Privacy Policy
Last updated: 23 June 2026
1. Who We Are
Veloura ("we", "us", "our") operates the website veloura.ug. We are the data controller responsible for your personal data.
Contact: shop@veloura.ug
2. What Data We Collect
We collect and process the following categories of personal data:
- Identity data — your first and last name.
- Contact data — email address, phone number, delivery address.
- Transaction data — details of products you have purchased and payment reference numbers. We do not store full card numbers.
- Technical data — IP address, browser type, device identifiers, pages visited, time spent on site (collected via cookies and analytics tools).
- Account data — username, encrypted password, saved preferences.
- Communications data — messages you send us via email, WhatsApp, or our contact form.
- Marketing data — your preferences for receiving marketing communications from us.
3. How We Use Your Data
We use your personal data for the following purposes, and only where we have a valid legal basis to do so:
| Purpose | Legal Basis |
|---|---|
| Process and fulfil your orders | Contractual necessity |
| Send order confirmations and shipping updates | Contractual necessity |
| Manage your account | Contractual necessity |
| Process returns and refunds | Contractual necessity |
| Respond to enquiries and complaints | Legitimate interests |
| Send marketing emails (with your consent) | Consent |
| Improve our website and service | Legitimate interests |
| Detect and prevent fraud | Legitimate interests / Legal obligation |
| Comply with legal obligations | Legal obligation |
4. Cookies
Our website uses cookies to improve your experience. Cookies are small text files stored on your device. We use:
- Strictly necessary cookies — required for the website to function (e.g., session, currency preference, stock location preference).
- Analytics cookies — help us understand how visitors use the website so we can improve it.
- Preference cookies — remember your settings such as currency and language preferences.
You can control cookie settings in your browser. Disabling strictly necessary cookies may affect website functionality.
5. Who We Share Your Data With
We do not sell your personal data. We may share it with trusted third parties only as necessary:
- Payment processors — PayPal, Stripe and card networks process your payment. We only receive a transaction reference.
- Delivery carriers — Our delivery partners receive your name and delivery address to fulfil your order.
- IT service providers — hosting, email, and analytics providers who process data on our behalf under strict data processing agreements.
- Legal authorities — where required by law or to prevent fraud.
6. International Transfers
Some of our service providers may be located outside the UK. Where data is transferred internationally, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) in accordance with UK GDPR.
7. Data Retention
We retain your personal data only for as long as necessary:
- Order data is retained for 7 years for accounting and legal compliance purposes.
- Account data is retained while your account is active and for up to 2 years after your last login.
- Marketing consent records are retained until you withdraw consent.
- Customer service communications are retained for 2 years.
8. Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you.
- Right to rectification — ask us to correct inaccurate data.
- Right to erasure — ask us to delete your data (subject to legal obligations).
- Right to restrict processing — ask us to limit how we use your data.
- Right to data portability — receive your data in a structured, machine-readable format.
- Right to object — object to processing based on legitimate interests or for marketing.
- Right to withdraw consent — withdraw consent for marketing at any time.
To exercise any of these rights, contact us at shop@veloura.ug. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include SSL/TLS encryption, hashed passwords, and restricted staff access.
10. Children's Privacy
Our website is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The most recent version will always be available on this page with the "Last updated" date. Continued use of our website after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us: