Privacy policy

Privacy Policy

This Privacy Policy describes how Veloma ("we", "us", "our"), collects, uses, and discloses your personal information when you visit or buy from veloma.store (the "Site") or otherwise contact us (together, the "Services"). We are the data controller of your personal information.

Because our products relate to skin conditions, some information about what you buy may be considered health data in certain places. How we handle that is explained below and in our Consumer Health Data Privacy Policy. 

What Personal Information We Collect

Information you give us:

  • Contact details: name, address, phone number, and email.
  • Order information: billing and shipping address, payment confirmation, products purchased, and subscription details.
  • Account information: login details and security information.
  • Customer support information: what you include in messages to us**, including photos you send with a claim**.

Usage Data: we automatically collect information about how you use the Services through cookies, pixels, and similar technologies ("Cookies"). This includes device and browser information, IP address, network information, and how you interact with the Site.

Information from third parties: such as Shopify, our payment processors (who handle your card details; we never see your full card number), and advertising and analytics partners who collect data through tracking technologies when you visit the Site, open our emails, or interact with our ads.

How We Use Your Personal Information

  • Providing products and services: processing payments, fulfilling orders and subscriptions, shipping, returns, refunds, and account management. (EEA/UK legal basis: performance of our contract with you.)
  • Marketing and advertising: sending marketing emails**, and texts where you've opted in to them**, and showing you ads on our Site and other platforms. EEA/UK legal basis: your consent for cookies and marketing messages, or our legitimate interest for emails to existing customers about similar products. You can opt out anytime.
  • Security and fraud prevention: detecting and preventing fraud, including refund abuse and chargeback fraud. (EEA/UK legal basis: legitimate interests.)
  • Customer support and improving our Services. (EEA/UK legal basis: legitimate interests.)
  • We don't ask you about your health, and you don't have to tell us anything about your health to buy from us.
  • Your purchase history (for example, buying a product for jock itch or athlete's foot) and anything you choose to tell our support team may reveal information about a health condition.
  • We don't sell health-related information. We don't use it to build profiles about you, and we don't share it with advertising partners without your consent where the law requires consent.
  • We configure our advertising pixels not to send product names or product-level purchase details to ad platforms [confirm this with your pixel setup; see note below].

Cookies

We use Cookies to power and improve the Site, remember your preferences, run analytics, and, with your consent where required, for advertising. For Shopify's Cookies, see shopify.com/legal/cookies. You can manage your choices through our cookie banner, your browser settings, or our Your Privacy Choices page.

Our Site recognizes the Global Privacy Control (GPC) signal as a valid request to opt out of "sale", "sharing", and targeted advertising for that browser or device, and for your account where we can link them. We don't respond to other "Do Not Track" signals.

How We Disclose Personal Information

  • With service providers who work for us: hosting (Shopify), payment processing, fulfillment and shipping, customer support, analytics, email and SMS, and cloud storage.
  • With advertising and marketing partners, such as Meta and Google, to show you ads, subject to your opt-out rights and, where required, your consent. Health-related information is excluded, as described above.
  • When you direct us to, or with your consent.
  • With our affiliates.
  • In connection with a merger, acquisition, or bankruptcy, to comply with legal obligations, to enforce our terms, or to protect our rights and others' safety.

In the past 12 months, we have "sold" or "shared" (as defined under US state privacy laws) identifiers (name, email, phone), commercial information (records of purchases), and Usage Data with business and marketing partners for advertising. You can opt out at Your Privacy Choices or by enabling GPC.

We do not use or disclose sensitive personal information to infer characteristics about you.

Our Site may link to third-party websites and platforms. We aren't responsible for their privacy practices, so please review their policies.

Children's Data

The Services are not intended for anyone under 18, and we don't knowingly collect their personal information. If you believe a child has given us personal information, contact us and we'll delete it. We don't knowingly sell or share personal information of anyone under 16.

