Privacy Policy

Last updated: 17 March 2025

1. Controller and contact details

The data controller responsible for your personal data in connection with this website is:

Velmorinzol
5 Henry St, North City, Dublin, D01 AP04, Ireland
Email: info@velmorinzol.world
Phone: +353 1 582 8510

If you have questions about this Privacy Policy or about how we process your data, you may contact us using the details above.

2. Legal basis and applicable law

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Data Protection Act 2018 (Ireland), as well as applicable Irish and European Union law. Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal.

3. Purposes of processing and categories of data

We collect and process personal data only for specified, explicit and legitimate purposes. The main purposes and associated data categories are set out below.

3.1 Order and customer management

Purpose: To process and fulfil your orders, communicate with you about your order, and manage the customer relationship.

Data processed: Name, email address, telephone number (if provided), delivery address, billing details if applicable, and any message or comment you send in connection with an order.

Legal basis: Performance of a contract (Art. 6(1)(b) GDPR) and, where applicable, our legitimate interest in providing customer support (Art. 6(1)(f) GDPR).

Retention: We retain order and customer data for the duration of the contractual relationship and for a period of up to seven (7) years after the last transaction for legal, tax and accounting obligations (e.g. under Irish revenue and company law).

3.2 Contact and enquiries

Purpose: To respond to your contact requests, questions and feedback sent via the website or email.

Data processed: Name, email address, telephone number (if provided), and the content of your message.

Legal basis: Legitimate interest in answering enquiries (Art. 6(1)(f) GDPR) and, where relevant, steps prior to entering into a contract (Art. 6(1)(b) GDPR).

Retention: We retain contact and enquiry data for as long as necessary to resolve the enquiry and for up to three (3) years thereafter for documentation and potential follow-up, unless longer retention is required by law.

3.3 Consent and marketing

Purpose: Where you have given consent, to send you information about our products, offers and news by email or other electronic means.

Data processed: Name, email address, and preferences regarding communication and marketing.

Legal basis: Your consent (Art. 6(1)(a) GDPR).

Retention: Until you withdraw consent or object to marketing, and thereafter only as needed to record your preference (e.g. suppression list) for up to three (3) years to avoid sending further marketing.

3.4 Website operation and security

Purpose: To operate the website, ensure security, prevent abuse, and resolve technical issues.

Data processed: IP address, browser type and version, device information, date and time of access, pages visited, referrer URL, and similar technical and usage data. We may use strictly necessary cookies and similar technologies for this purpose.

Legal basis: Legitimate interest in the secure and proper functioning of the website (Art. 6(1)(f) GDPR) and, where applicable, legal obligation (Art. 6(1)(c) GDPR).

Retention: Log and technical data are generally retained for a period of up to twelve (12) months, unless a longer period is required for security investigations or legal obligations.

3.5 Analytics and improvement

Purpose: To understand how the website is used and to improve content, usability and performance. We use analytics only where you have consented to non-essential cookies or where we use anonymised or aggregated data.

Data processed: Anonymised or pseudonymised usage data, such as pages viewed, session duration, and general demographic or interest categories where made available in accordance with your cookie choices.

Legal basis: Your consent (Art. 6(1)(a) GDPR) for non-essential analytics cookies.

Retention: As specified in our Cookie Policy, typically up to twenty-six (26) months for analytics data, unless a shorter period is applied.

4. Recipients and international transfers

We may share your personal data with:

• Service providers who assist us with hosting, payment processing, shipping, email delivery, and IT support, acting as processors on our instructions and under appropriate contracts.
• Professional advisers (e.g. lawyers, accountants) where necessary for legal or compliance purposes.
• Public authorities when required by law or to protect our rights and safety.

Where we transfer data outside the European Economic Area (EEA), we ensure an adequate level of protection by using standard contractual clauses approved by the European Commission, or other mechanisms permitted under GDPR Chapter V. You may request details of the safeguards we use for a specific transfer.

5. Your rights under GDPR

Subject to applicable conditions and limitations under Irish and EU law, you have the following rights:

• Right of access (Art. 15 GDPR): You may obtain confirmation as to whether we process your personal data and, where that is the case, access to the data and certain information about the processing.
• Right to rectification (Art. 16 GDPR): You may request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17 GDPR): You may request deletion of your personal data in cases such as where the data is no longer necessary, you withdraw consent, or you object and there are no overriding legitimate grounds.
• Right to restriction of processing (Art. 18 GDPR): You may request that we limit the processing of your data in certain circumstances (e.g. while accuracy is being verified).
• Right to data portability (Art. 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may receive your data in a structured, commonly used and machine-readable format and, where technically feasible, have it transmitted to another controller.
• Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests, including profiling. You may also object at any time to processing for direct marketing.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us using the contact details in section 1. We will respond within one month, subject to any extension permitted by law. You also have the right to lodge a complaint with a supervisory authority. In Ireland, the competent authority is the Data Protection Commission (DPC): www.dataprotection.ie.

6. Security measures

We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including:

• Use of HTTPS (TLS/SSL) for all pages to encrypt data in transit.
• Restriction of access to personal data to authorised personnel on a need-to-know basis.
• Secure storage and handling of data, including where applicable encryption at rest and secure backup procedures.
• Regular review and updating of security practices and, where relevant, contracts with processors that require compliance with data protection and security standards.

Despite these measures, no transmission or storage over the internet can be guaranteed to be completely secure. We encourage you to use strong passwords and to keep your login details confidential where applicable.

7. Children

Our website and services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data relating to a child, please contact us and we will take steps to delete it.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the website. The updated version will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically. Where changes are material, we may notify you by email or by a notice on the website where appropriate.

9. Additional information

For information about cookies and similar technologies used on this website, please see our Cookie Policy. For terms governing the use of our website and services, please see our Terms of Service.