Privacy Policy

Last updated: September 8, 2026

Vellarden (“Vellarden,” “we,” “us,” or “our”) operates the Vellarden online store and related online services, content, features, and purchasing functions (collectively, the “Services”).

Our online store is hosted by Shopify, which provides the ecommerce platform that enables us to offer our products and Services to you.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit or use the Services, place an order, create an account, subscribe to communications, contact us, or otherwise interact with Vellarden.

It also explains the privacy rights and choices that may be available to you depending on where you live.

1. Personal Information We Collect

Depending on how you interact with Vellarden and which features or services you use, we may collect the following categories of personal information.

Contact Information

This may include:

• Name;

• Email address;

• Telephone number;

• Billing address; and

• Shipping address.

Order and Commercial Information

This may include:

• Products viewed;

• Products purchased;

• Shopping-cart activity;

• Order history;

• Purchase amounts;

• Returns;

• Refunds;

• Discounts or promotions used; and

• Communications relating to an order.

Payment Information

Payments are processed through Shopify and authorized third-party payment providers.

Vellarden does not ordinarily receive or store your complete payment-card number.

We may receive limited payment-related information necessary to confirm a transaction, prevent fraud, process refunds, or maintain transaction records.

Account Information

If account functionality is available, we may collect information such as:

• Login details;

• Account preferences;

• Saved addresses;

• Order history; and

• Account activity.

Device and Internet Activity Information

When you use the Services, we and our service providers may automatically collect information such as:

• IP address;

• Browser type;

• Device type;

• Operating system;

• Device or cookie identifiers;

• Network information;

• General location derived from an IP address;

• Referring website or page;

• Pages viewed;

• Products viewed;

• Links clicked;

• Cart activity;

• Session information; and

• Other interactions with the Services.

Marketing and Preference Information

This may include:

• Email or marketing subscriptions;

• Advertising preferences;

• Cookie preferences;

• Responses to promotions;

• Interaction with marketing communications; and

• Privacy choices.

Communications and Customer-Service Information

We may collect information you provide when communicating with us, including:

• Emails;

• Customer-service requests;

• Product reviews;

• Feedback;

• Photographs;

• Videos; and

• Other information you voluntarily provide.

2. How We Collect Personal Information

We may collect personal information:

Directly From You

For example, when you:

• Place an order;

• Create or use an account;

• Enter shipping or billing information;

• Complete a form;

• Subscribe to marketing;

• Submit a review;

• Request a return or refund; or

• Contact customer support.

Automatically

We may automatically collect information through technologies such as:

• Cookies;

• Pixels;

• Tags;

• Log files;

• Software development kits; and

• Similar tracking technologies.

From Service Providers and Business Partners

We may receive information from providers that help us operate the Services, including:

• Shopify;

• Payment processors;

• Fraud-prevention providers;

• Analytics providers;

• Advertising and marketing platforms;

• Fulfillment providers;

• Warehouses;

• Delivery carriers;

• Returns providers; and

• Customer-support or technology providers.

3. How We Use Personal Information

We may use personal information for purposes including:

• Providing, maintaining, and operating the Services;

• Processing payments;

• Confirming and managing orders;

• Fulfilling purchases;

• Arranging shipping and delivery;

• Providing order tracking;

• Processing returns, refunds, and replacements;

• Providing customer support;

• Creating and maintaining customer accounts;

• Saving customer preferences;

• Communicating transactional or service-related messages;

• Sending order, delivery, account, security, or policy updates;

• Detecting, investigating, and preventing fraud, abuse, security incidents, and unlawful activity;

• Protecting our customers, business, Services, and systems;

• Understanding how customers use our Services;

• Analyzing and improving our website, products, advertising, and customer experience;

• Personalizing content and product recommendations;

• Measuring the effectiveness of advertising and marketing;

• Providing advertising where permitted by applicable law;

• Sending promotional communications in accordance with applicable law and your choices;

• Maintaining business, tax, accounting, and transaction records;

• Complying with legal, regulatory, contractual, and law-enforcement obligations;

• Establishing, exercising, or defending legal claims; and

• Enforcing our Terms of Service and other policies.

We seek to collect and use personal information only for appropriate purposes and as permitted by applicable law.

