Privacy Policy

This Privacy Policy explains what personal data we collect, how we use it, and your rights under applicable data protection laws (including GDPR).

1. Data Controller

Velixo is operated by SERIOUSLY SPOOKY LTD (Company No. 15955015), the controller responsible for your personal data when you interact with our website, products, and services.

2. Data We Collect

• Identity & contact: name, email, phone, shipping/billing addresses.
• Order details: products purchased, order IDs, RMA requests.
• Payment info: processed securely by third-party gateways; we do not store full card details.
• Usage & technical: IP, device/browser type, pages viewed, referral URLs, approximate location.
• Communications: messages you send us (e.g., support, B2B, partnership enquiries).
• Marketing preferences: newsletter opt-ins and consent choices.

3. How We Use Your Data

• To process and deliver orders, RMAs, and customer service requests.
• To manage your account, order history, and communications.
• To improve our site, products, and user experience (analytics).
• To prevent fraud, ensure security, and comply with legal obligations.
• To send optional updates or marketing, when you consent.

4. Legal Bases (GDPR)

• Contract: to fulfil orders and provide requested services.
• Legitimate interests: site security, analytics, improvements, and preventing fraud (balanced with your rights).
• Consent: for optional marketing or certain cookies (you can withdraw at any time).
• Legal obligation: tax, accounting, and regulatory requirements.

5. Sharing Your Data

We share data with trusted providers only as needed to run our business, for example:

• Fulfilment & logistics partners (e.g., on-demand production, shipping)
• Payment processors and fraud-prevention services
• Customer support and communication tools
• Analytics and website performance services
• Professional advisors and authorities when required by law

We do not sell your personal data. Third-party providers act as processors or independent controllers depending on their role and contracts in place.

6. International Transfers

If data is transferred outside the UK/EEA, we use appropriate safeguards (e.g., adequacy decisions or Standard Contractual Clauses) to protect your information.

7. Data Retention

We retain personal data only as long as necessary for the purposes described above and to meet legal/accounting requirements. Retention periods vary by data type and legal obligations.

8. Your Rights

• Access, rectification, erasure, and restriction of processing
• Data portability, where applicable
• Object to processing based on legitimate interests
• Withdraw consent at any time for activities based on consent
• Lodge a complaint with your data protection authority

To exercise these rights, please contact us using the details below. We may need to verify your identity before responding.

9. Cookies & Similar Technologies

We use cookies to operate the site, remember preferences, and analyse performance. For details and your choices, see our Cookie Policy.

10. Security

We implement technical and organisational measures appropriate to the risk (e.g., encryption in transit, access controls). No system is 100% secure; please take care with your account and communications.

11. Children’s Privacy

Our site is not directed to children. We do not knowingly collect personal data from individuals under the minimum age defined by local law. If you believe a child has provided data, contact us to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Updates will be posted on this page with an adjusted “Last Updated” date.

Last updated: October 2025