Privacy Policy

Last updated: May 2026 · Pursuant to Art. 13 GDPR

1. Controller

VELTELO
E-Mail: support@veltelo.com
Website: veltelo.com

2. Legal Basis

The processing of your data is based on the following legal grounds under the GDPR:

  • Art. 6(1)(b) – Contract performance (order processing)
  • Art. 6(1)(c) – Legal obligation (retention requirements)
  • Art. 6(1)(a) – Consent (analytics, marketing cookies)
  • Art. 6(1)(f) – Legitimate interests (security, operations)

3. Data Collected

3.1 Order Data

When placing an order, we collect: first and last name, email address, delivery address, payment data (processed by Stripe – we do not store card details).

3.2 Technical Data

When you visit our website, the following data is automatically collected: IP address (anonymised), browser type, operating system, referrer URL, visit time. This data is used for the technical provision and security of the website.

3.3 Cookies

We use necessary cookies for operation (session, shopping cart) as well as optional analytics and marketing cookies based on your consent. Details are provided in our cookie banner.

4. Third Parties

Stripe (Payment processing)

Stripe Payments Europe Ltd., Dublin. Privacy policy: stripe.com/privacy. Data transfer to the USA based on Standard Contractual Clauses (SCC).

Vercel (Hosting)

Vercel Inc., San Francisco. Server location: EU (Frankfurt). Privacy policy: vercel.com/legal/privacy-policy.

CJdropshipping (Fulfilment)

CJdropshipping Ltd. Delivery addresses are transferred for order processing. Data processing is based on Art. 6(1)(b) GDPR.

Microsoft Clarity (Analytics)

Only with consent. Microsoft Corporation, Redmond, WA, USA. Clarity records anonymised user behaviour (clicks, scrolling) to improve the website. Data is transferred to the USA (SCC). Privacy policy: privacy.microsoft.com. You can withdraw consent at any time via our cookie banner.

5. Retention Period

Order data: 10 years (legal retention obligation). Email addresses for marketing: until withdrawal. Technical logs: 30 days. Cookies: depending on type, between session and 2 years.

6. Your Rights (Art. 15–22 GDPR)

You have the right to:

  • Access (Art. 15) – Copy of your stored data
  • Rectification (Art. 16) – Correction of inaccurate data
  • Erasure (Art. 17) – 'Right to be forgotten'
  • Restriction of processing (Art. 18)
  • Data portability (Art. 20) – Data in machine-readable format
  • Objection (Art. 21) – against direct marketing at any time
  • Withdrawal of consent (Art. 7(3)) – cookie consent at any time

Send your requests to: support@veltelo.com

7. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority. In Bulgaria: Комисия за защита на личните данни (CPDP), www.cpdp.bg. Alternatively, contact the supervisory authority of your EU country of residence.

Terms & ConditionsPrivacy PolicyImprintCancellation Policy