Privacy policy

Last updated: October 21, 2025

Vellinara operates this store and website, including all related information, content, features, tools, products, and services, to provide you, the customer, with a curated digital shopping experience (the "Services"). Vellinara is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your personal information as described herein.

Personal Information We Collect or Process

When we use the term "personal information," we refer to information that identifies or can reasonably be linked to you or another person. Personal information does not include information that is collected anonymously or that has been de-identified, so that it cannot identify or be reasonably linked to you. We may collect or process the following categories of personal information, including inferences drawn from this personal information, depending on how you interact with the Services, where you live, and as permitted or required by applicable law:

  • Contact details: including your name, email address, phone number, and billing address.
  • Financial information: including credit card, debit card, and financial account numbers, payment card information, transaction details, form of payment, payment confirmation, and other payment details.
  • Account information: including your username, password, security questions, preferences (e.g., preferred digital content formats or categories), and settings.
  • Transaction information: including the digital materials you view, put in your cart, add to your wishlist, purchase, or cancel, and your past transactions.
  • Communications with us: including the information you include in communications with us, for example, when sending a customer support inquiry about digital content access or compatibility.
  • Device information: including information about your device, browser, or network connection, your IP address, and other unique identifiers.
  • Usage information: including information regarding your interaction with the Services, such as how and when you interact with or navigate the Services, including browsing digital content categories or viewing product details.
  • Geolocation data: including general location data inferred from your IP address or other information, where permitted by law and with your consent under GDPR.

Personal Information Sources

We may collect personal information from the following sources:

  • Directly from you: including when you create an account, visit or use the Services, communicate with us, or otherwise provide us with your personal information, such as selecting preferred digital content formats.
  • Automatically through the Services: including from your device when you use our products or services or visit our websites, and through the use of cookies and similar technologies.
  • From our service providers: including when we engage them to enable certain technology and when they collect or process your personal information on our behalf.
  • From our partners or other third parties: including business and marketing partners or other third-party sources, as permitted by law.

How We Use Your Personal Information

Depending on how you interact with us or which of the Services you use, we may use personal information for the following purposes:

  • Provide, Tailor, and Improve the Services: We use your personal information to provide you with the Services, including to perform our contract with you, process your payments, fulfill your orders, remember your preferences (e.g., preferred digital content formats or categories), send notifications related to your account, process purchases or cancellations, create, maintain, and otherwise manage your account, facilitate access to digital materials, enable you to post reviews, and create a customized shopping experience, such as recommending digital materials based on your purchases or browsing history. This may include using your personal information to better tailor and improve the Services.
  • Marketing and Advertising: We use your personal information for marketing and promotional purposes, such as to send marketing, advertising, and promotional communications by email or text message, and to show you online advertisements for digital materials on the Services or other websites, including based on items you previously purchased, viewed, or added to your cart and other activity on the Services. In accordance with GDPR, we will obtain your explicit consent for such communications where required.
  • Security and Fraud Prevention: We use your personal information to authenticate your account, provide a secure payment and shopping experience, detect, investigate, or take action regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and secure our Services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We recommend that you do not share your username, password, or other access details with anyone else.
  • Communicating with You: We use your personal information to provide customer support, respond to your inquiries (e.g., about access, compatibility, or issues with digital materials), provide effective services, and maintain our business relationship with you.
  • Legal Reasons: We use your personal information to comply with applicable laws (e.g., GDPR, Czech consumer protection laws, or tax laws), respond to valid legal processes, including requests from law enforcement or government agencies, investigate or participate in civil discovery, litigation, or other adversarial legal proceedings, and enforce or investigate potential violations of our terms or policies.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes subject to this Privacy Policy. Such circumstances may include:

  • With Shopify and service providers: We share your personal information with Shopify, vendors, and other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, and digital content delivery).
  • With business and marketing partners: To provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites, such as recommending digital materials based on your browsing history. Our business and marketing partners will use your information in accordance with their own privacy notices. Under GDPR, you have the right to opt out of the "sharing" of your personal information for targeted advertising.
  • When you direct or consent: When you direct, request, or otherwise consent to our disclosure of certain information to third parties, such as to deliver digital content or through your use of social media widgets or login integrations.
  • Within our corporate group: With our affiliates or otherwise within our corporate group.
  • In connection with business transactions: Such as a merger, acquisition, or bankruptcy, to comply with legal obligations (e.g., responding to subpoenas, search warrants), to enforce applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

Relationship with Shopify

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify, as well as third parties that may be located in countries outside the Czech Republic or the European Economic Area (EEA), to provide and improve the Services. Shopify may use personal information collected about your interactions with our store, other merchants, and Shopify to provide enhanced features. In these circumstances, Shopify is responsible for the processing of your personal information, including responding to your requests to exercise your rights. To learn more about how Shopify uses your personal information and your rights, visit Shopify Consumer Privacy Policy. You may exercise certain rights with respect to your personal information at Shopify Privacy Portal.

