Last updated: 26 May 2026
Velouré SAS ("Velouré", "we", "us") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, and your rights under the EU General Data Protection Regulation (GDPR).
1. Who we are
Velouré SAS is a fragrance house registered in Paris, France. Our registered office is at [Address], 75001 Paris, France. We are the data controller responsible for your personal data.
2. Data we collect
We collect only the data we need to operate the site and fulfil orders:
- Order data — name, email, shipping and billing address, order contents. Collected by our payment processor (Stripe) at checkout.
- Site analytics — anonymised page views, session duration, country, device type. Collected only if you accept analytics cookies.
- Newsletter — your email address, if you subscribe to our journal updates.
- Customer service — any information you choose to share when contacting us.
We do not collect payment card details. Payment is handled directly by Stripe on their PCI-compliant infrastructure.
3. How we use your data
- To process and ship orders (legal basis: performance of contract).
- To send order confirmations and shipping updates (contract).
- To send marketing emails, only if you have explicitly subscribed (consent).
- To improve the site through aggregated analytics (legitimate interest, opt-in).
- To comply with French tax and accounting law (legal obligation).
4. Who we share data with
We share the minimum data needed with carefully chosen processors:
- Stripe — payment processing (United States, GDPR-compliant via Standard Contractual Clauses).
- Shipping partners — name and address, only for the package.
- Email provider — for transactional and newsletter emails.
- Analytics provider — anonymised usage data, only with cookie consent.
We never sell your data.
5. How long we keep data
- Order records: 10 years (French tax law).
- Newsletter subscription: until you unsubscribe.
- Analytics data: 14 months.
- Customer service messages: 3 years.
6. Your rights under GDPR
You have the right to:
- Access the data we hold about you.
- Correct inaccurate data.
- Delete your data ("right to be forgotten"), subject to legal retention requirements.
- Object to processing or restrict it.
- Receive your data in a portable format.
- Withdraw consent at any time.
- Lodge a complaint with the CNIL (the French data protection authority).
To exercise any of these rights, email privacy@veloure.com. We will respond within 30 days.
7. Cookies
See our Cookie Policy for full details.
8. Security
Site traffic is encrypted via HTTPS. Payment data never touches our servers — Stripe handles all card information directly on their PCI-DSS Level 1 infrastructure. We use access controls and encryption on the data we do hold.
9. Changes to this policy
If we update this policy, we will post the new version here and update the date at the top. Material changes will be communicated by email if you are subscribed.