Legal
Privacy policy
This policy explains what personal information we collect when you shop with us, why we need it, and your rights under UK data protection law (UK GDPR and the Data Protection Act 2018).
Last updated: November 2026
Who we are
Velvet Lengths is run by [business or trading name]. You can contact us about your data at [business email] or through our contact page.
What we collect
- Order details: your name, delivery address, email, phone number and what you bought.
- Payment details: handled securely by our payment provider. We never see or store your full card number.
- Messages: anything you send us through the contact or review forms.
- Your bag: items you add are saved only in your own browser, on your device.
Why we use it
- To process, deliver and track your order, and handle returns. (Legal basis: to perform our contract with you.)
- To answer your questions. (Legitimate interests.)
- To send marketing emails, only if you've opted in. You can unsubscribe at any time. (Consent.)
- To keep records for tax and accounting. (Legal obligation.)
Who we share it with
We only share what's needed with: our payment provider, our suppliers and delivery companies (your name and delivery address, so they can send your order), our email and form providers, and our website host. We never sell your data.
Some of our suppliers and service providers are based outside the UK. Where your data is sent abroad, we rely on the safeguards UK law requires.
How long we keep it
Order records are kept for 6 years for tax purposes. Messages are kept for up to 2 years.
Your rights
You can ask to see, correct or delete your data, object to how we use it, or withdraw consent at any time. Contact us and we'll respond within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
This site doesn't use tracking or advertising cookies. Your bag is stored in your browser's local storage so it's still there when you come back. We'll update this policy if that changes.