Last Updated: May 21, 2018
At Velvet Report, we respect your privacy and take your privacy rights seriously. We are particularly sensitive to privacy issues on the Internet and have a few fundamental principles:
- We don’t share your personally identifying information with anyone, except as needed to provide service or product support, to comply with the law, or to protect our rights.
- We don’t store personal or customer information on our servers unless required for the on-going operation of our Services.
We recommend that you exercise caution before you voluntarily disclose personally identifiable information to other users, on publically accessible or displayable parts of the Service, or through third-party links on third-party websites or platforms.
If you have questions about deleting or correcting your personal data please contact Support at firstname.lastname@example.org.
The Information We Collect
Names & Other Personally Identifying Information (PII)
There are a few places where we give you an opportunity to provide us your personal information. On those pages, you can order products, make requests, and register to receive materials. The types of personally identifying information (PII) collected on these pages include names, addresses, email addresses, phone numbers, and credit/debit card information. On some pages, you can submit information about other people. For example, if you order a product as a gift online and want it sent directly to the recipient, you will need to submit the recipient's address. Depending upon the activity, some of the information we ask you to provide is identified as mandatory (so that we can provide you with our Services) and some is voluntary. If you do not provide the mandatory data with respect to a particular activity, we may not be able to provide certain Services to you.
We do not and will not send spam, sell or rent your email address to third parties. We do not disclose, sell, share, trade or give away a user’s personal information to third parties, except as needed for completing payment and billing transactions through the services of payment processing vendors.
Like most website operators, our servers automatically collect certain types of non-personally-identifying, technical information, such as the browser type, language preference, referring site, and the date and time of each visitor request. We use this information to better understand how our visitors use our website, and to maintain Services.
In general, you can browse the Site without revealing who you are or any personal information. Internet Protocol addresses indicate the location of a user’s computers or mobile device on a network connected to the Internet. We are, however, able to determine your IP address. We use your IP address to help diagnose problems with our server, to administer our Site, to measure the use of the Site and to improve the content on the Site. In short, we use your IP to gather aggregate demographic information.
The Way We Use Information
Velvet Report discloses potentially personally identifying and personally identifying information only to those of its employees, contractors and affiliated organizations that: (i) need to know that information in order to process it on our behalf or to provide the Services; and (ii) that have agreed not to disclose it to others. Some of those employees, contractors and affiliated organizations may be located outside of your home country; by using the Services you consent to the transfer of such information to them.
We may use your PII for particular purposes such as processing your order, conducting marketing research, to monitor guest traffic patterns and Site usage to help us develop and design the layouts of our websites. and for providing you with the latest Velvet Report updates on vegan luxury, beauty and fashion, promotional information and other information that might be useful to you, should you expressly opt to receive promotional materials. We may share this information with Velvet Report employees or contractors on a need-to-know basis to support your customer relationship and order purchases with Velvet Report.
We may disclose PII if we believe release is necessary to comply with the law, enforce or apply our Terms of Service (the “Terms”) or protect the rights, property, or safety of Velvet Report, our users, or others.
Our Commitment To Data Security
We want you to have continuing trust in Velvet Report and in our Services. In order to prevent unauthorized access, maintain data accuracy, and ensure the correct use of information, we have put in place appropriate physical, electronic, and managerial procedures to safeguard and secure the information we collect online. Any page on the Site that asks you for PII is a secure page employing state of the art encryption to protect your PII from unauthorized use. In order to most efficiently serve you, credit card transactions and order fulfillment are handled by established third party banking, processing agents and distribution institutions. They receive the information needed to verify and authorize your credit card or other payment information and to process and ship your order.
However, since the Internet is not 100% secure and as new technology evolves and emerges, we cannot guarantee that our security measures will prevent third-party interferences from illegally obtaining or tampering with your personal information. We encourage you to help us by also taking precautions to protect your personal data when you use the Services. Make sure you use a secure connection, and do not save sensitive information that you feel might cause your PII to be in jeopardy.
Privacy of Minors
Velvet Report does not sell merchandise for purchase by children (even if certain items featured on the Services may be for use by children, we require a non-minor to make the purchase). If you are under 18 (“minor”), you may not make any purchases on the Site without the involvement of a parent or guardian, but may sign up for Velvet Report Content. Velvet Report does not knowingly solicit or collect personal information from minors, and we will not knowingly link to any third-party website or platform that solicit or collect personal information from minors. If you believe that a minor has disclosed personal information to us or that we have linked to such a third-party or user website or platform, please contact us at email@example.com.
Your Legal Rights
If the General Data Protection Regulation applies to you because you are in the European Union, you have rights under data protection laws in relation to your personal data:
The right of access – that’s a right to make what’s known as a ‘data subject access request’ for copy of the personal data we hold about you;
The right to rectification – that’s a right to make us correct personal data about you that may be incomplete or inaccurate;
The right to erasure – that’s also known as the ‘right to be forgotten’ where in certain circumstances you can ask us to delete the personal data we have about you (unless there’s an overriding legal reason we need to keep it);
The right to restrict processing – that’s a right for you in certain circumstances to ask us to suspend processing personal data;
The right to data portability – that’s a right for you to ask us for a copy of your personal data in a common format (for example, a .csv file);
The right to object – that’s a right for you to object to us processing your personal data (for example, if you object to us processing your data for direct marketing); and
Rights in relation to automated decision making and profiling – that’s a right you have for us to be transparent about any profiling we do, or any automated decision making.
These rights are subject to certain rules around when you can exercise them. You can see a lot more information on them, if you are interested, on the UK Information Commissioner’s Office website.
If you wish to exercise any of the rights set out above, please contact us at firstname.lastname@example.org.
You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
You have the right to make a complaint at any time to the Information Commissioner's Office (“ICO”), the UK supervisory authority for data protection issues (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.