Privacy
Last updated: 27 September 2026
This policy explains what personal information Veil collects when you visit our website or buy from us, why we collect it, and your rights over it. If you have any questions, email us at veilatelier25@gmail.com.
Who we are
Veil is a small, independent business based in England that makes handmade journals. For the purposes of UK data protection law, Veil is the controller of the personal information described here. You can reach us at veilatelier25@gmail.com.
What we collect
- Order details: your name, email address, delivery and billing address, phone number (if you give it), and what you ordered.
- Payment details: payments are handled securely by Shopify and our payment providers. We never see or store your full card number.
- Messages: anything you send us by email, social media or our contact form, including details of a commission.
- Email sign-ups: your email address if you join our list to hear about new drops.
- Website data: information about how you use the site, such as your device, browser, pages viewed and approximate location, collected through cookies (see below).
Why we use it
- To make and deliver your order, take payment, and handle returns or refunds. (Needed to fulfil our contract with you.)
- To reply to your messages and work with you on commissions. (Our legitimate interest in running the business and helping you.)
- To send you news about drops, only if you've signed up. You can unsubscribe at any time using the link in any email. (Your consent.)
- To keep the website working and secure, and prevent fraud. (Our legitimate interests.)
- To understand how the site is used, only if you allow analytics cookies. (Your consent.)
- To keep records we're legally required to keep, such as sales records for tax. (Legal obligation.)
Cookies
Some cookies are essential: they keep your bag working and the checkout secure, and they're always on. Others, for analytics and marketing, are only used if you choose to allow them in our cookie banner. You can change your choice at any time using the Cookie settings link at the bottom of every page.
Who we share it with
We never sell your personal information. We only share it with the services we need to run the shop:
- Shopify, which hosts our store and processes orders and payments.
- Payment providers such as Shopify Payments, PayPal, Apple Pay or Google Pay, depending on how you pay.
- Delivery services, so they can deliver your order.
- Authorities, if the law requires it.
Some of these services, including Shopify, may store or process data outside the UK. Where they do, they use legally recognised safeguards, such as UK adequacy regulations or standard contractual clauses, to protect it.
How long we keep it
- Order records: 6 years, as required for UK tax purposes.
- Messages and commission details: for as long as needed to complete your order and deal with any questions afterwards.
- Email sign-ups: until you unsubscribe.
Your rights
Under UK data protection law you have the right to:
- ask for a copy of the personal information we hold about you;
- ask us to correct anything that's wrong;
- ask us to delete your information, where we don't need to keep it;
- ask us to limit how we use it, or object to us using it;
- ask for your information in a portable format;
- withdraw your consent at any time, for example by unsubscribing or changing your cookie settings.
To use any of these rights, email veilatelier25@gmail.com. We'll reply within one month.
Complaints
If you're unhappy with how we've handled your information, please contact us first and we'll do our best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk or on 0303 123 1113.
Children
Our shop isn't aimed at children under 13, and we don't knowingly collect their personal information.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed.