Privacy Policy

Your privacy is important to us. Learn how we collect, use, and protect your personal information.

Data Controller

Company: Velora Rentals Ltd

Location: London, United Kingdom

1. Information We Collect

We collect the following types of information when you use our website:

Personal Information

  • Name and contact details (email address, phone number)
  • Account credentials (username, password)
  • Billing and shipping address
  • Identity verification documents (where required)

Transaction Information

  • Purchase history and order details
  • Payment information and transaction records
  • Communication preferences

Payment and Financial Information

When you make a payment through our platform, we collect and process:

  • Card details (last 4 digits, expiry date, card type) - stored by Stripe, not by us
  • Billing address and postal code
  • Payment method type (card, bank transfer, digital wallet)
  • Transaction amounts, dates, and payment status
  • Payment authorization records
  • Refund and chargeback information
  • Device and browser information used during payment

Important: Full card details are never stored on our servers. All sensitive payment data is securely handled by our PCI-DSS compliant payment processor, Stripe.

Technical Information

  • IP address and browser type
  • Device information and operating system
  • Cookies and similar tracking technologies
  • Pages visited and time spent on our website

2. How We Use Your Information

We use your personal information for the following purposes:

  • Processing and fulfilling your orders and transactions
  • Providing customer support and responding to inquiries
  • Processing payments and managing billing
  • Sending transactional emails (order confirmations, receipts)
  • Improving our website and services
  • Preventing fraud and ensuring security
  • Complying with legal and regulatory requirements
  • Sending marketing communications (with your consent)

3. Legal Basis for Processing

We process your personal data based on:

  • Contract Performance: Processing necessary to fulfill your orders and provide services
  • Legal Obligations: Compliance with UK laws and regulations
  • Legitimate Interests: Operating our business, preventing fraud, and improving services
  • Consent: For marketing communications and optional services

4. Data Sharing and Disclosure

We may share your information with:

  • Payment Processors (Stripe): To securely process your payments and verify transactions. Stripe processes payment data on our behalf and is bound by strict data protection standards. View Stripe's Privacy Policy at stripe.com/privacy
  • Fraud Prevention Services: To verify identity, prevent fraud, and protect against chargebacks
  • Banking and Financial Institutions: For payment authorization, refunds, and dispute resolution
  • Service Providers: Third parties that help us operate our website and business (hosting, email, analytics)
  • Law Enforcement: When required by law or to protect our legal rights

We do not sell your personal information to third parties for marketing purposes.

Payment Security and PCI Compliance

We take payment security seriously and comply with industry standards:

  • Stripe is PCI Service Provider Level 1 certified - the highest level of certification
  • Payment card data is encrypted during transmission using TLS/SSL protocols
  • We never store complete card numbers, CVV codes, or PIN data on our servers
  • Payment processing meets PCI DSS (Payment Card Industry Data Security Standard) requirements
  • Regular security audits and vulnerability assessments are conducted

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, including:

  • Duration of your account and up to 7 years after for legal and tax purposes
  • Until you withdraw consent for marketing communications
  • As required by UK law for financial and business records

6. Your Rights

Under UK GDPR, you have the following rights:

  • Right to Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data in certain circumstances
  • Right to Restrict Processing: Request limitation on how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or for marketing
  • Right to Withdraw Consent: Withdraw consent for processing where applicable

To exercise any of these rights, please contact us.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Secure storage of physical documents in locked facilities
  • Encrypted transmission of sensitive data
  • Access controls limiting who can view your information
  • Regular security assessments and updates

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting a notice on our website or sending you an email.

9. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Velora Rentals Ltd

London, United Kingdom

Please use our contact page to get in touch with us.

Privacy Questions?

If you have concerns about how we handle your data, please get in touch.

Contact Us

Last updated: January 2025