Third-Party Websites and Links

The Services may provide links to websites or other online platforms operated by third parties, such as platforms hosting digital content. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms, may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

Children's Data

The Services are not intended to be used by children under the age of 16, as required by GDPR, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child under 16 has provided us with personal information, please contact us to request its deletion. As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we "share" or "sell" (as defined under GDPR or other applicable law) personal information of individuals under 16 years of age.

Security and Retention of Your Information

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or misuse, including encrypted connections (SSL), restricted system access, and secure payment gateways, in compliance with GDPR requirements. However, no security measures are perfect or impenetrable, and we cannot guarantee "perfect security." Any information you send to us may not be secure while in transit. We recommend that you do not use unsecure channels to communicate sensitive or confidential information.

We retain your personal information only as long as necessary to fulfill the purposes outlined in this Privacy Policy, including to maintain your account, provide the Services, comply with legal obligations (e.g., tax or consumer protection laws), resolve disputes, or enforce contracts and policies. After these periods, data is securely deleted or anonymized, in accordance with GDPR retention principles.

Your Rights and Choices

As a resident of the Czech Republic or the European Economic Area (EEA), you have the following rights in relation to your personal information under GDPR, subject to certain limitations and exceptions:

  • Right to Access: You may request access to the personal information we hold about you, including the categories of information, sources, purposes, and recipients.
  • Right to Rectification: You may request that we correct inaccurate personal information we maintain about you.
  • Right to Erasure: You may request that we delete personal information we maintain about you, where applicable under GDPR.
  • Right to Restrict Processing: You may request that we restrict the processing of your personal information in certain circumstances.
  • Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format and, where feasible, request its transfer to a third party.
  • Right to Object: You may object to the processing of your personal information for certain purposes, such as direct marketing.
  • Right to Withdraw Consent: Where we rely on your consent to process your personal information (e.g., for marketing communications), you may withdraw this consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

You may exercise these rights by contacting us using the details below or, where applicable, through our website settings (e.g., cookie preferences or opt-out links). To opt out of targeted advertising, you may adjust your preferences via our website or use tools like the Global Privacy Control (GPC). We will verify your identity before processing your requests, as required under GDPR. You may designate an authorized agent to make requests on your behalf, provided they provide proof of authorization, and we may verify your identity directly.

To manage communication preferences, you may opt out of promotional emails by using the unsubscribe link in our emails. Opting out of promotional communications does not affect non-promotional emails, such as those about your account or orders.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance functionality and improve user experience. Types of cookies include:

  • Essential cookies: Required for website functionality, checkout, and security.
  • Analytics cookies: Help us understand traffic and usage patterns, such as which digital content categories or items you view most frequently.
  • Marketing cookies: Used for personalized advertising, such as recommending digital materials based on your browsing history, only with your explicit consent as required by GDPR.

You can manage or opt out of non-essential cookies through our cookie banner, browser settings, or by visiting www.allaboutcookies.org. For targeted advertising, you may opt out via Google Ads Settings or Facebook Ad Preferences. We will obtain your consent for non-essential cookies in accordance with GDPR.

Complaints

If you have complaints about how we process your personal information, please contact us using the details below. You have the right to lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů) or another supervisory authority in the EEA. Contact details for the Czech Office can be found at www.uoou.cz.

International Transfers

Your personal information may be transferred to, stored, and processed in countries outside the Czech Republic or the European Economic Area (EEA), including Canada or other countries where Shopify or our service providers operate. We ensure that such transfers comply with GDPR requirements, using mechanisms such as the European Commission’s Standard Contractual Clauses or relying on adequacy decisions where applicable.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the revised Privacy Policy on this website, update the "Last updated" date, and provide notice as required by GDPR, such as through email or website notifications.

Contact

For questions about our privacy practices, this Privacy Policy, or to exercise any of your rights, please email us at vellinara555@outlook.com or contact us at Na Zeliskách 1251/2, 635 00 Brno-Bystrc, Czech Republic. For the purpose of applicable data protection laws, we, Vellinara, are the data controller of your personal information.