4. Legal Bases for Processing

Where applicable data-protection law requires us to identify a lawful basis for processing personal information, including under United Kingdom data-protection law, we may rely on the following bases.

Performance of a Contract

We may process information where necessary to enter into or perform a contract with you, including to:

• Process an order;

• Take payment;

• Deliver a purchase;

• Provide customer support;

• Process returns; and

• Issue refunds.

Legal Obligations

We may process information where necessary to comply with legal obligations, including tax, accounting, fraud-prevention, regulatory, or lawful governmental requirements.

Legitimate Interests

Where permitted by law, we may process personal information where necessary for our legitimate business interests, provided those interests are not overridden by your rights and interests.

These interests may include:

• Operating and improving our business;

• Protecting website and account security;

• Preventing fraud;

• Providing customer service;

• Understanding website performance;

• Maintaining business records; and

• Protecting or enforcing our legal rights.

Consent

Where required by law, we rely on your consent for certain activities, which may include:

• Marketing communications;

• Non-essential cookies;

• Certain advertising technologies; and

• Other processing activities requiring consent.

Where processing is based on consent, you may withdraw your consent at any time, subject to applicable law.

Withdrawal of consent does not affect processing that was lawful before consent was withdrawn.

5. Cookies and Similar Technologies

Vellarden, Shopify, and other service providers may use cookies and similar technologies to:

• Keep the website functioning;

• Maintain shopping carts and checkout functions;

• Remember preferences;

• Authenticate accounts;

• Prevent fraud;

• Understand website usage;

• Measure website performance;

• Analyze customer interactions;

• Personalize content;

• Measure marketing effectiveness; and

• Provide or evaluate advertising.

Some cookies are necessary for the Services to function.

Other cookies, including certain analytics or advertising cookies, may be optional or require consent depending on applicable law.

Where cookie-management controls are available on our website, you may use those controls to manage your preferences.

You may also manage cookies through your browser or device settings.

Disabling certain cookies may affect website functionality, including login, shopping-cart, personalization, or checkout features.

6. Advertising, Targeted Advertising, Sale, and Sharing

We may work with advertising, analytics, and marketing providers to understand how customers interact with Vellarden and to measure, personalize, or deliver advertising.

These activities may involve cookies, pixels, device identifiers, IP addresses, browsing activity, or similar information.

We do not sell personal information in exchange for money.

However, certain disclosures of personal information to advertising or marketing partners may be considered a “sale,” “sharing,” or use for “targeted advertising” under certain U.S. state privacy laws, even when no money is exchanged.

Where applicable law gives you the right to opt out of these activities, you may exercise that right through any “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” or similar privacy control made available on our website.

You may also contact us at:

lapeyrousebroberg222@hotmail.com

Where required by applicable law, we recognize qualifying browser-based opt-out preference signals, including Global Privacy Control (GPC).

Your opt-out may apply to the browser or device from which the signal or request is submitted unless applicable law requires broader application.

7. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to the following categories of recipients.

Shopify

Shopify hosts and supports our ecommerce store and processes information necessary to provide ecommerce and related services.

Payment Providers

We may disclose information to payment processors, banks, fraud-prevention providers, and other financial-service providers for payment authorization, transaction processing, refunds, and fraud prevention.

Fulfillment and Delivery Providers

We may provide necessary information to:

• Fulfillment providers;

• Warehouses;

• Shipping carriers;

• Logistics providers; and

• Returns providers.

This allows us to process, deliver, track, and return orders.

Technology and Business-Service Providers

We may use providers that support:

• Website functionality;

• Cloud infrastructure;

• Data storage;

• Customer support;

• Analytics;

• Security;

• Fraud prevention;

• Email delivery; and

• Business operations.

Advertising and Marketing Providers

Subject to applicable law and your privacy choices, we may disclose information to advertising, analytics, and marketing partners for measurement, attribution, personalization, or advertising purposes.

Professional Advisers

We may disclose information where reasonably necessary to professional advisers such as:

• Lawyers;

• Accountants;

• Auditors;

• Insurers; and

• Other professional consultants.

