Privacy policy

Last Updated: November 27, 2025

Velve Chocolate ("Velve Chocolate," "we," "us," or "our") values your privacy and is committed to safeguarding your personal information. This Privacy Policy explains how we collect, use, disclose, and protect information when you visit our Shopify-powered website, make a purchase, create an account, or otherwise interact with us.

This Privacy Policy is designed to comply with major global privacy laws, including:

• GDPR (European Union & UK)

• CCPA/CPRA (California)

• PIPEDA (Canada)

• Other state, federal, and international privacy laws to the fullest reasonable extent

By using our website, you consent to the collection and use of your information as outlined in this Policy.

1. Information We Collect

We collect personal and non‑personal information in the following categories:

A. Information You Provide Directly

• Name

• Billing and shipping address

• Email address

• Phone number

• Payment information (processed securely through Shopify; we do not store full payment details)

• Account credentials

• Order history and preferences

• Communications sent to customer service

B. Automatic Device & Usage Data

When you browse our site, Shopify automatically collects:

• IP address

• Browser type and version

• Time zone and locale

• Cookie data

• Pages visited, time spent, referring URLs

• Device identifiers

C. Information from Third Parties

• Payment processors

• Shipping carriers

• Marketing platforms and social media (if you engage with our ads or accounts)

• Fraud-prevention and analytics tools

2. How We Use Your Information

We use your information for purposes including:

• Processing and fulfilling orders

• Verifying identity and preventing fraud

• Providing customer support

• Personalizing your shopping experience

• Sending order updates and marketing communications (with consent when required)

• Improving website functionality, analytics, and performance

• Complying with legal and regulatory requirements

We do not sell your personal information.

3. Legal Bases for Processing (GDPR)

For residents of the EEA/UK, we rely on the following legal bases:

• Contract performance (fulfilling your order)

• Legitimate interests (fraud prevention, analytics, improving services)

• Legal compliance

• Consent (email marketing, cookies when required)

4. Sharing Your Information

We share information only when necessary with trusted partners:

• Shopify (store platform & data processor)

• Payment processors (Stripe, PayPal, Shopify Payments)

• Fulfillment & shipping carriers

• Marketing and analytics tools

• Professional service providers (IT, legal, fraud-detection)

Information may be shared if legally required, such as to comply with court orders or government requests.

We never sell personal data.

5. Cookies & Tracking Technologies

We use cookies, web beacons, pixels, tags, and similar technologies for:

• Website functionality

• Shopping cart retention

• Analytics and performance

• Fraud detection

• Advertising and retargeting

You may adjust cookie settings through your browser or our cookie banner when available.

6. Data Retention

We retain personal information only as long as reasonably necessary for:

• Order fulfillment

• Legal compliance

• Accounting and audit purposes

• Fraud prevention

You may request deletion at any time.

7. Data Transfers

Your information may be transferred, stored, or processed in the United States or other jurisdictions. When required, we implement:

• Standard Contractual Clauses (SCCs)

• Data protection agreements

• Security safeguards consistent with GDPR

8. Data Security

We employ technical, physical, and administrative safeguards including:

• SSL encryption

• Secure payment processing

• Access controls and authentication

• Regular monitoring and system updates

No digital system is 100% secure, but we take every reasonable step to protect your information.

9. Your Rights (GDPR, CCPA/CPRA & Others)

Depending on your jurisdiction, you may have the right to:

• Access your data

• Correct inaccurate data

• Request deletion

• Restrict or object to processing

• Receive a portable copy

• Opt out of targeted advertising or sale/sharing of data

• Opt out of automated decision‑making and profiling

To exercise your rights, contact: support@velvechocolate.com.

10. Children’s Privacy

Our site is not intended for children under 13 (or the age of majority in your region). We do not knowingly collect children’s data. If you believe information was collected in error, contact us for immediate removal.

11. Changes to This Privacy Policy

We may update this Policy at any time. Updated versions will be posted on our website with a revised "Last Updated" date.

12. Contact Information

For any privacy-related questions, contact:
Email: support@velvechocolate.com