Privacy Policy

This website, veyvu.com, is run by VEYVU. In this policy, “we” and “us” mean VEYVU. You can reach us about anything in this policy through our contact form.

If you join the early-access list, we store the email address you enter in our database (hosted by Supabase), together with which part of the site you signed up from and, if you signed up on a product page, which product it was. We use it to send you news about VEYVU, such as launches and new products.

If we use an email service provider to send those emails, your address is also shared with it for that purpose. Depending on how the list is set up, you may be asked to confirm your address by email before you are added.

To prevent abuse, the signup form uses your IP address to limit repeated attempts.

You can unsubscribe at any time using the link in any email, or by contacting us.

If you send us a message through the contact form, we store your name, email address, the topic you chose and your message in our database (hosted by Supabase) so we can reply to you.

To prevent abuse, the contact form uses your IP address to limit repeated messages.

When shopping is open, adding something to your bag sets a cookie (veyvu_cart) so your bag is still there when you come back. It holds a reference to your bag, not your name or payment details, and it expires 30 days after your bag is created. Before shopping opens, this cookie is not set.

Checkout is hosted by Shopify. Your contact, delivery and payment details are entered on the Shopify checkout, where payments are processed under Shopify’s own privacy policy. This website never sees or stores your card number.

When an order is placed, Shopify sends us a copy of its basic details — order number, your name and email address, order status, totals and the items ordered — which we keep in our database (hosted by Supabase) to manage orders, exchanges and customer service. Delivery addresses and payment details stay with Shopify and are not part of that copy.

We use order information to fulfil and ship your order, handle exchanges and questions, prevent fraud and meet our legal, tax and accounting obligations. Your delivery details are shared with the carrier that delivers your order.

This website does not use advertising trackers or analytics tools. The only cookie it sets itself is the bag cookie described above, once shopping is open. If that changes, we’ll update this policy first.

This website is hosted by Netlify. Like any website host, it receives technical information when you visit — such as your IP address, browser type and the pages you request — in order to deliver pages and keep the site secure. Netlify keeps this information according to its own retention practices.

We share personal information only with the service providers that run this website and our store, for the purposes described above: Netlify (hosting), Supabase (database), Shopify (checkout, payments and orders), carriers (delivery) and, if we use one, an email service provider.

We don’t sell your personal information or share it for advertising. We may disclose information if the law requires it, or to protect our rights or the safety of others.

Our service providers may store and process information in the United States and other countries.

Early-access signups: until you unsubscribe or ask us to delete them.

Contact messages: up to 24 months after our last reply, then deleted.

Order records: as long as needed to complete your order and for as long as tax, accounting and other laws require us to keep them.

You can unsubscribe from our emails at any time. You can also ask us for a copy of the personal information we hold about you, or ask us to correct or delete it, by contacting us through the contact form. We’ll verify your request and respond as required by the law that applies to you.

Depending on where you live, you may have additional rights, such as the right to object to or restrict how we use your information, or to complain to your local data protection authority.

We use reasonable measures to protect the information we hold. Our database is only accessible to our own servers, and the site is served over an encrypted connection (HTTPS). No method of storing or sending information is completely secure, but we work to protect yours.

This website isn’t directed at children under 13, and we don’t knowingly collect personal information from them. If you believe a child has given us their information, contact us and we’ll delete it.

We may update this policy from time to time. The date at the top of this page shows when it was last changed. If we make significant changes, we’ll make them clear on this page.