Government and Legal Authorities

We may disclose information to law-enforcement agencies, regulators, courts, government authorities, or other parties when:

• Required by applicable law;

• Required by valid legal process;

• Necessary to protect legal rights;

• Necessary to investigate fraud or unlawful conduct; or

• Necessary to protect the safety of customers or others.

Business Transactions

If Vellarden is involved in a merger, acquisition, financing, restructuring, sale of assets, transfer of business, or similar transaction, relevant personal information may be disclosed to prospective or actual purchasers, advisers, or successors, subject to applicable safeguards.

8. Shopify

Our store is powered by Shopify.

Shopify processes personal information in connection with providing ecommerce technology and services to Vellarden.

Depending on the circumstances and Shopify service involved, Shopify may process personal information on our behalf or process certain information for purposes described in Shopify's own privacy notices.

For example, when customers interact with Shopify-powered stores or use Shopify consumer services such as Shop or Shop Pay, Shopify may receive information about customer accounts, devices, purchases, browsing activity, preferences, and transactions.

Customers may have separate privacy rights and choices concerning information processed directly by Shopify.

9. International Transfers

Vellarden is based in the United Kingdom, while Shopify and other service providers may operate or process information in the United States, Canada, the United Kingdom, and other countries.

As a result, personal information may be transferred to, stored in, or processed in a country different from the country in which you live.

Privacy and data-protection laws in those countries may differ from those in your jurisdiction.

Where applicable law requires safeguards for an international transfer of personal information, we use or rely on legally permitted transfer mechanisms, which may include:

• Applicable adequacy regulations or decisions;

• Contractual safeguards;

• Approved data-transfer agreements or addenda; or

• Other mechanisms permitted by applicable data-protection law.

Where United Kingdom data-protection law applies, restricted international transfers will be handled using an applicable lawful transfer mechanism.

10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and as required or permitted by applicable law.

Retention periods may depend on factors including:

• The type of information;

• The purpose for which it was collected;

• Whether an account remains active;

• The duration of our customer relationship;

• Tax and accounting requirements;

• Fraud-prevention requirements;

• Legal or regulatory obligations;

• Warranty or return periods;

• Dispute resolution; and

• The need to establish, exercise, or defend legal claims.

When personal information is no longer reasonably required, we may delete, anonymize, aggregate, or securely dispose of it, subject to applicable legal obligations.

11. Security

We use reasonable administrative, organizational, and technical safeguards designed to protect personal information against:

• Unauthorized access;

• Unauthorized disclosure;

• Loss;

• Misuse;

• Alteration; and

• Destruction.

However, no online transmission, network, website, database, or electronic storage system can be guaranteed to be completely secure.

You are responsible for protecting your account credentials and should not share passwords or authentication information with unauthorized persons.

If you believe your account, payment, or personal information has been compromised in connection with Vellarden, please contact us promptly.

12. Your Privacy Rights

Depending on where you live and applicable law, you may have some or all of the following privacy rights:

• The right to know whether we process your personal information;

• The right to request information about personal information we collect, use, or disclose;

• The right to access personal information;

• The right to obtain a copy of certain personal information;

• The right to correct inaccurate personal information;

• The right to request deletion of personal information;

• The right to request restriction of certain processing;

• The right to object to certain processing;

• The right to data portability where applicable;

• The right to withdraw consent where processing is based on consent;

• The right to opt out of marketing communications;

• The right to opt out of targeted advertising where applicable;

• The right to opt out of the sale or sharing of personal information where applicable;

• The right to limit certain uses or disclosures of sensitive personal information where applicable;

• Rights relating to certain automated decision-making or profiling where applicable;

• The right not to receive unlawful discriminatory treatment for exercising a privacy right; and

• The right to appeal certain decisions concerning a privacy request where applicable.

These rights are not absolute and may be subject to legal exceptions.

For example, we may need to retain certain information to complete a transaction, maintain legally required records, detect fraud, establish legal claims, or comply with another legal obligation.

13. Privacy Rights for United States Residents

Residents of certain U.S. states may have additional rights under applicable state privacy laws.

