1) Scope

This Privacy Policy explains how we collect, use, share, and protect your personal data when you use our website, checkout, customer support, or any other digital channel (email, chat, messaging apps).

2) Data We Collect

• Identity & Contact: name, email address, phone number, billing/shipping address.
• Order & Fulfilment: purchased items, order IDs, invoices, tracking details.
• Payment: processed securely by third-party gateways (Stripe, PayPal, banks). Velzaai does not store your card details.
• Technical/Usage: IP address, device/browser info, pages viewed, cookies/SDK events.
• Support Records: messages, call/chat notes, attachments (e.g., proof of purchase).

3) How We Use Data (Purposes & Legal Basis)

• Order processing & delivery (contract performance).
• Payments, refunds, fraud prevention (legitimate interests & legal obligation).
• Customer support & service updates (contract performance/legitimate interests).
• Personalization & analytics (consent/legitimate interests).
• Legal compliance (tax, accounting, AML/sanctions).

4) Payments & Security

• Checkouts via PCI-DSS compliant gateways.
• Data transmitted with TLS/SSL encryption.
• Access to sensitive data is restricted to authorized personnel only.
• We do not sell personal data.

5) Cookies & Similar Technologies

We use cookies for site functions (cart, checkout), analytics, and marketing attribution. You can manage cookies in your browser settings; disabling some may affect functionality.

6) Sharing of Data

We share personal data only with:

• Service providers (payments, couriers, warehousing, hosting, email/SMS providers).
• Law enforcement where legally required.

7) International Transfers

Data may be processed in/from China (Shenzhen), USA, UK, EU, UAE, Hong Kong.

• China: PRC PIPL compliance with standard contracts/security assessments.
• EEA/UK: Standard Contractual Clauses or equivalent safeguards.
• Additional technical & contractual safeguards applied.

8) Region-Specific Disclosures (Your Rights)

• EU/UK (GDPR): rights to access, correction, deletion, portability, restriction, objection.
• USA – California (CCPA/CPRA): rights to know, correct, delete, opt-out of sale/share of data (we do not sell data).
• UAE: Federal Decree-Law No. 45 of 2021 rights include access, correction, deletion.
• Hong Kong: PDPO rights include access, correction, fair processing.

Request rights: email Hello@velzaai.com with subject “Privacy Request” and your region.

9) Retention

• Orders/invoices: 6–10 years.
• Support records: 3 years.
• Marketing consents: until withdrawn.

10) Children

Services not directed to individuals under 16 (or higher where law applies). We do not knowingly collect children’s data.

11) Marketing Preferences

You may opt-out of marketing emails anytime via unsubscribe link or Hello@velzaai.com. Transactional emails will continue.

12) Data Accuracy & Your Responsibilities

Please ensure your contact/shipping info is accurate for order fulfillment and communication.

13) Third-Party Links

Our website may link to third-party sites. Their privacy practices apply when you visit them.

14) Changes to This Policy

We may update this Privacy Policy periodically. Updates will appear here with a new “Last Updated” date. Significant changes may also be communicated via email or website notice.

15) Contact

Velzaai – Privacy Team
Shenzhen, China
Email: Hello@velzaai.com