Privacy policy
Privacy Policy
Last updated: 13 July 2026
VelvetRow ("we", "us" or "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store and protect your personal data when you visit our store or make a purchase. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. For the purposes of this legislation, VelvetRow is the data controller.
Information we collect
We may collect and process the following information about you: your name, billing and delivery addresses, email address, telephone number, and payment details; details of the orders you place and the products you view; and technical information such as your IP address, browser type, device information and browsing activity collected through cookies and similar technologies.
We do not store full card details on our systems. Payments are processed securely by our payment providers.
How we use your information
We use your personal data to process and fulfil your orders, take payment and arrange delivery; to communicate with you about your order and respond to enquiries; to manage returns, refunds and customer support; to send you marketing communications where you have consented to receive them; to improve our website, products and services; and to comply with our legal and regulatory obligations.
Lawful basis for processing
We rely on the following lawful bases: performance of a contract (to process and deliver your order); your consent (for marketing communications, which you may withdraw at any time); our legitimate interests (to run and improve our business and prevent fraud); and compliance with a legal obligation (such as tax and accounting requirements).
Sharing your information
We only share your personal data where necessary, including with delivery and logistics partners to fulfil your order, payment providers to process transactions, and service providers who support our website and operations. We may also disclose your information where required to do so by law. We do not sell your personal data to third parties.
Where any of our providers are located outside the United Kingdom, we take steps to ensure your data is protected by appropriate safeguards as required by UK data protection law.
Cookies
Our website uses cookies to distinguish you from other users, remember your preferences, keep your basket working and help us analyse how the site is used. You can manage or disable cookies through your browser settings, although some parts of the site may not function properly as a result.
Data retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements. Order and transaction records are typically retained for at least six years to comply with UK tax law.
Your rights
Under UK data protection law, you have the right to access the personal data we hold about you; to request correction of inaccurate data; to request erasure of your data; to restrict or object to processing; to data portability; and to withdraw consent at any time. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority, at ico.org.uk.
To exercise any of your rights, please contact us at sac@velvetrow.com.
Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
Contact
For any questions about this Privacy Policy or how we handle your data, please contact us at sac@velvetrow.com.