Security and Retention

No security measure is perfect, but we use reasonable safeguards to protect your information. We keep order and transaction records for as long as tax and accounting laws require (generally up to 7 years). We keep account and marketing data until you delete your account or unsubscribe, and support messages for up to 3 years, unless we need them longer to resolve a dispute.

Your Rights

Depending on where you live, you may have the right to:

  • Access / Know what personal information we hold and how we use it.
  • Delete your personal information.
  • Correct inaccurate information.
  • Portability: receive a copy of your information.
  • Opt out of sale, sharing, or targeted advertising.
  • Restrict or object to our processing.
  • Withdraw consent where we rely on it.
  • Appeal a decision we make on your request, by replying to our response.
  • Unsubscribe from marketing using the link in any email**, or by replying STOP to texts**. We may still send you order and account messages.

To exercise these rights, email info@veloma.store or use our Your Privacy Choices page. We'll respond within 30 days (45 days where US state law allows). We may need to verify your identity first. You can use an authorized agent, and we won't discriminate against you for exercising your rights.

Complaints

If you're not satisfied with our response, you may appeal or lodge a complaint with your local data protection authority. For the EEA, see the list of supervisory authorities. In the UK, you can contact the Information Commissioner's Office (ico.org.uk).

International Users

We and our service providers may process your information outside your country. When we transfer data out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (or UK equivalents), unless the destination has an adequacy decision.

Changes to This Privacy Policy

We may update this policy. We'll post changes here with a new "Last updated" date**, and email you about material changes**.

Contact

For privacy questions or requests, email info@veloma.store

Note for you (delete before publishing): the pixel line in Health-Related Information is only true if your Meta pixel and Conversions API are set to send purchase events without product names. Check this in your pixel setup or with whoever manages it. If product names are going to Meta today, either change the setup or delete that line. Don't publish a promise the setup doesn't keep.

Consumer Health Data Privacy Policy (new)

This whole policy is new, so it isn't bolded. Publish it at /pages/consumer-health-data-privacy-policy and link it in the homepage footer as "Consumer Health Data Privacy Policy". Washington requires a homepage link.

Last updated: September 2026

This policy explains how Veloma handles "consumer health data" as defined by Washington's My Health My Data Act, Nevada's SB 370, and similar state laws. It supplements our Privacy Policy.

What consumer health data we collect

  • Purchase information that may suggest a skin condition, such as buying a product marketed for jock itch, athlete's foot, or skin irritation.
  • Information you choose to share with our support team, such as descriptions or photos of symptoms sent with a guarantee claim or question.
  • Browsing activity on product pages for specific conditions, collected through cookies and similar technologies.

Where we get it

Directly from you when you shop, contact us, or leave a review, and automatically from your device when you browse our Site.

Why we collect and use it

  • To process and deliver your order and manage your subscription.
  • To handle support requests, guarantee claims, and refunds.
  • To prevent fraud and meet our legal obligations.
  • For marketing or advertising only with your consent, where the law requires it.

Who we share it with

  • Service providers who process data on our behalf under contract: Shopify (hosting and checkout), payment processors, fulfillment and shipping partners, and customer support and email tools.
  • Advertising partners, only with your separate consent where the law requires it.
  • Authorities, when required by law.

We do not sell consumer health data.

Your rights

Depending on where you live, you can:

  • Confirm whether we collect, share, or sell your consumer health data, and get a list of the third parties and affiliates we've shared it with.
  • Withdraw your consent to our collection and sharing of it.
  • Ask us to delete it. We'll also tell our service providers and the third parties we shared it with to delete it.
  • Appeal if we deny your request, by replying to our decision. If your appeal is denied, you can contact your state Attorney General (for example, the Washington State Attorney General at atg.wa.gov).

To make a request, email info@veloma.store with the subject "Health Data Request". We respond within 45 days, which may be extended by another 45 days where reasonably necessary, and we'll tell you if that happens. We won't discriminate against you for exercising these rights.

Contact

info@veloma.store