Privacy Policy

1. Who is responsible for your data

The controller of your personal data is LOVE BRAND & CO. LIMITED, trading as VIRELTTA. Our company details are on the Legal Information page. For any privacy question or request, email support@vireltta.shop.

2. What we collect

• Order data: name, email, phone number, billing and delivery address, items ordered, order value and currency.
• Payment data: payments are processed by Stripe or PayPal. We receive confirmation of payment, the payment method type and the last four digits of a card; we never receive or store full card numbers.
• Account data: if you create an account, your login email, a securely hashed password and saved addresses.
• Messages: what you send us through the contact form, by email or by phone.
• Technical data: IP address, browser and device type, pages visited and the cookies described in our Cookie Policy. We do not use analytics or advertising trackers.

3. Why we use it and our legal basis

• To take, process, deliver and support your order, including returns and refunds: performance of a contract.
• To prevent fraud and keep payments and the website secure: legitimate interests.
• To answer your messages: legitimate interests or, where it relates to an order, performance of a contract.
• To keep accounting and tax records: legal obligation.
• To remember your cookie, currency and language choices: legitimate interests and, where required, your consent.

We do not send marketing emails and we do not sell your personal data.

4. Who we share it with

• Payment providers: Stripe and PayPal, to process payments and prevent fraud.
• Delivery carriers: your name, address, phone and email so they can deliver and send tracking updates.
• Website hosting and email: our hosting provider (Hostinger), which stores website and order data on our behalf.
• Translation: if you choose a language other than English, the page text is sent to Google’s translation service from your browser, which receives your IP address.
• Authorities: where we are required to by law.

All service providers act under contracts that require them to protect your data.

5. International transfers

Some providers process data outside the UK and the European Economic Area, including in the United States. Where this happens, transfers are protected by adequacy regulations, the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses.

6. How long we keep it

• Order and payment records: 6 years after the end of the financial year of the order, for tax and accounting.
• Account data: until you close your account.
• Contact messages not linked to an order: up to 24 months.

7. Your rights (UK and EU)

You have the right to access your data, correct it, have it erased, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. To exercise a right, email support@vireltta.shop; we reply within one month. You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or the data protection authority in your EU country.

8. United States residents

If you live in California or another US state with a consumer privacy law, you have the right to know what personal information we collect and why, to access it, to correct it and to have it deleted. We collect the categories listed in section 2 for the purposes in section 3. We do not sell or share personal information for cross-context behavioural advertising and we do not use sensitive personal information. We will not discriminate against you for exercising your rights. Send requests to support@vireltta.shop.

9. Security

The website uses HTTPS encryption. Access to order data is limited to people who need it to fulfil and support orders. Payments are handled by PCI DSS certified providers.

10. Children

Our website is not directed at children under 16 and we do not knowingly collect their data.

11. Changes

We will post any changes to this policy on this page with a new “last updated” date.