Privacy Policy

How VAELorine collects, uses, shares and protects personal information when you visit vaelorine.shop or place an order - plus your rights under GDPR and the CCPA/CPRA.

Last updated: 21 September 2026

[COMPANY NAME] supplies footwear through vaelorine.shop. This notice describes how we handle personal information collected through this store. It is written to be read, not skimmed – if anything here is unclear, write to [PRIVACY EMAIL] and we will explain it.

1. Who we are

VAELorine is an online footwear store operated by [COMPANY NAME], registered at [REGISTERED ADDRESS] (“we”, “us”, “our”). This policy explains what personal information we collect when you visit vaelorine.shop or place an order, why we collect it, who we share it with and what you can do about it.

For any question about this policy or your data, write to [PRIVACY EMAIL]. We are the data controller for the information described here.

2. What we collect

We collect the following categories of information:

  • **Order and account information** – your name, billing and shipping address, email address, telephone number, order history, and the username and email attached to your account if you create one.
  • **Payment information** – we do not receive or store your full card number. Payments are handled by our payment provider, which receives your card details directly in order to authorise the transaction. We receive only the outcome of that transaction and a reference number.
  • **Technical information** – IP address, browser and device type, operating system, the pages you view, how you arrived at the store and a session identifier. This is collected automatically when your browser requests a page.
  • **Communications** – the content of messages you send us through the contact form or by email, and our replies.
  • **Marketing preferences** – whether you have chosen to receive our emails.

We do not collect special-category information such as health data or biometric data, and we do not ask for it.

3. How we use your information

  • **To fulfil your order** – taking payment, packing, shipping and delivering your purchase, and handling returns or exchanges.
  • **To communicate with you** – sending order confirmations, dispatch and delivery updates, and answering your questions.
  • **To run and improve the store** – understanding which products and pages are useful, diagnosing faults and measuring site performance.
  • **To meet our legal obligations** – keeping tax, accounting and consumer-protection records, and preventing fraud.
  • **To send marketing, only with your consent** – occasional product news and offers. Every such email carries a one-click unsubscribe link, and withdrawing consent never affects your order.

4. Our legal bases for processing

If you are in the European Economic Area, the United Kingdom or Switzerland, we must have a lawful basis for each use of your information:

  • **Performance of a contract** – processing your order, delivering it and handling returns. Without this we cannot sell to you.
  • **Legal obligation** – retaining invoices and tax records.
  • **Legitimate interests** – preventing fraud and abuse, keeping the store secure, and aggregate analytics that do not identify you. We balance these against your rights.
  • **Consent** – marketing emails and any non-essential cookies. You may withdraw consent at any time.

5. Cookies and similar technologies

A cookie is a small file your browser stores so a site can remember you between page loads. We set the following:

  • **Cart and session** (`woocommerce_cart_hash`, `woocommerce_items_in_cart`, `wp_woocommerce_session_*`) – these remember what is in your basket and keep your session together. The store cannot process an order without them.
  • **Login** (`wordpress_logged_in_*`, `wordpress_sec_*`) – set only if you sign in to your account, so the store recognises you on later pages.
  • **Analytics** – if enabled, these help us count visits and see which pages are used. They are set only after you consent to non-essential cookies.

You can block or delete cookies through your browser settings. If you block the cart and session cookies, checkout will not work. Blocking analytics cookies has no effect on your ability to order.

Where consent is required for non-essential cookies, we ask for it before setting them, and you can change your choice at any time by clearing the site’s cookies in your browser.

6. Who we share your information with

We do not sell your personal information, and we do not share it for cross-context behavioural advertising.

We share information only with service providers who process it on our behalf and under contract, and only to the extent each one needs it:

  • payment processors, to take and refund payment and to screen orders for fraud;
  • shipping carriers and fulfilment partners, to deliver your order and provide tracking;
  • email and messaging providers, to send order notifications and, with your consent, marketing;
  • hosting and content delivery providers, which store the store and its database;
  • analytics providers, where enabled, to produce aggregate reporting.

We may also disclose information where we are legally required to do so, or where it is necessary to establish, exercise or defend legal claims.

7. How long we keep it

  • **Order and invoice records** – seven years, because tax and accounting rules require it.
  • **Account information** – for as long as your account exists, then deleted on request. Some order records are retained as above.
  • **Contact form messages** – up to 24 months after our last exchange.
  • **Analytics data** – up to 26 months, in aggregate or pseudonymised form.

8. Your rights

Depending on where you live, you may have the following rights:

  • **Access** – ask for a copy of the personal information we hold about you.
  • **Correction** – ask us to fix information that is inaccurate or incomplete.
  • **Deletion** – ask us to delete your information, subject to records we must keep by law.
  • **Portability** – receive the information you gave us in a structured, machine-readable format.
  • **Objection and restriction** – object to processing based on legitimate interests, or ask us to restrict it.
  • **Withdraw consent** – at any time, where processing is based on consent.

If you are in California, you also have the right to know what categories of personal information we collect and disclose, to request deletion or correction, to opt out of sale or sharing, and not to be discriminated against for exercising your rights. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.

To exercise any right, email [PRIVACY EMAIL]. We will respond within 30 days. We may ask you to confirm your identity first, which we do by matching the email address on your order.

9. International transfers

Our store and our service providers may store or process information on servers located outside your country, including outside the European Economic Area and the United Kingdom. Where we transfer personal information out of those areas, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, together with technical measures including encryption in transit.

10. How we protect your information

We protect your information with encryption in transit (TLS), restricted administrative access, and access controls on the store’s database and backups. Payment card details never reach our servers.

No online system is perfectly secure. We cannot guarantee absolute security, but we will notify you and the relevant authority without undue delay if a breach affects your rights.

11. Children

This store sells adult footwear and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us their information, contact [PRIVACY EMAIL] and we will delete it.

12. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. The date at the top of this page always shows the current version. Where a change materially affects how we use your information, we will announce it on the store and, for account holders, by email.

13. How to contact us

[COMPANY NAME]

[REGISTERED ADDRESS]

Privacy enquiries: [PRIVACY EMAIL]

Customer support: [SUPPORT EMAIL]

If you are in the EEA or the UK and you are not satisfied with our response, you have the right to complain to your local data protection authority.