Privacy Policy
Last updated: May 2026 · Pursuant to Art. 13 GDPR
1. Controller
Pets Veltelo · Email: support@veltelo.com · Website: pets.veltelo.com
2. Legal Bases
Your data is processed on the basis of the following legal grounds under the GDPR:
- Art. 6(1)(b) – Contract performance (order processing)
- Art. 6(1)(c) – Legal obligation (retention requirements)
- Art. 6(1)(a) – Consent (analytics, marketing cookies)
- Art. 6(1)(f) – Legitimate interests (security, operation)
3. Data Collected
3.1 Order Data
When placing an order, we collect: first and last name, email address, delivery address, payment data (processed by Stripe – we do not store card data).
3.2 Technical Data
When visiting our website, the following data is automatically recorded: IP address (anonymised), browser type, operating system, referrer URL, visit time. This data is used for the technical provision and security of the website.
3.3 Cookies
We use necessary cookies for operation (session, shopping cart) and optional analytics and marketing cookies with your consent. Details in our cookie banner.
4. Third-Party Providers
Stripe
Stripe Payments Europe Ltd., Dublin. Privacy policy: stripe.com/en/privacy. Data transfer to the USA on the basis of Standard Contractual Clauses (SCC).
Vercel
Vercel Inc., San Francisco. Server location: EU (Frankfurt). Privacy policy: vercel.com/legal/privacy-policy.
Shipping Provider
We work with vetted shipping service providers. Delivery addresses are only transmitted for order processing.
Microsoft Clarity
Only with consent (analytics cookie). Microsoft Corporation, Redmond, WA. Clarity captures anonymised usage interactions to improve the website. Data transfer to the USA (SCC). Consent can be withdrawn at any time via the cookie banner.
5. Retention Period
Order data: 10 years (statutory retention). Marketing email addresses: until withdrawal. Technical logs: 30 days. Cookies: depending on type, between session and 2 years.
6. Your Rights (Art. 15–22 GDPR)
You have the right to:
- Access (Art. 15) – copy of your stored data
- Rectification (Art. 16) – correction of inaccurate data
- Erasure (Art. 17) – 'right to be forgotten'
- Restriction of processing (Art. 18)
- Data portability (Art. 20) – data in machine-readable format
- Objection (Art. 21) – to direct marketing at any time
- Withdrawal of consent (Art. 7(3)) – cookie consent at any time
Requests to: support@veltelo.com
7. Right to Lodge a Complaint
You have the right to lodge a complaint with a data protection supervisory authority. In Bulgaria: Commission for Personal Data Protection (CPDP), www.cpdp.bg. Alternatively, the supervisory authority of your EU country of residence.