Privacy Policy

Veldic Wear(“we,” “our,” or “us”) operates this website (the “Site”), including the products, content, features and tools available on it. This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit the Site, create an account, make a purchase, or otherwise communicate with us.

By using the Site, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used and disclosed. If you do not agree with it, please do not use the Site.

Where the Terms of Service conflict with this Privacy Policy, this Privacy Policy controls in respect of the collection, processing and disclosure of your personal information.

“Personal information” means information that identifies you, or that can reasonably be linked to you or to another person. It does not include information that is collected anonymously or de-identified so that it can no longer be linked to you. Depending on how you interact with us, where you live, and as permitted by applicable law, we may collect the following:

• Contact details: Your name, billing and shipping addresses, phone number and email address.
• Order and transaction information: The products you view, add to your cart, wishlist, buy, return, exchange or cancel, along with your order history and any reviews you post.
• Account information: Your username, securely hashed password, security settings and preferences, if you create an account.
• Payment information: Card type, last four digits, billing address, transaction amount and payment confirmation. We never receive or store your full card number — that is handled directly by Stripe.
• Communications: Anything you include when you contact support, leave a review, or reply to an email from us.
• Device and usage information: Your IP address, browser type, device, and how and when you interact with or navigate the Site.
• Inferences: Information we derive from the above, such as the products most likely to interest you based on what you have viewed or bought.

We collect personal information from the following sources:

• Directly from you when you create an account, place an order, contact support, or otherwise give us your details.
• Automatically through cookies and similar technologies as you browse the Site — for example, the currency you are shown prices in.
• From our service providers from the vendors who process information on our behalf, such as Stripe and CJ — for example, the tracking number on a shipment.
• From our business partners where they collect information for us to fulfil your order, such as the carrier that delivers your parcel.

Depending on how you interact with us, we use your personal information to:

• Provide the Site and perform our contract with you — process payments, place and ship your order, and arrange delivery.
• Create, manage and secure your account, and send you service messages such as order confirmations and shipping updates.
• Remember your preferences, wishlist and cart, and to tailor the experience — for example, recommending products related to what you have bought.
• Answer your questions, resolve issues, and handle returns, exchanges and refunds.
• Send marketing and promotional communications by email, where you have consented or where otherwise permitted by law. You can unsubscribe at any time.
• Detect, investigate and prevent fraud, abuse and security incidents, and to enforce our terms.
• Improve the Site, our products and your experience, including by understanding which features are used.
• Comply with applicable law and respond to valid legal process, including requests from law enforcement or government agencies.

We do not sell your personal information. In certain circumstances we may share it with third parties for legitimate purposes:

• With the service providers who run parts of our business for us — payments, fulfillment and shipping, email delivery, hosting, database storage and analytics. See Section 6.
• With the payment processor, carrier or fulfillment partner, to the extent needed to deliver your order or process your payment.
• With our business or marketing partners, to provide marketing services where you have consented or where otherwise permitted.
• When you ask us to, or consent to, sharing your information with someone else — for example, if you choose to sign in or share through a social platform.
• With our affiliates or others in our corporate group.
• In connection with a business transaction such as a merger, acquisition or sale of assets.
• To comply with legal obligations (including subpoenas, search warrants and similar requests), to enforce our terms and policies, and to protect or defend the Site, our rights, and the rights of our users or others.

The providers below process information on our behalf. Each operates under its own privacy policy, and you should read it if you want to know more about how they handle data.

We use cookies and similar technologies to keep the Site working, to remember your preferences, and to understand how it is used. We do not use cookies to build an advertising profile of you.

• Essential Cookies: Required for the site to function — keeping you signed in, securing checkout, and remembering your cart. These cannot be switched off.
• Currency Preference Cookies: Remember the currency you picked (or that we detected from your location) so prices are shown consistently on your next visit. These are stored in your browser under “currency” and “currency_source” and last up to one year.
• Cart Storage: If you have not signed in, your cart is kept in your browser’s local storage rather than on our servers. Clearing your browser data clears the cart.
• Analytics Cookies: Used to understand which pages are visited and how the site performs, so we can improve it. These are not used to build an advertising profile of you.

You can control or delete cookies through your browser settings, and most browsers let you block or clear them. Disabling essential cookies may stop the Site working properly — you may not be able to check out or sign in.

More about the Global Privacy Control opt-out signal is at globalprivacycontrol.org.

We keep personal information only for as long as we need it for the purpose it was collected, and then only for as long as we are required or permitted to keep it. In practice:

• Order records are kept for as long as needed to meet tax, accounting and consumer-protection obligations, and to handle returns and disputes.
• Account information is kept while your account is active, and for a reasonable period afterwards so we can honour requests relating to past orders.
• Support correspondence is kept while the matter is open and for a reasonable period afterwards, so we have context if you come back to us.
• Analytics data is kept only as long as needed to produce aggregate reports about how the Site is used.

