Privacy policy

Privacy Policy

Last Updated: 16 October 2026

This Privacy Policy explains how Veroluma, operated by Max Thomas William ("Veroluma", "we", "us", or "our"), collects, uses, stores, and shares personal information when customers visit veroluma.co, make purchases, contact us, or otherwise interact with our services.

We are committed to handling personal information responsibly and in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Trading Name: Veroluma

Data Controller: Max Thomas William

Business Address:

7 Statham Walk
Manchester M13 9YS
United Kingdom

Email: info@veroluma.co

Telephone: +44 7742 548944

For privacy-related enquiries, please contact us using the details above.

2. Personal Information We Collect

Depending on how you interact with our website, we may collect:

Contact information: Your name, email address, telephone number, billing address, and shipping address.

Order information: Products purchased, order numbers, transaction details, delivery information, returns, exchanges, and refunds.

Payment information: Payment-related information processed by our payment service providers. We may receive limited transaction details needed to administer orders.

Customer service information: Messages, enquiries, and other information provided when contacting us.

Device and usage information: IP address, browser type, device information, cookies, and information about interactions with our website.

Marketing information: Marketing preferences and interactions with promotional communications or advertisements.

3. How We Collect Information

We may collect personal information:

  • Directly from you when placing an order or contacting us

  • Automatically through website interactions

  • Through cookies and similar technologies

  • From payment, fulfillment, delivery, and technology providers

  • From advertising and analytics providers where applicable and legally permitted

4. How We Use Personal Information

We may use personal information to:

  • Process and fulfill orders

  • Arrange shipping and delivery

  • Provide order confirmations and tracking information

  • Process returns, refunds, and exchanges

  • Respond to customer enquiries

  • Provide customer support

  • Process and verify payments

  • Prevent fraud and unauthorized transactions

  • Maintain website security

  • Improve website performance and customer experience

  • Measure advertising effectiveness

  • Send marketing communications where permitted

  • Maintain appropriate financial and business records

  • Comply with legal obligations

  • Establish, exercise, or defend legal claims

5. Legal Bases for Processing

Where required under UK GDPR, we rely on appropriate lawful bases for processing personal information.

Contractual necessity: To process purchases, fulfill orders, arrange delivery, and provide requested services.

Legitimate interests: To maintain business operations, prevent fraud, improve services, and respond to customer enquiries where those interests are not overridden by individual rights.

Consent: Where consent is required, including for certain marketing communications and non-essential cookies.

Legal obligations: To comply with applicable tax, accounting, consumer protection, and other legal requirements.

6. Cookies and Tracking Technologies

Our website may use cookies, pixels, and similar technologies to support website functionality, remember preferences, analyze website performance, and provide advertising where permitted.

Certain cookies are necessary for website functionality.

Non-essential cookies and tracking technologies will be used in accordance with applicable consent requirements.

Where available, customers can manage their cookie preferences through our website's consent controls.

Browser settings may also allow customers to manage or disable certain cookies.

7. Sharing Personal Information

We may share relevant personal information with trusted service providers where reasonably necessary to operate our business.

These may include:

  • E-commerce platform providers

  • Payment processors

  • Fulfillment and logistics partners

  • Shipping and delivery companies

  • Customer support providers

  • Website hosting and technology providers

  • Analytics and advertising providers

  • IT and security providers

  • Professional advisers

  • Government or regulatory authorities where legally required

We share information only where appropriate for the relevant purpose or otherwise permitted by law.

8. Shopify

Our online store operates using Shopify's e-commerce technology.

Shopify may process personal information to provide hosting, checkout, payment-related functionality, security, and other e-commerce services.

Shopify's own privacy practices may also apply to certain processing activities.

9. Order Fulfillment and Delivery

To process and deliver orders, relevant customer information may be shared with fulfillment and shipping providers.

This may include names, delivery addresses, contact details, and order contents.

We limit information sharing to what is reasonably necessary for the relevant service.

10. International Data Transfers

Some service providers may process personal information outside the United Kingdom.

Where international transfers are subject to UK data protection requirements, we will use an applicable lawful transfer mechanism and appropriate safeguards where required.

These may include UK adequacy regulations, approved contractual arrangements, or other legally recognized safeguards.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods may depend on contractual requirements, customer service needs, fraud prevention, legal obligations, accounting requirements, and dispute resolution.

When personal information is no longer required, we will take appropriate steps to delete or anonymize it.

12. Information Security

We use reasonable technical and organizational measures designed to protect personal information from unauthorized access, misuse, loss, alteration, or disclosure.

However, no method of electronic transmission or storage can be guaranteed to be completely secure.

13. Your Data Protection Rights

Subject to applicable law and relevant exceptions, you may have the right to:

  • Request access to your personal information

  • Request correction of inaccurate information

  • Request deletion of personal information

  • Request restriction of certain processing

  • Object to certain processing

  • Request data portability where applicable

  • Withdraw consent where processing relies on consent

  • Object to direct marketing

To exercise these rights, please contact:

info@veroluma.co

We may request reasonable information to verify your identity before processing certain requests.

14. Marketing Communications

Where permitted by law, we may send promotional communications about our products and offers.

Customers can unsubscribe from promotional emails using the unsubscribe link included in those messages.

You may also contact us to update your marketing preferences.

Opting out of promotional communications does not prevent necessary transactional messages relating to purchases or customer service.

15. Children's Privacy

Our website is not specifically directed toward children.

We do not knowingly collect children's personal information in violation of applicable law.

If you believe personal information relating to a child has been collected improperly, please contact us.

16. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy or security practices of websites that we do not operate or control.

We recommend reviewing their privacy policies before providing personal information.

17. Privacy Complaints

If you have concerns about how your personal information is processed, please contact us at:

info@veroluma.co

We will review your enquiry and respond in accordance with applicable legal requirements.

You may also lodge a complaint with the UK Information Commissioner's Office (ICO).

Website: https://ico.org.uk

18. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our business practices, technologies, services, or legal requirements.

Updated versions will be published on our website with a revised effective date where appropriate.

19. Contact Information

For questions regarding this Privacy Policy or your personal information, please contact:

Veroluma
Operator: Max Thomas William

7 Statham Walk
Manchester M13 9YS
United Kingdom

Email: info@veroluma.co
Telephone: +44 7742 548944

Website: https://veroluma.co