Privacy policy

Who we are

The Velora online store is operated by Donghai County Kunluo Jewelry Store (东海县坤罗珠宝商行), Yudaihe Road, Niushan Subdistrict, Donghai County, Lianyungang, Jiangsu, China (江苏省连云港市东海县牛山街道玉带河路). We are the controller of the personal information described here. Contact us about privacy at lwq9997@gmail.com.

Information we collect

We collect only what we need to run the store:

• Orders: email address, name, shipping address, phone number, items purchased, amounts, payment method type, payment provider references, and order and delivery status.
• Accounts: email address, first and last name, a securely hashed password if you set one, and your Google account ID if you sign in with Google.
• Returns and support: the reason and notes you give us in after-sales requests and emails.
• Newsletter: your email address, preferred language, and when you confirmed or unsubscribed. You only receive marketing emails after confirming through the link we send.
• Analytics, only if you accept: a random visitor ID with daily page-view and add-to-cart counts, and Google Analytics data about pages viewed, products viewed, carts, and purchases (order number and value). It is not linked to your name or email.
• Security: your IP address is used briefly in memory to limit abusive requests. We do not store it in our database.

Payment information

Card, Alipay and PayPal payments are processed directly by Stripe or PayPal. We never receive or store your full card number, security code, or wallet login.

Why we use it

We use your information on the following legal bases:

• To take, deliver, and support your order, and to manage your account (performance of a contract).
• To prevent fraud, secure the store, and keep accounting and tax records (legal obligations and legitimate interests).
• To send the newsletter and to run visitor analytics (your consent, which you can withdraw at any time).

Service providers

We share information only with providers that help us run the store, and only what each one needs:

• Stripe and PayPal: payment processing and fraud checks.
• Google Analytics: visit and purchase statistics, only if you accept analytics.
• Meta (Facebook, Instagram) and TikTok: measuring visits and purchases from our ads, only if you accept advertising. They receive the pages you view, products added to your cart, and purchase value through their pixels.
• Resend: delivery of order, shipping, account, and password emails.
• Google: sign-in, if you choose Sign in with Google.
• Shipping carriers: your name, address, and phone number to deliver your parcel.
• Our hosting provider: storage of store data on our servers.

Selling and sharing

We do not sell your personal information for money. If you accept advertising cookies, Meta and TikTok pixels receive browsing and purchase events, which California law may treat as "sharing" for cross-context behavioral advertising. Advertising cookies are off unless you turn them on, and we honor Global Privacy Control (GPC) browser signals by keeping them off. You can opt out at any time from Cookie settings in the footer.

Cookies and local storage

Essential storage keeps the store working and cannot be switched off: your cart, language choice, sign-in session, and your cookie choice. Analytics cookies (our visitor ID and Google Analytics) and advertising cookies (Meta and TikTok pixels) are used only after you allow them in the cookie banner. You can change your choice at any time from Cookie settings in the footer; turning analytics off deletes our visitor ID. Stripe and PayPal may set their own cookies on their payment pages.

How long we keep it

• Order and payment records: as long as tax and accounting law requires, normally several years.
• Accounts: until you ask us to delete your account.
• Newsletter: until you unsubscribe through the link in any email. Unconfirmed sign-ups are not emailed again.
• Sign-in, verification, and password-reset links: until they expire.

International transfers

We are based in China, and our service providers operate in several countries, including the United States. Your information may be processed outside your country. Where the law requires it, we rely on safeguards such as the providers' standard contractual clauses.

Your rights

Depending on where you live, including under the GDPR, UK GDPR, and California law (CCPA/CPRA), you may have the right to access, correct, delete, or receive a copy of your information, to object to or restrict its use, and to withdraw consent. Email lwq9997@gmail.com from the address linked to your order or account. We will reply within 30 days and will not treat you differently for using your rights. You may also complain to your local data protection authority.

Security

Passwords are hashed, sign-in sessions use secure cookies, and access to store administration is restricted. No system is completely secure, so please use a strong, unique password.

Children

The store is not directed at children under 16, and we do not knowingly collect their information.

Changes

If we change this policy, we will update the date at the top of this page. Significant changes will be highlighted on the site.