurate or complete information you believe is incomplete.
  • The Right to Erasure (Right to be Forgotten): You have the right to request that Velova LLC erase your personal data, under certain conditions.
  • The Right to Restrict Processing: You have the right to request that Velova LLC restrict the processing of your personal data, under certain conditions.
  • The Right to Object to Processing: You have the right to object to Velova LLC’s processing of your personal data, under certain conditions.
  • The Right to Data Portability: You have the right to request that Velova LLC transfer the data that we have collected to another organization, or directly to you, under certain conditions.
  • The Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at support@velova.shop or 16466212971. We will respond to your request within one month.

Data Security: Velova LLC implements robust technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. We utilize industry-standard security protocols for our website (e.g., SSL encryption) and our e-commerce platform (WooCommerce) includes security features designed to protect data.

Data Retention: We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for satisfying any legal, accounting, or reporting requirements. Generally, customer order data is retained for a period necessary to manage orders, returns, and claims, and to comply with tax and consumer protection laws.

Third-Party Data Processors: We engage trusted third-party service providers to perform functions on our behalf. These include:

  • Payment Processors: Afterpay / Klarna (for secure payment transactions).
  • E-commerce Platform: WooCommerce (for website functionality and data storage).
  • Shipping Carriers: (for order delivery within the US). These third parties are contractually obligated to protect your data and process it only for the purposes for which we provide it to them, in compliance with GDPR where applicable.

International Data Transfers: As Velova LLC is located in the United States and only ships domestically within the US, any personal data collected from EU residents will be transferred to and stored in the United States. The United States currently does not have an adequacy decision from the European Commission. We implement appropriate safeguards, such as standard contractual clauses (SCCs) where applicable with our processors, and rely on derogations for specific situations, such as the necessity for the performance of a contract (e.g., fulfilling your order) or explicit consent, to ensure the protection of your data during international transfers.

Updates to This Statement: Velova LLC may update this GDPR Compliance Statement from time to time. We encourage you to review it periodically to stay informed about how we are protecting your data.