Privacy

Velscent is the controller for personal data used to sell and deliver an order. Privacy requests use the email on the Contact page.

At checkout, Stripe collects your name, email, phone number, delivery address in Romania, and card details.

Velscent does not store your name, email, phone, address, or card number in its own database. Stripe stores them. We read the name, email, phone, and address from Stripe only to take the payment and fulfil the delivery.

After payment we keep an order record: the Stripe Checkout Session id, payment status, amount, currency, and whether the order has been fulfilled. That record does not include your name or address.

There is no customer account on this site.

We use this data to take and fulfil your order, and to keep a record of the sale.

Stripe keeps the payment and delivery details. If you ask for erasure, those details are deleted in Stripe to the extent payment and tax rules allow.

We keep the order record for as long as accounting law requires us to keep the sale. We do not keep a separate copy of your delivery details.

We share data only as needed to run the shop:

• Stripe, for the payment and for storing the delivery details.
• Supabase, for the order record described above.
• Vercel, for hosting the website. A visit can appear in host logs, including the IP address.

Taking and fulfilling the order rests on the contract with you. Keeping the sale record rests on the legal duty to keep accounts. There is no newsletter and no marketing, so we do not ask for marketing consent.

You can ask us to access, correct, or erase personal data, where the law allows, and to receive a portable copy of data you provided. There is no marketing to object to.

Write to the email on the Contact page, from the email you used at checkout, or include the payment receipt. We find the payment in Stripe, then the matching order. You can also complain to the Romanian data-protection authority (ANSPDCP).