Privacy policy

Privacy Policy

Last updated: September 11, 2026

Data controller. Volpicelli Ecom, sole proprietorship under Swiss law (UID CHE-139.540.118), Rue du Borgeaud 21, 1196 Gland, Switzerland. Contact: contact@velloriya.com, +41 78 907 02 66.

This policy describes how we collect, use and share your personal data when you visit velloriya.com, place an order or contact us. It has been drawn up in accordance with the Swiss Federal Act on Data Protection (FADP) and, for individuals residing in the European Union, the General Data Protection Regulation (GDPR).

1. Data collected

  • Order data: name, shipping and billing address, email, phone number, products ordered, amount. Payment data (card number) is processed directly by our payment providers (Shopify Payments, Klarna, Twint) and is never stored by us.
  • Account and contact data: information you provide when you create an account, write to us or sign up for our newsletter.
  • Browsing data: IP address, device and browser type, pages viewed, cookie identifiers. See the Cookies section.

2. Purposes and legal bases

  • Processing and delivering your orders, handling returns and customer service (performance of the contract).
  • Preventing fraud and securing the website (legitimate interest).
  • Sending you marketing communications if you have consented to them; you can unsubscribe at any time via the link included in every email (consent).
  • Measuring audience and improving the website (consent for non-essential cookies).
  • Complying with our legal obligations, in particular accounting and tax obligations.

3. Recipients

Your data is shared only with the service providers necessary for our services: Shopify International Ltd (store hosting and payment processing), our logistics warehouse and carriers (preparation and delivery of parcels), our payment, email and audience analytics providers, and advertising platforms (Meta, Google) within the limits of your cookie consent. Some of these providers are located outside Switzerland and the European Union, in particular in the United States; such transfers are governed by the European Commission’s standard contractual clauses or an equivalent mechanism recognized by the Federal Data Protection and Information Commissioner.

4. Retention period

Order data is kept for 10 years in accordance with Swiss accounting obligations. Account data is kept for as long as the account is active. Marketing data is kept until you unsubscribe. Browsing data is kept for a maximum of 13 months.

5. Cookies

The website uses strictly necessary cookies (cart, session, security) and, with your consent, audience measurement and advertising cookies. You can change your choices at any time via the “Your privacy choices” page accessible in the footer, or in your browser settings.

6. Your rights

You have the right to access, rectify, erase, restrict the processing of, object to the processing of and port your data, as well as the right to withdraw your consent at any time. To exercise these rights, write to contact@velloriya.com. We respond within 30 days. You may also lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) or, in the European Union, with the supervisory authority of your country of residence.

7. Security

The website is served over HTTPS; payments are processed by PCI-DSS-certified providers. We restrict access to data to those who need it.

8. Minors

The website is not intended for persons under the age of 16, and we do not knowingly collect their data.

9. Changes

We may update this policy; the date of the last update is shown at the top of the page.