Privacy policy
Information We Collect
- Contact details. Name, email address, delivery address, billing address and phone number where you provide it.
- Order information. What you ordered, order value, order history and delivery status.
- Payment information. Handled by our payment provider. We receive confirmation that a payment succeeded and the last four digits of the card. We do not receive or store full card numbers.
- Device and browsing data. IP address, browser type, device type, pages viewed and referring site, collected through cookies and similar technologies.
How We Use Your Information
We use your information to take and fulfil orders, process payments, send order and delivery updates, handle returns and refunds, answer support enquiries, detect and prevent fraudulent orders, and meet our legal and accounting obligations. Where you have opted in, we also use your email address to send marketing messages. You can withdraw that consent at any time using the unsubscribe link in any marketing email.
Third-Party Sharing
We share personal information with these categories of third party, and only to the extent each needs it:
- Payment processors, to authorise and settle payments and to process refunds.
- Shipping carriers, to deliver orders and provide tracking.
- Our ecommerce platform and hosting provider, which stores order and account data so the store can operate.
- Analytics providers, to understand how the site is used.
- Law enforcement or regulators, where we are legally required to disclose.
We do not sell your personal information.
Cookies & Tracking Technologies
The site uses cookies to keep your cart contents between pages, keep you signed in, remember your preferences, and measure how the site is used. Some cookies are necessary for the store to function and cannot be switched off. Others are optional and can be managed through the cookie banner or your browser settings. Blocking necessary cookies will stop checkout from working.
Data Security
Data is transmitted over encrypted connections using TLS. Payment card data is handled by a PCI DSS compliant payment provider and does not reach our own systems. Access to order and customer data is limited to the people who need it to run the store. No system can be guaranteed completely secure, and we do not claim otherwise.
Data Retention
Order records, including contact and delivery details, are kept for as long as needed to fulfil the order, handle returns and meet tax and accounting requirements. Marketing contact details are kept until you unsubscribe. Analytics data is kept in aggregated form. When data is no longer needed for these purposes, it is deleted.
Children's Privacy
The store is intended for adults. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we delete it. A parent or guardian who believes their child has given us personal information can email us and we will remove it.
Changes to This Policy
We update this policy when our data practices change or when the law requires it. The current version is always on this page with the date it last changed. Where a change materially affects how we handle your information, we will say so on the site.
Categories of Personal Information Collected
Under California law, we have collected the following categories in the past 12 months:
- Identifiers. Name, postal address, email address, phone number, IP address.
- Customer records. Billing and delivery address, payment confirmation details.
- Commercial information. Products purchased, order history, returns.
- Internet or network activity. Browsing on our site, pages viewed, referring site.
- Geolocation data. Approximate location derived from IP address.
- Inferences. Preferences drawn from browsing and order history, used to improve what we show you.
We do not collect biometric information, precise geolocation, or the categories of sensitive personal information defined under the CCPA.
Sale or Sharing of Personal Information
We do not sell personal information, and we do not share it for cross-context behavioural advertising as those terms are defined by the CCPA and CPRA. Because we do not sell or share personal information in that sense, no opt-out mechanism is required. If this changes, we will update this policy and provide an opt-out before the change takes effect.
Your Privacy Rights (US)
If you are a resident of California or another state with comparable privacy law, you have the right to:
- Know what personal information we have collected about you and how it is used and shared.
- Delete the personal information we hold about you, subject to legal exceptions such as completing an order or meeting tax obligations.
- Correct inaccurate personal information we hold about you.
- Opt out of the sale or sharing of personal information, where a business carries this out.
- Non-discrimination, meaning we will not deny you service, charge a different price, or provide a lower quality of service because you exercised any of these rights.
To exercise a right, email us using the address in the contact block below. We will verify your identity by matching the details you give us against our order records before acting on the request.
Do Not Sell or Share My Personal Information
We do not sell or share personal information as those terms are defined under the CCPA and CPRA, so there is nothing to opt out of. If you still wish to submit a request, email us and we will confirm our position in writing.
State-Specific Disclosures
Residents of Virginia, Colorado, Connecticut, Utah and other states with comprehensive privacy laws have rights comparable to those listed above, including access, deletion, correction and opt-out rights, and the right to appeal a refused request. To make a request or appeal a decision, email us using the contact details below.
Contact Information
- Business Name : Veilto
- Email : support@veilto.shop
- Telephone : +1 (860) 287-6808
- Business Address : 22 Walker St, Lenox, MA 01240, United States
- Customer Service Hours: Monday to Friday, 9:00 AM to 6:00 PM
