PRIVACY POLICY

VÉLOIR (“we,” “our,” or “us”) operates the website located at veloir.luxe and related digital properties (collectively, the “Platform”) from the United States. This Privacy Policy describes how we collect, use, and safeguard information when you access or use the Platform. By using the Platform, you acknowledge and accept the practices described in this policy.

VÉLOIR is designed to be experienced without requiring you to create an account or provide personal information. We do not require registration, login credentials, or any form of personally identifiable information to access our editorial content. Browsing the Platform is currently anonymous, and the Platform does not currently set cookies.

VÉLOIR may in the future introduce cookies, pixels, or similar technologies to support analytics, advertising, personalisation, or commercial partnerships. If introduced, this Policy will be updated to describe them, and where required by applicable law, consent will be requested before any non-essential cookies or trackers are set.

We do collect a limited set of technical and aggregate information, described below, in order to keep the Platform fast, reliable, and secure.

We do not collect names, payment information, or any data that directly identifies an individual visitor through the ordinary course of browsing the Platform.

If you contact VÉLOIR by email, including to request early access, we receive the email address you send from and the contents of your message. We use this information solely to respond to and manage your request, and we do not add you to any list without your request.

If you turn on Issue alerts, your browser gives us a subscription address and encryption keys issued by your browser’s notification service (for example Apple, Google, Mozilla or Microsoft). We store them, with the dates the subscription was created and last used, only to send you notifications about new Issues. Notification content is encrypted in transit to your device. We do not link the subscription to your identity. Turning alerts off, or blocking notifications in your settings, removes the subscription; subscriptions that stop working are deleted automatically.

In production, the Platform uses Vercel Web Analytics and Vercel Speed Insights. These are cookieless services that report aggregated page views, referrers, approximate geography derived from IP address, general device and browser class, and performance metrics such as load times and Core Web Vitals. Vercel’s handling of this data is described at vercel.com/legal/privacy-policy.

The Platform may also emit privacy-preserving interaction events for product features such as search — for example whether a search returned results, the length of the query (not the query text itself), category filters, and result counts. These events do not include the words you typed, account identifiers, or other personal content. They are sent only through the same first-party Vercel Analytics channel and only when you have not opted out.

You may opt out of analytics collection at any time; the Platform honours an on-device opt-out preference, described further below under On-Device Storage.

We use Sentry, a service of Functional Software, Inc., to monitor the technical health of the Platform. Sentry collects error reports, stack traces, and performance traces that help us diagnose and resolve issues. Email addresses and IP addresses are stripped before this data reaches us.

A small sample of sessions, and sessions in which an error occurs, may additionally be captured as a session replay. All text within a replay is masked and all media is blocked, so no readable content or imagery is recorded. Sentry’s privacy practices are described at sentry.io/privacy/.

IP addresses are processed on a transient basis to apply rate limiting and to guard against abuse. Standard server logs record request metadata, such as user-agent strings, in the ordinary course of operating the Platform.

The Platform uses your browser’s local and session storage, not cookies, to remember a small number of functional preferences on your device, such as whether you have opted out of analytics, items you have saved for later viewing, whether you have dismissed the app-install, Issue-alert, or update-notification prompts, and (for the current browsing session only) how many pages you have viewed, so the install prompt appears only once you have spent some time with the Platform. This information stays on your device and is never transmitted to us.

Analytics data is retained in aggregate by Vercel in accordance with its own retention practices, as described in its privacy policy. Error and performance data collected via Sentry is retained according to Sentry’s standard retention periods. We do not separately extend either retention period.

We implement reasonable technical and organisational measures to protect the information processed through the Platform. The Platform is served over encrypted HTTPS connections, and access to analytics and monitoring dashboards is restricted to authorised personnel. While no method of electronic transmission or storage is completely secure, we take commercially reasonable steps to protect the data we process.

VÉLOIR operates the Platform from the United States, and information described in this Policy is processed in the United States. The Platform is accessible globally, and the third-party service providers described above — Vercel and Sentry — may also process data in jurisdictions outside your country of residence. These transfers are governed by the data processing agreements and safeguards maintained by those providers, including Standard Contractual Clauses where applicable under the General Data Protection Regulation (GDPR).

Depending on your jurisdiction, you may have the right to request access to, correction of, or deletion of data associated with your use of the Platform. Because the data we collect through browsing analytics is anonymous and aggregated, it is generally not possible to identify or retrieve analytics data attributable to a specific individual; correspondence you send us and operational server logs are handled as described in their respective sections above.

You may opt out of analytics data collection at any time using the on-device preference described above under On-Device Storage.

If you are a resident of the European Economic Area, the United Kingdom, or California, you may have additional rights under the GDPR, UK GDPR, or California Consumer Privacy Act (CCPA) respectively. To exercise any such rights, please contact us using the details provided below.

The Platform is not directed at individuals under the age of sixteen. We do not knowingly collect personal information from children. If we become aware that data has been inadvertently collected from a child under sixteen, we will take reasonable steps to delete such data promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. Any material changes will be reflected by updating the effective date at the top of this policy and, where the change is significant, will be posted prominently on the Platform. We encourage you to review this page periodically. Your continued use of the Platform following any changes constitutes acceptance of the revised policy.

If you have questions or concerns regarding this Privacy Policy or our data practices, you may contact us at privacy@veloir.luxe.