Privacy Policy

Velastra – Privacy Policy

Last Updated: 8 September 2025

1. Controller and Contact Details

Velastra values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your information.

Controller:
Velastra
Address: 58 Larch Crescent, UB4 9DP, United Kingdom
Email: aaronbansi@outlook.com

For security reasons, our website uses SSL/TLS encryption to protect the transmission of personal and confidential content (e.g., orders or inquiries). Encrypted connections are indicated by “https://” and a lock icon in your browser.

2. Data Collected When Visiting Our Website

When visiting our website without registering, we collect data automatically via server logs, including:

  • Pages visited

  • Date and time of access

  • Data volume transferred

  • Referring URL

  • Browser type and version

  • Operating system

  • IP address (anonymised where applicable)

Legal basis: Article 6(1)(f) GDPR — legitimate interest in maintaining and improving website functionality. Data are not shared unless required for investigation of unlawful activity.

3. Cookies

We use cookies to enhance website functionality and provide a better user experience:

  • Session cookies: deleted when your browser closes.

  • Persistent cookies: remain for future visits.

Cookies may track browser type, IP address, and location. Some cookies support order processing (e.g., remembering items in your cart).

Legal basis: Article 6(1)(b) GDPR (contract performance) and Article 6(1)(f) GDPR (legitimate interest in site performance).

You can manage cookies through your browser settings; disabling cookies may limit website functionality.

4. Contacting Us

When you contact us (via email or contact form), we collect personal data to respond to your inquiry and manage technical administration.

Legal basis: Article 6(1)(f) GDPR (legitimate interest) or Article 6(1)(b) GDPR (contract fulfilment if inquiry relates to an order). Data are deleted once your request is resolved, unless statutory retention duties apply.

5. Account Creation and Contract Fulfilment

We process the data you provide when creating a customer account or placing an order.

You may delete your account at any time by contacting us at aaronbansi@outlook.com. After contract completion or account deletion, your data are retained only for statutory tax and commercial retention periods.

6. Direct Marketing

6.1 Newsletter Subscription

If you subscribe to our newsletter, we send updates about our products and offers. Only your email address is required; additional data are optional. Subscription uses double opt-in.

You may unsubscribe at any time via the newsletter link or by emailing aaronbansi@outlook.com.

6.2 Offers to Existing Customers

We may send promotional emails regarding similar products based on prior purchases.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in direct marketing. You can object at any time.

7. Order Handling

Personal data are shared with shipping providers for delivery and with payment processors for payment.

Payment Providers:

  • PayPal: PayPal (Europe) S.à r.l. et Cie, 22-24 Boulevard Royal, L-2449 Luxembourg

  • SOFORT/Klarna: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

8. Review Reminders

With your consent, we may send a one-time email requesting a product review. Consent can be withdrawn at any time.

9. Social Media Plugins

Social media buttons (Facebook, Instagram) use the Shariff solution. No data are transmitted until you click the button. Providers are certified under the EU–US Privacy Shield.

10. Online Marketing

  • Google DoubleClick: Cookies are used to display relevant ads.

  • Google AdWords Conversion Tracking: Measures ad performance.

Legal basis: Article 6(1)(f) GDPR — legitimate interest in marketing. You can disable cookies via browser settings.

11. Web Analytics

We use Google Analytics with IP anonymization (“anonymizeIp()”) to analyze website usage.

Legal basis: Article 6(1)(f) GDPR — legitimate interest. Opt-out options are available via Google’s tools.

12. Retargeting / Remarketing

  • Facebook Pixel: With your consent, used to measure ad effectiveness.

  • Google AdWords Remarketing: Interest-based ads using cookies.

You may opt out via browser or platform settings.

13. Rights of the Data Subject

Under GDPR, you have the right to:

  • Access your data (Art. 15)

  • Rectification (Art. 16)

  • Erasure (Art. 17)

  • Restriction (Art. 18)

  • Data portability (Art. 20)

  • Withdraw consent (Art. 7(3))

  • Lodge a complaint with a supervisory authority (Art. 77)

  • Object to processing (Art. 21), including direct marketing

14. Storage Period

Data are stored only as long as necessary for contract fulfilment, statutory retention, or legitimate interest. Afterward, data are routinely deleted.

15. Contact Information

For questions about privacy or to exercise your rights, contact:
Email: aaronbansi@outlook.com
Address: 58 Larch Crescent, UB4 9DP, United Kingdom