Depending on the state and whether the applicable law applies to Vellarden, these rights may include:

• Accessing personal information;

• Confirming whether personal information is being processed;

• Correcting inaccurate personal information;

• Deleting personal information;

• Obtaining a portable copy of personal information;

• Opting out of targeted advertising;

• Opting out of the sale of personal information;

• Opting out of certain sharing of personal information;

• Limiting certain uses of sensitive personal information;

• Opting out of certain profiling or automated decision-making;

• Receiving information about categories of information collected or disclosed;

• Receiving information about categories of third parties to whom information has been disclosed;

• Appealing a denied privacy request where applicable; and

• Exercising privacy rights without unlawful discrimination.

California Residents

Where the California Consumer Privacy Act, as amended (“CCPA”), applies, California residents may have rights including:

• The right to know about personal information collected, used, disclosed, sold, or shared;

• The right to request access to certain personal information;

• The right to request deletion, subject to exceptions;

• The right to correct inaccurate personal information;

• The right to opt out of the sale or sharing of personal information;

• The right to limit certain uses and disclosures of sensitive personal information where applicable; and

• The right not to receive discriminatory treatment for exercising applicable privacy rights.

Where required by the CCPA, qualifying Global Privacy Control signals will be treated as an opt-out request for the browser or device sending the signal.

14. How to Exercise Your Privacy Rights

To submit a privacy request, contact:

Email: lapeyrousebroberg222@hotmail.com

Please use “Privacy Request” in the subject line where possible.

Include sufficient information for us to understand and process your request.

Depending on the request and applicable law, we may need to verify your identity before fulfilling the request.

Verification may require us to match information you provide with information already associated with your account, transaction, or customer record.

We will request only information reasonably necessary to verify and process the request.

Where permitted by law, an authorized agent may submit a request on your behalf.

We may require reasonable evidence that the agent has authority to act for you and may also require identity verification.

We will respond within the time required by applicable law.

If we deny a request in whole or in part, we will provide any explanation and appeal information required by applicable law.

We will not unlawfully discriminate against you for exercising an applicable privacy right.

15. Marketing Communications

If you subscribe to marketing emails, you may unsubscribe at any time using the unsubscribe option included in the marketing message.

You may also contact us to request that marketing communications stop.

Opting out of marketing does not prevent us from sending necessary non-promotional communications, such as:

• Order confirmations;

• Shipping notifications;

• Refund notifications;

• Account communications;

• Security notices; and

• Customer-service responses.

16. Children's Privacy

The Services are intended for a general adult shopping audience and are not directed to children under 13 years of age.

We do not knowingly collect personal information directly from children under 13 in circumstances prohibited by applicable law.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can review the matter and take appropriate action.

Where applicable law imposes additional requirements concerning minors, including requirements concerning the sale, sharing, targeted advertising, or consent relating to minors' personal information, we will comply with those requirements.

We do not knowingly sell or share the personal information of individuals under 16 years of age in circumstances where applicable law requires affirmative authorization.

17. Third-Party Websites and Services

The Services may contain links to websites, platforms, applications, or services operated by independent third parties.

Vellarden does not control the privacy, security, or data practices of independent third parties.

Information you provide directly to a third party is governed by that third party's privacy policy and terms.

We encourage you to review the applicable privacy information before providing personal information to an independent third party.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to:

• Our business operations;

• Our Services;

• Technology;

• Privacy practices;

• Service providers;

• Legal requirements; or

• Regulatory requirements.

When we update this Policy, we will post the revised version and update the “Last updated” date.

Where applicable law requires additional notice or consent for a material change, we will provide that notice or obtain that consent as required.

19. Complaints

If you have a question or concern regarding how Vellarden handles personal information, please contact us first so that we can review the matter.

Where United Kingdom data-protection law applies, you may also have the right to make a complaint to the Information Commissioner's Office (ICO).

Residents of the United States may also have the right to contact an applicable state attorney general, privacy regulator, or other competent authority where provided by applicable law.

Contacting us first does not prevent you from exercising any right to contact a regulator or other authority.

20. Contact Us

Vellarden is responsible for personal information under its control where Vellarden acts as the applicable business or data controller.

For privacy questions, complaints, or requests, contact:

Privacy Contact — Vellarden

Email: lapeyrousebroberg222@hotmail.com
Phone: +44 7956 355365
Business Address:
4 The Green
Over Norton
OX7 5PT
United Kingdom