Privacy Policy

Last updated: [Date]

1. Introduction Velvet District ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and safeguard your personal data when you visit our website, use our services, make a purchase, or otherwise interact with us. We operate in England and comply with applicable UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website or services, you agree to the collection and use of your information in accordance with this Privacy Policy.

2. Who We Are Velvet District is a fashion business based in England. We design, market, and/or sell fashion products and related services.

3. Personal Data We Collect We may collect and process the following categories of personal data:

3.1 Information you provide to us

• Identity data: first name, last name, title, date of birth (if provided), gender (if provided)
• Contact data: billing and delivery address, email address, phone number
• Account data: username, password, preferences, wishlists, order history
• Order and transaction data: products purchased, payment method (limited information), order total, currency, purchase date, returns and exchanges
• Communication data: messages you send to us via email, contact forms, social media, or customer service channels; reviews and feedback
• Marketing preferences: your choices regarding receiving marketing communications and newsletters

3.2 Information collected automatically When you visit our website, we automatically collect certain information using cookies and similar technologies, including:

• Technical data: IP address, browser type and version, device type, operating system, time zone setting, language settings
• Usage data: pages visited, links clicked, time spent on pages, referring/exit pages, and other actions on the website
• Approximate location data: derived from your IP address (country/region level)

3.3 Information from third parties We may receive personal data about you from:

• Payment service providers (e.g. transaction status, limited payment details)
• Delivery and logistics partners (e.g. delivery status, tracking information)
• Social media platforms (if you interact with us via those platforms or use social login features)
• Analytics and advertising partners (aggregated or pseudonymised usage data)

4. How We Use Your Personal Data We use your personal data only where we have a legal basis to do so. We may use your personal data for the following purposes:

4.1 To provide and manage our services Legal bases: performance of a contract; legitimate interests

• Processing and fulfilling your orders
• Providing product, sizing, and style information
• Managing payments, fees, and charges
• Arranging delivery, returns, and exchanges
• Providing customer support and responding to your enquiries

4.2 To create and manage your account Legal bases: performance of a contract; legitimate interests

• Registering you as a new customer
• Managing your login credentials and account settings
• Maintaining your purchase history, wishlists, and saved preferences

4.3 For marketing and promotions Legal bases: consent; legitimate interests

• Sending you newsletters, offers, and updates about Velvet District products, collections, and events
• Personalising marketing content based on your preferences and purchase history You can opt out of marketing communications at any time (see Section 9).

4.4 To improve our website and services Legal bases: legitimate interests

• Analysing how our website is used and performing analytics
• Enhancing website functionality, user experience, and security
• Developing new products, features, and services

4.5 For security and fraud prevention Legal bases: legitimate interests; legal obligation

• Protecting our business, website, and customers from fraud and misuse
• Detecting and investigating suspicious activity
• Complying with applicable laws, regulations, and court orders

5. Cookies and Similar Technologies We use cookies and similar technologies (such as pixels and tags) to:
   • Enable core site functionality (e.g. shopping cart, login)
   • Remember your preferences (e.g. language, region)
   • Analyse site traffic and usage
   • Support marketing and advertising campaigns

You can manage cookies through your browser settings and, where available, our cookie banner or cookie management tool. Please note that disabling certain cookies may impact the functionality of our website.

6. Sharing Your Personal Data We do not sell your personal data. We may share your information with:

6.1 Service providers

• Payment processors
• Delivery and logistics partners
• IT and hosting providers
• Analytics, marketing, and advertising partners
• Customer support platforms

These third parties process your data only on our instructions and are contractually required to protect your data.

6.2 Business transfers If we undergo a business transaction, such as a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. We will ensure that any such transfer is carried out in accordance with applicable data protection laws.

6.3 Legal requirements We may disclose your personal data if required to do so by law or in response to valid requests by public authorities, or to protect our rights, property, or safety, or that of our customers or others.

7. International Transfers We are based in England. Some of our service providers may be located outside the UK or the European Economic Area (EEA). When we transfer personal data to countries that do not provide the same level of data protection as the UK, we will ensure appropriate safeguards are in place, such as:

   • Standard Contractual Clauses approved by the UK authorities; or
   • Other legally recognised mechanisms that ensure adequate protection of your data. You may contact us for more information on the specific safeguards used for international transfers.

8. Data Retention We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the context of processing, for example:

   • Orders and transaction records: kept for the time required by tax and accounting laws
   • Account data: kept while your account is active and for a reasonable period thereafter, or until you request deletion
   • Marketing data: kept until you opt out of marketing or withdraw your consent

When personal data is no longer required, we will securely delete or anonymise it.

9. Your Rights Under UK data protection law, you have the following rights in relation to your personal data (subject to certain conditions and exceptions):
   • Right of access: to obtain a copy of your personal data and information about how we process it
   • Right to rectification: to have inaccurate or incomplete data corrected
   • Right to erasure: to request deletion of your data where there is no good reason for us to continue processing it
   • Right to restriction: to request that we restrict the processing of your data in certain circumstances
   • Right to data portability: to receive your data in a structured, commonly used and machine-readable format and to transmit it to another controller where technically feasible
   • Right to object: to object to our processing of your data where we rely on legitimate interests, and to object at any time to processing for direct marketing
   • Rights in relation to automated decision-making and profiling: to request human review of any automated decisions that produce legal or similarly significant effects, where applicable

To exercise any of these rights, please contact us using the details in Section 12.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe that your data protection rights have been infringed. We encourage you to contact us first so we can address your concerns.

10. Children’s Privacy Our website and services are not intended for children under 16, and we do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without appropriate consent, we will take steps to delete that information.

11. Security of Your Personal Data We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

12. Contact Us If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, you can contact us at:

Velvet District [Postal address] Email: [Contact email]

13. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. When we make changes, we will revise the "Last updated" date at the top of this page. Where appropriate, we will notify you of significant changes by email or by a notice on our website.

Please review this Privacy Policy periodically to stay informed about how we are protecting your information.