When we no longer need the information, we delete or anonymize it. If you ask us to delete your information but we are required by law to keep certain records, we will keep only the minimum necessary and will explain this to you.

Depending on where you live, you may have some or all of the rights below. These rights are not absolute — they may apply only in certain situations, and in some cases we may decline a request where the law allows us to.

• Access: Request a copy of the personal information we hold about you.
• Correction: Ask us to correct information that is inaccurate or incomplete.
• Deletion: Ask us to delete personal information we hold about you. Certain records must be kept for tax, accounting and fraud-prevention purposes, so we may retain those.
• Portability: Receive your personal information in a commonly used, machine-readable format, and in some cases have it transferred directly to another provider.
• Opt out of sale, sharing or targeted advertising: Depending on where you live, you may ask us not to sell or share your personal information, or not to use it for targeted advertising. We do not sell personal information for money. If you visit this site with the Global Privacy Control signal enabled, we treat it as a valid opt-out request for your browser and device — and for your account, if we can associate the two.
• Objection and restriction: If you are in the UK or European Economic Area, you may ask us to stop or restrict certain uses of your information.
• Withdraw consent: Where we rely on your consent (for example, to send marketing email), you may withdraw it at any time. Withdrawing consent does not affect processing we carried out before you withdrew it.

Marketing preferences: every marketing email includes an unsubscribe link. If you use it we will stop sending marketing email, though we may still send service messages about your account or your orders.

Do Not Track:apart from the Global Privacy Control, we do not respond to “Do Not Track” signals, because there is no agreed industry standard for them.

We will never discriminate against you for exercising a right. We may need to verify your identity before we can act on a request. In some cases you may appoint someone to make a request on your behalf — we will require proof that they are authorized to act for you, and may still need to verify your identity directly. We respond within the timeframe required by applicable law.

If you have a complaint about how we handle your personal information, please contact us using the details in Section 17. We will acknowledge and investigate your concern and aim to resolve it promptly.

If you are not satisfied with our response, and you live in a jurisdiction that provides for it, you may escalate to your local data protection authority. In the European Economic Area you can find your national authority at edpb.europa.eu. In Canada, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca. Because we are based in Alberta, you may also contact the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca.

If we discover a breach of security safeguards involving your personal information that creates a real risk of significant harm to you, we will report it to the Office of the Information and Privacy Commissioner of Alberta and notify you in accordance with the time limits set by Alberta’s Personal Information Protection Act. Alberta gives organizations up to 60 days to report a breach with real risk of significant harm.

We keep a record of all breaches of security safeguards as required by law, whether or not they are reportable, and we will inform you and any relevant regulator where the law requires it.

We are based in Canada, and some of the providers listed in Section 6 are located in other countries. As a result, your personal information may be stored and processed outside the country you live in.

Where we transfer personal information out of the European Economic Area or the United Kingdom, we rely on an appropriate transfer mechanism — for example, the European Commission’s Standard Contractual Clauses, or an equivalent contract issued by the relevant UK authority — unless the destination country has been found to provide an adequate level of protection.

The Site is not intended for children, and we do not knowingly collect personal information from anyone under the age of majority in their jurisdiction. As of the date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) the personal information of anyone under 16.

If you are the parent or guardian of a child who has given us personal information, contact us and we will delete it — see Section 17.

We use commercially reasonable administrative, technical and organizational safeguards to protect your personal information:

• Encryption of data in transit using TLS/SSL across the whole Site.
• Passwords hashed with bcrypt — never stored in plain text.
• Payment details handled entirely by Stripe, which is PCI-DSS compliant. Card numbers never reach or touch our servers.
• Restricted, need-to-know access to personal information within our team.
• Two-factor authentication available on staff accounts.

No security measure is perfect, and we cannot guarantee absolute security. Information you send us may not be secure while in transit, so please avoid unencrypted channels for sensitive information.

The Site may link to websites or platforms operated by third parties. If you follow a link to a site we do not control, please review its privacy policy and other terms. We do not control and are not responsible for the privacy or security of those sites, or for the accuracy, completeness or reliability of anything found on them.

If you post information publicly or semi-publicly — including on social platforms — it may be visible to other users of the Site and of those platforms, without limitation as to how it is used by us or by them. Including a link does not by itself mean we endorse the content on that platform or the people who run it, except as expressly stated on the Site.

We may update this Privacy Policy from time to time to reflect changes in our practices, our services, or our legal or regulatory obligations. We will post the revised policy on this page, update the “Last updated” date, and provide further notice where the law requires it.

We encourage you to review this page periodically. If a change is material, we will let you know before it takes effect.

Questions about this Privacy Policy, or about how we handle your personal information? Email us at info@veldicwear.com, use our contact form, or call +1 587-938-0694. To exercise any of the rights in Section 9, or to make a complaint under Section 10, please put “Privacy Request” or “Privacy Complaint” in the subject line so it reaches the right person quickly.

We aim to respond to all privacy requests within 30 days, and sooner where the law requires it.