VELARIA

PRIVACY POLICY

Last updated: 10 August 2026

OVERVIEW

Velaria (Pty) Ltd, trading as Velaria ("Velaria", "we", "us", "our"), operates this store and website, including all related information, content, features, tools, products and services, in order to provide you, the customer, with a curated shopping experience (the "Services"). Velaria is powered by Shopify, which enables us to provide the Services to you.

This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us, in accordance with the Protection of Personal Information Act 4 of 2013 ("POPIA").

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described in it. Nothing in this Privacy Policy limits or excludes any right you have under POPIA that cannot lawfully be limited or excluded.

PERSONAL INFORMATION WE COLLECT

We may collect the following categories of personal information, depending on how you interact with the Services:

●       Contact details, including your full name, delivery address, billing address, phone number, and email address.

●       Financial information, including payment card details and transaction details processed on our behalf by our payment processor.

●       Account information, including your username, password, and order preferences, where you create an account.

●       Transaction information, including the items you view, add to your cart, or purchase, and your past order history.

●       Communications with us, including the information you include when contacting our customer support.

●       Device and usage information, including your IP address, browser type, and how you interact with the Services.

HOW WE COLLECT YOUR PERSONAL INFORMATION

We may collect personal information from the following sources:

●       Directly from you, when you create an account, place an order, or communicate with us.

●       Automatically, through your use of the Services, including through cookies and similar technologies.

●       From our service providers, including Shopify, who process personal information on our behalf.

WHY WE PROCESS YOUR PERSONAL INFORMATION

We process your personal information for the following purposes, consistent with the purpose-specification and processing-limitation principles under POPIA:

●       To process your orders, payments, and deliveries, and to provide customer support.

●       To create and maintain your account, where applicable.

●       To send you direct marketing communications, where you have consented, as described below.

●       To detect, investigate, and prevent fraud and to secure the Services.

●       To comply with our legal, tax, and accounting obligations.

DIRECT MARKETING AND CONSENT

Where we wish to send you direct marketing communications by email or SMS, we will only do so with your prior opt-in consent, as required by POPIA, or where you are an existing customer and the marketing relates to similar products or services to those you have already purchased from us.

You may withdraw your consent to marketing at any time, free of charge, using the unsubscribe link in any marketing communication, or by contacting us at info@velaria.co.za. If you opt out, we may still send you non-promotional communications, such as those about your account or an order you have placed.

HOW WE DISCLOSE PERSONAL INFORMATION

We may disclose your personal information to third parties for the purposes described in this Privacy Policy, subject to POPIA. Such circumstances may include:

●       With Shopify and other service providers who perform services on our behalf, such as payment processing, hosting, and delivery.

●       With our couriers, to the extent necessary to deliver your order.

●       Where you direct or consent to disclosure to a third party.

●       Where required to comply with a legal obligation, or to protect and defend our rights.

OUR RELATIONSHIP WITH SHOPIFY

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services in order to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify, and with third parties that may be located in countries other than where you reside, in order to provide and improve the Services for you.

To learn more about how Shopify uses your personal information, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may be able to exercise certain rights over the use of your personal information by Shopify directly through the Shopify Privacy Portal.

CROSS-BORDER TRANSFERS

We, and service providers such as Shopify, may transfer, store, and process your personal information outside South Africa. Where we do so, we will ensure that the recipient is subject to a law, binding corporate rules, or a binding agreement that provides an adequate level of protection for your personal information, consistent with the cross-border transfer requirements of POPIA.

CHILDREN'S PERSONAL INFORMATION

The Services are not directed at children. Under POPIA, we may only process the personal information of a child with the consent of a competent person, such as a parent or legal guardian. If you are a parent or guardian and become aware that your child has provided us with personal information without your consent, please contact us using the details below and we will take steps to delete that information.

SECURITY AND RETENTION OF YOUR INFORMATION

We use reasonable technical and organisational measures to secure your personal information against loss, unauthorised access, and unlawful processing, consistent with the security-safeguards condition under POPIA. However, no security measures are perfect or impenetrable, and we cannot guarantee absolute security.

We retain personal information for as long as needed to fulfil the purposes described in this Privacy Policy, including to maintain your order history, comply with legal and accounting obligations, resolve disputes, and enforce our agreements, after which it is deleted or de-identified in accordance with POPIA.

AUTOMATED DECISION-MAKING

We do not make decisions about you based solely on automated processing, including profiling, that would result in legal or similarly significant effects concerning you, without human involvement.

YOUR RIGHTS AS A DATA SUBJECT

Subject to POPIA, you have the right to:

●       Access the personal information we hold about you.

●       Request correction of inaccurate personal information.

●       Request deletion of personal information we hold about you, subject to any legal obligation we may have to retain it.

●       Object to the processing of your personal information, including for direct marketing purposes.

●       Lodge a complaint with the Information Regulator, as described below.

You may exercise any of these rights by contacting our Information Officer using the details below. We may need to verify your identity before processing your request, as permitted under POPIA. We will not discriminate against you for exercising any of these rights.

OUR INFORMATION OFFICER

Velaria's Information Officer is Carmen Langkilde (Chief Executive Officer), registered with the Information Regulator of South Africa. Any question, request, or complaint about this Privacy Policy or our processing of your personal information should be directed to:

Carmen Langkilde, Information Officer

Velaria (Pty) Ltd

28c Hooper Road, Crestholme, KwaZulu-Natal, 3610, South Africa

Email: info@velaria.co.za

Telephone: +27 60 907 3154

COMPLAINTS TO THE INFORMATION REGULATOR

If you believe we have not adequately addressed a concern about your personal information, or you wish to lodge a complaint directly, you may contact the Information Regulator of South Africa:

Physical address: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001

Website: inforegulator.org.za

General enquiries: enquiries@inforegulator.org.za

POPIA complaints: POPIAComplaints@inforegulator.org.za

THIRD-PARTY WEBSITES

The Services may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their own privacy policies. We do not guarantee and are not responsible for the privacy or security practices of such sites.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on this website and update the "Last updated" date. Where a change is material, we will provide notice as required by applicable law.

CONTACT US

Should you have any questions about this Privacy Policy or our privacy practices, please contact us at info@velaria.co.za or +27 60 907 3154, or write to us at 28c Hooper Road, Crestholme, KwaZulu-Natal, 3610, South Africa.