Vellut Leather Logo

Privacy Policy

Last Updated: June 2026

This Privacy Policy describes how Vellut Leather Ltd ("we", "us", "our") collects, uses, and protects your personal data. We are committed to complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The Data Controller responsible for your personal data is:

Vellut Leather Ltd
Company Registration No: 17080179
14 Blenheim Road, Gloucester, England, GL1 4ER
Email: support@vellutleather.com

2. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identity Data: First name, last name.
  • Contact Data: Email address, postal/billing address.
  • Transaction Data: Details about payments and purchases made through our website. Note: we do not store card details — all payment data is handled securely by Stripe.
  • Technical Data: IP address, browser type, operating system, time zone, and pages visited, collected automatically when you access our site.
  • Communication Data: Any messages or enquiries you send us.

3. Lawful Basis for Processing

Under UK GDPR Article 6, we process your personal data on the following lawful bases:

  • Contract (Article 6(1)(b)): To fulfil your purchase order, arrange delivery, and manage your account.
  • Legal Obligation (Article 6(1)(c)): To comply with applicable laws, such as maintaining financial records for HMRC.
  • Legitimate Interests (Article 6(1)(f)): To improve our website, prevent fraud, and manage our business operations, where such interests are not overridden by your rights.
  • Consent (Article 6(1)(a)): Where you have given explicit consent, such as subscribing to marketing emails. You may withdraw consent at any time.

4. How We Use Your Data

  • To process and fulfil your orders and payments.
  • To communicate with you about your order, including dispatch and delivery updates.
  • To respond to your enquiries and provide customer support.
  • To comply with legal and regulatory obligations.
  • To improve our website and user experience.
  • To send you marketing communications where you have given consent (you can unsubscribe at any time).

5. Third-Party Service Providers

We share your data with carefully selected third-party processors who act on our behalf, including:

  • Stripe: Payment processing. Stripe is PCI-DSS compliant and handles all card data securely.
  • Supabase: Secure cloud database for storing order and account information.
  • DHL / FedEx: International shipping partners who receive your delivery address to fulfil orders.

We do not sell your personal data to any third party.

6. Data Retention

We retain your personal data only for as long as necessary for the purposes it was collected:

  • Order and transaction records: Retained for 7 years to comply with HMRC financial record-keeping requirements.
  • Customer account data: Retained for as long as your account is active. You may request deletion at any time.
  • Marketing consents: Retained until you withdraw consent.
  • Technical/log data: Retained for up to 12 months.

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can request correction of any inaccurate or incomplete data.
  • Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data where there is no compelling reason for us to continue processing it.
  • Right to Restrict Processing: You can ask us to restrict how we process your data in certain circumstances.
  • Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
  • Right to Object: You can object to our processing of your data based on legitimate interests or for marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@vellutleather.com. We will respond within 30 days.

8. Cookies

Our website uses cookies — small text files stored on your device — to improve your experience and enable essential functionality (such as your shopping cart). We use the following types of cookies:

  • Strictly Necessary Cookies: Required for the website to function (e.g., cart session). These cannot be disabled.
  • Analytics Cookies: Used to understand how visitors interact with our website. We only set these with your consent.

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of our site. By continuing to use our website, you consent to our use of strictly necessary cookies.

9. International Data Transfers

Some of our service providers (including Stripe and Supabase) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place in accordance with UK GDPR, such as Standard Contractual Clauses (SCCs) or adequacy decisions.

10. How to Complain

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the UK's data protection supervisory authority:

Information Commissioner's Office (ICO)
Website: ico.org.uk
Helpline: 0303 123 1113

We would, however, appreciate the opportunity to address your concern directly before you contact the ICO.

11. Contact Us

For any privacy-related enquiries or to exercise your rights, please contact:

Vellut Leather Ltd
14 Blenheim Road, Gloucester, England, GL1 4ER
Email: support@vellutleather.com